Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
File: Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft (raw, json)
Hash identifier: VY2IPJBfadQkmCurUSw2Tv4LRh4SdZ561oDCxMugOd0=
Subject key identifier: 28:29:A5:F9:6F:02:B9:E2:00:DD:7E:9C:76:F3:4A:AA:1D:26:6B:B7
Authority key identifier: 16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
Certificate issuer: /CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Certificate serial: 0199FBEA796A3B2B3D60480F09414C5FB9CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:01:11 +0000
Manifest this update: Sun 19 Oct 2025 10:01:11 +0000
Manifest next update: Mon 20 Oct 2025 10:01:11 +0000
Files and hashes: 1: Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl (hash: Duxhm0UJnjwd17Q+YVry0ey/YI3LF6zh/+t6kvPJbew=)
2: WIJApdkXlbEUeEO2cKb4qiLS28o.roa (hash: 1qyiMGZ/E0ICeDVPfHZdxWe+RTO7sCD7GgXGyaWl1c0=)
3: jmPpCt20gyt7K42Iosl951LnaB8.roa (hash: pgMiVWt2zP5Kw215EB82Tgo4s/CVNPF5riSUMPLjECQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:79:6a:3b:2b:3d:60:48:0f:09:41:4c:5f:b9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Validity
Not Before: Oct 19 10:01:11 2025 GMT
Not After : Oct 20 10:01:11 2025 GMT
Subject: CN=2829a5f96f02b9e200dd7e9c76f34aaa1d266bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:f9:39:2b:7d:c9:bd:5d:d7:e1:43:a0:12:
75:b6:24:78:a6:1b:4e:b3:c0:64:78:12:ea:e8:7d:
25:25:2f:f5:ab:23:ec:94:d7:2f:e8:85:be:c9:86:
13:e2:a0:5a:22:24:12:c3:63:e8:9a:b7:57:97:3d:
c3:cc:5c:1e:88:ae:b0:7e:24:ac:e5:9d:ee:cf:52:
35:51:39:33:15:b1:d1:f0:b4:96:af:e4:77:00:ce:
91:9d:dd:76:23:a8:4a:12:76:91:0e:db:b2:d2:62:
ab:34:15:1b:14:b9:52:6e:87:12:c8:d4:4b:2d:56:
ee:e1:b1:f8:b0:18:e8:9b:ce:f0:5c:d0:b3:98:87:
c5:64:e7:58:ae:63:b5:39:51:e1:1f:5e:2b:94:48:
15:26:7e:9c:24:7b:ba:a1:16:93:b7:8b:42:af:a8:
54:be:12:92:1f:9e:98:e4:28:4e:fd:1c:04:d4:6b:
c0:fe:41:d5:f8:62:18:6c:bd:b3:42:33:8c:cd:29:
7f:63:5f:8f:48:63:83:da:1c:6b:c0:37:a4:46:c6:
3f:da:5b:da:48:7a:22:22:21:63:89:48:45:e9:7a:
f1:8f:d0:c1:7d:bb:49:38:b5:62:4a:9d:6b:7a:3b:
e0:57:21:e1:d4:18:16:58:6f:c2:e0:65:45:30:d8:
91:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:29:A5:F9:6F:02:B9:E2:00:DD:7E:9C:76:F3:4A:AA:1D:26:6B:B7
X509v3 Authority Key Identifier:
keyid:16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:19:44:f2:dd:6f:04:68:ff:5b:a9:8b:36:dc:14:2e:3d:52:
d0:5c:f8:6c:1c:ce:33:e3:3e:11:9c:75:10:7d:28:df:86:09:
0d:6e:cb:81:f7:19:af:b0:d0:c8:6a:cf:90:f3:51:95:cf:45:
ad:79:d2:b3:27:bc:c0:85:37:ad:33:4f:da:2f:5d:99:57:bb:
41:23:30:28:e7:5e:2a:88:68:47:3f:72:cd:f5:09:b6:fd:58:
08:c1:46:89:69:1e:10:e4:5f:9e:67:47:ad:07:08:35:47:c4:
fb:93:8d:a9:70:f8:e3:ac:0a:6e:a3:86:c0:3a:a6:ea:5f:ca:
9e:60:03:c7:b3:bd:8d:36:e0:ab:04:f3:aa:bb:2f:d8:35:bf:
31:12:8f:95:0e:f2:d3:e1:26:53:72:a1:d4:20:47:f5:7a:77:
46:26:ab:a2:9e:06:53:bb:6a:62:1a:e3:4c:c7:8c:f2:d3:dc:
4b:3a:ca:2f:1c:52:a8:57:64:5a:28:ff:de:26:3d:84:cf:f8:
ae:c9:29:e7:5b:15:55:48:8c:2b:ae:76:18:7e:d0:15:d4:77:
3d:ba:1c:7a:1b:df:42:01:b6:c3:f0:7c:c2:50:d0:73:7a:15:
37:e9:74:01:61:ce:77:61:46:2e:a0:ab:cd:78:c9:59:b9:21:
0f:45:39:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:39 2025 by rpki-client