Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
File: fIwTcd1q_V_XnqmE2j-9oblK_iM.mft (raw, json)
Hash identifier: GYUKgd1lnJyOBHoOn0i2cyjzo7OFpQK8znrtXzsg4YE=
Subject key identifier: 1B:8C:DD:34:B5:25:C1:6B:4A:EF:1F:3F:9D:8C:10:37:47:D9:DD:DF
Authority key identifier: 7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
Certificate issuer: /CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Certificate serial: 0199FFC7C4D8963C6A07A1CF0CF652F14EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:01:45 +0000
Manifest this update: Mon 20 Oct 2025 04:01:45 +0000
Manifest next update: Tue 21 Oct 2025 04:01:45 +0000
Files and hashes: 1: 4Ze6fHS1CDDIrfDprEE1yu2W5uY.roa (hash: To0AiaOH9TsCon/TYTwvzw2Mel3lXf3uulB0tRaKWIc=)
2: fIwTcd1q_V_XnqmE2j-9oblK_iM.crl (hash: npDMntYlnPut7/hGnFt2OAEf6en9DxW4yqw8Lt+jgVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:c4:d8:96:3c:6a:07:a1:cf:0c:f6:52:f1:4e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Validity
Not Before: Oct 20 04:01:45 2025 GMT
Not After : Oct 21 04:01:45 2025 GMT
Subject: CN=1b8cdd34b525c16b4aef1f3f9d8c103747d9dddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f3:5f:ce:fb:37:80:e9:8c:ba:bd:76:52:bb:
88:88:56:36:1b:13:28:5c:e4:46:5f:23:f3:24:e2:
55:5b:ca:7d:64:db:bd:9b:24:c2:25:bb:82:59:75:
1b:71:ff:b2:c1:da:2f:2d:21:cf:ba:12:6e:7f:fd:
ab:09:5f:bc:bc:7d:22:fe:f2:06:fc:26:e0:76:a9:
b6:6a:2b:21:17:73:6e:c1:65:e2:5a:b9:8d:77:f9:
f3:3e:df:c0:78:51:28:59:07:75:4b:c7:d0:07:cc:
c6:22:9d:b7:88:24:61:31:43:bd:21:41:b8:84:61:
73:a5:e1:68:e2:91:72:79:ca:f2:b1:43:63:23:d7:
db:ff:9d:bd:ea:c6:ed:48:de:bb:e0:81:09:ef:61:
5c:f0:9a:7a:0d:49:a5:70:90:49:9d:98:27:f8:ec:
99:b0:8e:e6:f3:31:e5:93:77:96:d3:48:f5:37:ba:
e4:d7:2e:18:14:cd:39:de:4c:39:0e:b9:77:2c:4f:
77:c9:a0:18:51:c3:de:97:f2:8e:f7:2a:24:a3:f5:
46:82:58:8c:73:d3:db:b5:bb:81:c9:8f:85:7e:41:
38:1f:c0:0d:f5:dc:9b:65:46:04:82:3a:e7:d9:95:
c3:f9:6c:2f:68:d8:eb:0e:f3:3c:2c:2f:b6:3e:77:
0a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8C:DD:34:B5:25:C1:6B:4A:EF:1F:3F:9D:8C:10:37:47:D9:DD:DF
X509v3 Authority Key Identifier:
keyid:7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3c:3f:a8:3d:70:93:b5:b5:dc:99:69:af:a3:88:b2:82:ab:
26:f1:4d:a7:03:4c:7f:cb:4d:43:b5:f2:43:56:06:8d:f3:c4:
4e:28:c1:b5:e2:d3:25:44:21:94:2c:ac:72:cd:8e:2c:ff:2b:
19:4a:25:46:42:dc:db:ae:a6:93:56:65:d9:d9:e5:ad:29:bf:
52:f5:a6:dc:30:2b:f9:c8:11:cd:2f:35:9f:c3:1c:d6:21:b2:
53:8e:ba:fe:5a:22:7f:17:2a:1b:c2:cb:e2:1a:67:a3:f2:2f:
4a:01:3e:99:e1:03:c6:d3:90:aa:e4:29:42:82:61:78:05:e0:
d2:d2:0f:cf:45:5b:ef:5c:51:61:31:da:6e:a6:e9:b6:82:5f:
f1:99:51:be:2a:61:f1:bb:30:30:3d:47:50:72:2f:f6:e4:4c:
37:db:1f:3e:cc:7b:7f:b6:c3:a9:8c:82:0a:e1:7d:5f:88:59:
e0:4c:73:21:8c:05:e6:84:2c:5a:2b:a2:2b:35:ac:b9:65:9d:
48:35:02:5a:03:f2:0e:6c:97:07:ce:c1:cc:a6:00:c8:b5:60:
0a:55:49:50:23:0d:d8:23:82:5b:d7:67:e0:1c:fc:8b:79:b7:
b3:6e:f3:aa:dd:51:0f:76:04:84:3d:0d:cf:c7:e0:53:1c:42:
64:c3:6c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:24:13 2025 by rpki-client