Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
File: FqwWDambNJSla1R8aKjiwJGGkbU.mft (raw, json)
Hash identifier: l3eNxugaiEma+prUKTe1etGDmArCG+cniVps7ICV5EM=
Subject key identifier: D6:86:39:BE:0E:AF:CF:76:4F:1F:3B:FE:BF:0B:14:01:60:59:B2:C3
Authority key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
Certificate issuer: /CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Certificate serial: 0198D54EAB52EB2F0D9934DF3BADC32C2E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
Manifest number: 11C2
Signing time: Sat 23 Aug 2025 05:02:39 +0000
Manifest this update: Sat 23 Aug 2025 05:02:39 +0000
Manifest next update: Sun 24 Aug 2025 05:02:39 +0000
Files and hashes: 1: FqwWDambNJSla1R8aKjiwJGGkbU.crl (hash: 8MNCF9Q3M9zpAPxIpSd4VpbpxGLwCD+JjJNjjWgcDHY=)
2: H9dXCbHCAXGOrGOV28k8umzrLKQ.roa (hash: sDapbNuHEvC3TdmduqXaXIUkjYECPGi1w550P+lUprw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:ab:52:eb:2f:0d:99:34:df:3b:ad:c3:2c:2e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Validity
Not Before: Aug 23 05:02:39 2025 GMT
Not After : Aug 24 05:02:39 2025 GMT
Subject: CN=d68639be0eafcf764f1f3bfebf0b14016059b2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:14:5d:1e:a5:5b:8e:ce:43:08:20:74:24:
7e:93:c0:15:c4:58:1c:4f:6e:37:62:05:05:6b:ac:
ed:81:88:b9:84:bd:4a:39:17:1b:39:97:f1:9a:2c:
7a:61:d7:34:dc:0a:51:80:cc:09:0b:20:35:64:e0:
7e:c8:ea:4c:fd:ed:25:49:12:7a:0a:6c:1a:60:06:
e7:fa:62:47:f5:c4:ee:77:52:05:8d:00:ea:06:20:
17:c7:6d:8e:22:24:e2:e5:e9:ac:50:70:84:40:36:
58:b2:10:c7:02:fe:e0:47:73:37:ad:be:c2:45:e4:
f3:07:95:9c:7e:bc:ee:10:4a:80:0e:58:f9:77:9f:
a6:2e:cd:e3:8f:54:ba:4f:ec:88:d9:82:ad:ef:87:
fd:32:03:7e:b8:29:d9:c1:03:7c:34:7b:a0:e1:4a:
2d:be:62:17:e0:43:4f:92:a8:d6:3b:bc:9b:bd:ee:
3c:80:2b:36:51:9b:ab:87:d9:16:eb:89:eb:b0:70:
0c:43:dd:39:9f:a4:b2:dc:2c:a7:b8:0d:a0:9b:66:
81:cd:2e:85:d0:1c:e8:50:df:42:65:37:58:ca:d1:
25:ad:eb:19:f4:f6:74:8f:2d:1e:13:74:41:a3:09:
18:1b:90:cd:0d:f1:a4:cd:87:1e:5c:a5:37:87:3a:
0a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:86:39:BE:0E:AF:CF:76:4F:1F:3B:FE:BF:0B:14:01:60:59:B2:C3
X509v3 Authority Key Identifier:
keyid:16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6f:6b:f2:04:bd:77:13:d4:f6:55:20:98:32:aa:d1:c4:c9:
31:85:72:9c:13:53:09:a6:32:11:41:40:de:2d:ee:bf:ab:e4:
b0:d2:b3:41:d1:39:1e:27:8a:8f:6b:76:d1:e9:3b:a9:00:29:
e3:37:d2:04:59:b5:45:55:2b:a1:53:8a:63:a5:4b:df:f3:d9:
e9:c3:d4:8a:c1:9a:7c:ba:14:24:ba:cf:0e:af:e2:c6:5c:b5:
d5:35:a3:96:fb:40:5c:7d:fc:a3:3a:75:12:74:64:6e:2f:25:
28:30:e3:19:5b:32:b3:e6:7a:87:ed:01:19:22:9a:a5:39:6a:
31:eb:6a:b3:28:72:29:73:8a:be:72:7b:98:b8:b2:88:f5:3c:
42:49:d5:0d:6b:3b:ac:24:e1:0c:50:19:93:22:78:6b:ce:39:
e4:05:2d:06:16:14:43:b0:72:9e:07:70:c1:65:79:c8:68:8c:
08:e5:0c:59:56:eb:bc:36:6e:d9:63:ef:3c:50:4b:b9:78:70:
ac:c3:8d:62:41:05:2e:0d:c0:53:6d:fa:7a:9d:38:6e:aa:77:
fd:bb:36:82:7b:9f:4a:38:2b:b7:53:60:ba:74:12:35:68:e5:
f8:f5:dc:aa:22:bb:f5:91:2b:19:fd:21:04:1b:a5:6e:cf:4a:
57:a0:4b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:38:42 2025 by rpki-client