Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
File: FrGYtu469o3rwjR6Xpj3Efsw8os.mft (raw, json)
Hash identifier: Wz+vjco4uMVVFcFkr3XoeIDMq66ZjjPBzK27txsh6TQ=
Subject key identifier: 86:83:4F:70:30:54:10:0D:1C:09:AE:D3:B2:CB:2A:DB:09:98:8A:D2
Authority key identifier: 16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
Certificate issuer: /CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Certificate serial: 0199FBB36149227FAAF353EB9FDA0AB6126F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
Manifest number: 03E6
Signing time: Sun 19 Oct 2025 09:01:01 +0000
Manifest this update: Sun 19 Oct 2025 09:01:01 +0000
Manifest next update: Mon 20 Oct 2025 09:01:01 +0000
Files and hashes: 1: DUJUsf_8aEBJyZgSgmV9Vwhne5k.roa (hash: 8XNyxo7dqU3caZB7WQMnNM1LcvoL0TWuICCANY2KZkk=)
2: FrGYtu469o3rwjR6Xpj3Efsw8os.crl (hash: 0hKsa4BOjELs3+Dbms/++FaM8OC/WsahtS/zlYC+ucM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:61:49:22:7f:aa:f3:53:eb:9f:da:0a:b6:12:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Validity
Not Before: Oct 19 09:01:01 2025 GMT
Not After : Oct 20 09:01:01 2025 GMT
Subject: CN=86834f703054100d1c09aed3b2cb2adb09988ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:4d:71:c1:0d:42:aa:cb:62:92:41:e7:69:
53:44:50:d6:9d:d3:1b:d1:e7:b5:e3:28:0e:e5:57:
8c:c7:0c:49:30:b2:63:46:75:4c:67:0c:9b:83:2d:
a4:0d:fa:a1:af:7c:e8:e0:15:a0:6d:82:fd:8e:14:
94:3b:87:5e:e8:6b:57:4e:ac:c8:9b:81:1b:e8:c7:
d5:61:e7:da:f2:92:c5:d3:73:75:00:f7:2d:a1:83:
7f:0e:12:84:55:60:32:bc:11:da:5a:63:78:e2:d5:
78:6c:5c:cd:74:58:fa:85:3c:01:fd:85:97:4d:75:
b4:52:a0:0d:6c:24:8e:68:44:25:ba:c9:e9:2f:1e:
62:74:44:92:8c:df:3a:13:05:80:74:cf:73:6d:02:
fc:09:8f:e1:b0:e1:a2:2b:5b:90:a4:98:44:d3:af:
65:ee:59:a8:21:57:f3:9b:33:d6:32:46:1a:ea:82:
03:e6:43:71:e3:52:0e:e8:fb:79:a9:7c:02:64:1a:
11:d6:d6:f9:c3:a4:b8:dc:c6:4a:53:61:b2:8e:63:
f8:1b:5c:ee:54:f6:6a:c2:eb:d8:0b:68:ec:04:6e:
8a:4d:ff:d9:b4:82:fd:da:64:68:9e:38:c1:a3:3e:
af:83:98:d3:67:20:8c:71:86:9d:fa:48:cb:48:38:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:83:4F:70:30:54:10:0D:1C:09:AE:D3:B2:CB:2A:DB:09:98:8A:D2
X509v3 Authority Key Identifier:
keyid:16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6b:cf:b5:a9:bc:5e:4e:4e:97:f0:18:f1:f1:91:78:d5:02:
05:53:77:01:e6:0f:b8:0b:04:33:42:65:d3:fb:e2:10:ed:eb:
4a:a3:81:29:88:ca:80:68:33:77:01:27:8d:1c:41:91:77:52:
53:c1:6e:7a:9c:0e:1e:a5:f1:4e:76:40:29:81:f2:1c:2c:4a:
79:cf:40:38:1e:b1:ca:5b:a0:33:f3:08:2a:33:29:79:d9:fe:
cc:4b:37:c5:cd:d0:33:3f:00:a0:86:e8:94:02:14:c6:a3:4a:
94:62:d3:04:98:ed:c9:37:3b:e2:29:07:56:66:49:5b:21:9f:
34:67:a8:fd:c6:ae:99:b6:60:4a:29:31:34:5f:c4:e7:0d:d9:
b9:a8:d5:db:ff:a6:fc:fa:43:ec:e1:6b:40:d1:9f:30:1f:0b:
a9:9f:5d:98:dd:be:04:84:51:44:58:3b:9b:c8:d5:92:11:04:
0c:2d:4e:1d:b5:7a:e1:ec:e6:a1:0f:a3:7d:42:8b:0b:b2:56:
28:7b:af:87:e3:50:07:0a:b2:f5:d3:fc:b8:b0:e6:1a:81:76:
33:72:a0:ca:8d:0e:b7:d9:93:05:a1:a3:f4:e3:55:af:fc:2f:
13:96:5c:57:83:24:4a:a9:56:57:01:7a:90:60:58:94:dd:95:
8f:99:84:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:34 2025 by rpki-client