Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
File: FsbhUuwA0rDjB9YZ5388HRQm7vA.mft (raw, json)
Hash identifier: yNw/UXcmMelk+PpibYbHev9q4cF60jOFd2LwhgE15TY=
Subject key identifier: 21:40:AB:F2:8C:F6:4D:CD:2D:09:1D:C9:75:D1:38:15:73:0F:CF:49
Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
Certificate issuer: /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Certificate serial: 0199FB460C016697B1F4A72C01AA58907429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
Manifest number: 0109
Signing time: Sun 19 Oct 2025 07:01:35 +0000
Manifest this update: Sun 19 Oct 2025 07:01:35 +0000
Manifest next update: Mon 20 Oct 2025 07:01:35 +0000
Files and hashes: 1: FsbhUuwA0rDjB9YZ5388HRQm7vA.crl (hash: OmUTvOhUGLKOB/406zHp+AYPhTWsr+FgXIz895r+5v4=)
2: RyU-tKT6g5iQNEPXbzsjbHBM1_k.roa (hash: 2sFbg6PGW25XBrpSEBIs6U3UJCsY2lOFHoiV3xMg67c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:0c:01:66:97:b1:f4:a7:2c:01:aa:58:90:74:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Validity
Not Before: Oct 19 07:01:35 2025 GMT
Not After : Oct 20 07:01:35 2025 GMT
Subject: CN=2140abf28cf64dcd2d091dc975d13815730fcf49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:12:97:a2:45:7d:0e:5b:78:23:b7:c1:e4:
3b:1e:a6:d8:62:98:69:3c:4d:05:af:e2:87:9e:b2:
87:1a:f0:58:65:96:5e:de:31:c1:87:80:74:1f:b8:
7a:13:88:dd:67:ab:ac:9f:de:54:dc:fb:96:41:f6:
82:cd:ce:cf:e5:b8:5d:ad:15:ef:63:c9:aa:90:de:
64:9d:43:e5:5c:88:aa:e0:fa:87:b2:bd:1b:f9:ee:
8f:b9:34:d1:22:f7:e2:d3:3d:6c:20:45:27:d7:3c:
d8:78:73:67:af:9e:50:55:15:e8:e8:7e:d7:e2:b9:
2c:52:d1:e6:c7:4c:ef:11:ba:14:c5:00:e7:ab:0e:
18:b6:0a:5f:1f:2d:10:3c:0a:84:e8:bd:23:b7:be:
40:dc:1d:cd:08:20:8a:7b:35:b1:11:09:07:ee:2b:
a5:92:8d:fc:80:64:d5:42:50:38:a8:23:bf:22:b5:
cb:96:bb:a7:68:4d:f3:12:eb:1e:3c:e9:e3:0d:f5:
1a:0c:74:47:f9:7c:57:54:a5:97:42:31:37:f2:04:
f1:01:8d:1f:39:26:0f:3d:f2:47:0d:c2:c1:ab:0c:
c8:63:c9:dc:be:9a:8a:92:fe:93:de:65:b8:98:63:
fa:40:0d:42:56:ca:93:b7:4d:fe:51:c1:e7:f1:f5:
3e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:40:AB:F2:8C:F6:4D:CD:2D:09:1D:C9:75:D1:38:15:73:0F:CF:49
X509v3 Authority Key Identifier:
keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0b:71:51:fc:82:fb:8d:d7:ca:84:83:3f:8e:30:44:1d:16:
ba:1a:88:ac:7e:e3:dd:27:2e:c4:48:99:e6:0c:87:67:8c:ad:
2b:4b:0c:bd:25:a6:10:a6:0a:22:3f:1c:25:b2:7b:0d:f6:f2:
6f:99:c5:85:66:c0:f0:7a:19:f4:d2:bf:8d:1b:8c:46:84:3b:
3a:f8:e2:d7:e1:c6:73:43:fd:ab:44:b2:89:ff:1c:ae:26:48:
0c:c3:33:df:7f:f2:66:e6:19:0b:ad:13:9b:ba:81:fd:75:6e:
d6:b1:8b:c6:86:ff:81:92:42:ed:37:3d:5f:09:cc:dc:0c:0b:
c8:44:82:40:5b:43:42:be:d7:30:1a:71:c9:f9:fb:de:22:c2:
f0:d2:72:56:58:53:aa:6b:8f:4d:f8:5f:a5:bd:f5:8f:04:b0:
08:95:ec:fe:62:85:a3:5d:86:76:35:94:02:8e:6b:6e:05:0b:
82:34:e7:ff:8a:e2:ef:f4:82:ae:11:56:7e:19:4a:be:ff:86:
79:cd:d1:9f:cf:ac:6c:31:42:fd:e1:4a:99:6f:f1:56:fa:19:
b4:55:54:a7:73:54:da:f5:6d:12:1b:d0:d9:43:84:c0:bb:ea:
6a:3d:f5:3d:30:4b:cb:0a:67:d5:47:81:1f:c9:03:52:43:96:
23:75:3b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:27 2025 by rpki-client