
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
File: fsgd4tovClqrQYJhS7zF5BPVUhs.mft (raw, json)
Hash identifier: 1scGBlK7XA1aDCp22bjbJXhMYo+fqv91NmSHkUNQ1lo=
Subject key identifier: 28:B0:E8:DA:BC:48:FB:93:A0:C3:D4:75:9A:25:44:B5:F3:52:18:EC
Authority key identifier: 7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
Certificate issuer: /CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Certificate serial: 0199FB7D0B8777ADF6215794109BE47F490A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 08:01:40 +0000
Manifest this update: Sun 19 Oct 2025 08:01:40 +0000
Manifest next update: Mon 20 Oct 2025 08:01:40 +0000
Files and hashes: 1: Bm4fWDiAgtSgEEDsoqVp0hZs-1U.roa (hash: 4AYDFkMaa0ydrctcy3Ily/9B1nza0T1CPUGQdlaU1vk=)
2: fsgd4tovClqrQYJhS7zF5BPVUhs.crl (hash: 1zQl314XuvqG9vVfO2Sh7CWo9HvTQeKTRE376zjGPd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:0b:87:77:ad:f6:21:57:94:10:9b:e4:7f:49:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Validity
Not Before: Oct 19 08:01:40 2025 GMT
Not After : Oct 20 08:01:40 2025 GMT
Subject: CN=28b0e8dabc48fb93a0c3d4759a2544b5f35218ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:85:49:02:d9:73:a9:aa:03:74:d3:88:a3:
17:28:a9:6e:31:be:b9:8a:34:c8:85:21:a8:28:cf:
7a:c3:58:25:04:35:2c:25:f1:57:5d:8c:10:50:e3:
2f:dd:6c:2c:8a:32:84:1b:0a:91:30:a1:54:67:c1:
08:9c:41:ed:3c:16:55:1c:bf:60:60:e9:30:1a:c2:
ef:24:c5:45:b9:a2:c9:42:47:9c:6b:1a:1a:74:74:
b6:9d:41:e2:4a:2b:a5:dd:1c:7e:76:73:1c:38:32:
a5:f1:48:b6:29:52:16:ea:1c:47:2a:68:36:99:30:
50:14:52:43:e1:76:94:25:75:9a:eb:65:59:f6:92:
33:17:a1:97:8a:e4:54:fc:e6:71:bf:62:b6:1a:e3:
cd:6a:89:28:3b:f3:9f:3b:2e:de:9a:ff:9f:dc:1d:
e4:98:1a:eb:b1:f7:4f:ad:b5:af:e6:0d:cd:af:00:
22:48:2b:55:5a:88:a4:f9:ba:af:23:4f:9c:c2:8d:
4e:29:42:8b:0f:09:ce:f3:c8:f0:78:fc:1a:0f:16:
2e:a1:fd:81:3e:44:6a:22:95:37:93:eb:65:35:5f:
ee:c3:5f:03:23:77:93:8b:99:ec:76:8e:6c:93:39:
9d:1d:b6:69:05:60:c1:5e:63:0c:a3:1c:ee:0d:3b:
04:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B0:E8:DA:BC:48:FB:93:A0:C3:D4:75:9A:25:44:B5:F3:52:18:EC
X509v3 Authority Key Identifier:
keyid:7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:63:e7:03:f9:38:a8:14:cf:17:9f:8a:86:e4:fd:2b:35:42:
1e:9b:57:10:01:45:62:ea:66:22:3d:e2:96:29:d5:70:19:f2:
0a:a3:f0:10:61:14:93:85:ce:8f:ea:66:1c:00:cd:7b:a1:98:
83:a1:00:f1:55:d5:7b:ae:66:15:04:3c:3b:a1:68:83:48:31:
c6:b8:b4:68:86:b7:86:ab:aa:e1:17:c3:71:0f:51:89:ba:41:
12:aa:c4:44:93:fa:a0:2e:f6:e3:59:12:8b:ec:55:fb:47:23:
2d:67:6e:06:d7:d5:7d:37:39:d1:bb:a4:ab:2a:a4:fe:d1:f3:
5b:57:c0:5d:14:2c:f9:fb:a9:34:9f:b0:ff:33:29:ae:1d:ad:
58:90:2e:1f:cb:54:f0:cc:bd:26:e0:53:5f:9c:50:9d:9d:00:
1e:42:2b:a1:49:88:cb:42:2e:a3:58:13:b6:3b:69:10:92:89:
be:98:6f:7c:82:92:64:74:3f:2c:0e:bf:ff:b4:b0:ec:b4:85:
0b:88:6e:90:17:33:7a:e4:c4:22:49:5d:1e:79:4c:33:5c:36:
55:bd:34:7a:2e:90:4e:1b:c1:81:64:44:14:7a:50:27:4e:c7:
15:f5:4b:6f:4f:4a:e0:57:a3:27:b8:6b:20:1a:8f:80:f8:2d:
a3:36:ab:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:22 2025 by rpki-client