Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
File: FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft (raw, json)
Hash identifier: 0ufgMFSdOrc95lp9JGq1zNTDlUMmlzg22+coQbFsMCw=
Subject key identifier: DD:BB:EF:52:AA:1A:0F:22:FF:FA:E3:4F:6A:55:92:83:C1:0F:59:62
Authority key identifier: 16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
Certificate issuer: /CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Certificate serial: 0199FC58F62EBC65DF15AEC54CC6465DFCA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
Manifest number: 1060
Signing time: Sun 19 Oct 2025 12:01:52 +0000
Manifest this update: Sun 19 Oct 2025 12:01:52 +0000
Manifest next update: Mon 20 Oct 2025 12:01:52 +0000
Files and hashes: 1: FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl (hash: 4hThtvmt/diN8WaWIkgI7q8ExMlh4dnq/29Q7itRlOA=)
2: sdQpr9vBWbo2oFyAIJwywqV94V0.roa (hash: q2Hm5+yXKjxuN/cBMa4LO9usoHIS/gexRqRStEbsYf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f6:2e:bc:65:df:15:ae:c5:4c:c6:46:5d:fc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Validity
Not Before: Oct 19 12:01:52 2025 GMT
Not After : Oct 20 12:01:52 2025 GMT
Subject: CN=ddbbef52aa1a0f22fffae34f6a559283c10f5962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:59:81:46:4e:55:ee:b2:9a:e3:53:75:c4:
46:1e:5c:c2:bf:11:7b:44:69:06:8c:b2:69:33:63:
ba:bf:1f:ef:c0:f9:20:59:56:25:39:a8:1f:ef:cc:
75:a5:d5:5e:35:f4:5b:fc:4c:0d:d3:f6:5b:5d:e4:
8d:b3:98:60:c8:dc:d9:ba:79:32:fb:c8:f3:4b:48:
48:80:a0:c2:85:c1:40:cb:3c:32:37:44:2b:54:dd:
61:e0:32:76:ca:ef:cd:11:64:a5:a4:a6:c2:e3:90:
c3:2b:73:ea:cd:2a:15:c2:e9:72:9f:ab:87:ef:f3:
fc:42:74:c2:0b:44:9e:35:80:fe:f2:0e:8c:ec:f5:
c1:df:55:23:2d:94:75:29:fb:8f:2b:03:ea:9b:0d:
4f:57:8b:c0:cc:34:aa:02:ee:6f:56:95:97:67:08:
4f:65:aa:ba:e5:7f:32:8a:b1:1a:16:f5:53:04:9c:
af:60:54:ff:2b:44:17:3f:7d:37:c8:3a:7e:29:7c:
64:01:d7:70:29:df:6f:99:f8:a9:01:9d:24:4b:d2:
a0:cc:12:3e:9b:16:13:93:1c:09:56:6e:31:b8:7f:
d1:94:24:c9:06:7a:6c:3c:41:b5:e0:3c:f6:e0:93:
d7:f8:1f:92:c1:d8:26:a2:c8:76:bc:6b:31:22:07:
31:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BB:EF:52:AA:1A:0F:22:FF:FA:E3:4F:6A:55:92:83:C1:0F:59:62
X509v3 Authority Key Identifier:
keyid:16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ba:4a:0a:06:ba:5e:30:58:9e:62:cb:5c:fa:cf:b1:5f:18:
af:6b:85:31:c2:de:c7:a2:9f:c7:dc:45:ab:37:00:f1:04:ff:
d7:7c:5f:51:3c:86:f5:f3:c1:a5:2d:de:54:24:ec:40:94:b8:
a8:ba:45:64:06:57:ce:66:e0:b3:5f:20:92:eb:0a:77:01:16:
65:0c:2b:89:14:f3:8c:98:cb:b6:d6:90:87:84:e7:c4:66:26:
4b:bd:48:00:e9:9e:1e:fa:61:fc:ac:62:61:03:49:7e:0d:d2:
9a:8f:43:6f:10:58:62:cc:39:b9:e1:5f:9c:bf:4c:ec:d0:e7:
af:1e:82:ab:7f:a7:15:46:28:e2:7d:90:9b:11:04:3b:ca:87:
08:c4:93:0a:be:1f:7a:d0:a0:8c:f9:df:0e:69:5f:e7:65:89:
8d:e0:80:af:53:8b:75:c9:4b:99:40:55:29:a7:53:10:44:65:
49:23:1e:03:95:ed:da:2a:56:79:e6:a9:25:42:e5:e7:07:69:
c2:03:e4:52:c3:5b:64:e0:88:e3:9b:81:b9:f3:06:71:84:4d:
be:48:4b:a5:6e:81:8a:ef:58:f9:7b:0a:23:8d:25:6d:2c:d4:
f3:8f:84:de:1d:22:42:b9:d0:9f:00:e9:c8:8e:88:ed:d6:71:
31:72:e3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:53 2025 by rpki-client