Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
File: fm16FsP81nnQXSjtkgk1wIaujP0.mft (raw, json)
Hash identifier: z/dd8RGpyhegz+KttUTQr+AXN6NcXQyQUIj+4C374O8=
Subject key identifier: 1C:AC:DB:F6:12:54:45:B5:EF:A1:7A:9A:96:17:20:E4:6B:1A:40:F0
Authority key identifier: 7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD
Certificate issuer: /CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd
Certificate serial: 0199FBEBC5D79AED6386B1FDEF25A07A8D72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:02:36 +0000
Manifest this update: Sun 19 Oct 2025 10:02:36 +0000
Manifest next update: Mon 20 Oct 2025 10:02:36 +0000
Files and hashes: 1: fm16FsP81nnQXSjtkgk1wIaujP0.crl (hash: K9YmW5hFuJSago5PAoSLP2hLEe6yKROmsXF8aVAOaoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c5:d7:9a:ed:63:86:b1:fd:ef:25:a0:7a:8d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd
Validity
Not Before: Oct 19 10:02:36 2025 GMT
Not After : Oct 20 10:02:36 2025 GMT
Subject: CN=1cacdbf6125445b5efa17a9a961720e46b1a40f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:cf:e4:2c:ae:57:eb:79:cd:28:e3:58:ff:
17:3d:7b:64:d3:18:f4:3e:f4:2f:4a:d4:ff:54:74:
d9:c7:7a:15:52:a8:cb:fb:e2:fc:45:45:4c:05:78:
97:45:43:2c:cc:d3:d5:fe:0f:f5:fa:ac:0a:f5:d0:
c1:9c:7f:55:98:1c:c6:1d:6e:c7:8d:4e:b8:52:e3:
de:cc:74:75:fa:ff:78:86:c9:c4:65:8d:dc:97:26:
96:eb:9f:d4:42:da:ac:78:4c:e2:4f:c0:d4:14:2a:
20:b7:11:61:71:e2:93:ee:88:29:e6:b4:34:8a:c5:
14:17:0a:31:17:70:2f:88:1d:ef:51:3b:ae:93:75:
c8:7d:96:78:fd:c2:cc:d2:45:b9:ef:82:24:6b:8f:
0c:e7:d6:a3:de:6c:66:a1:ec:73:4e:8a:4e:97:e1:
81:40:47:f2:cb:9e:a6:54:4a:0b:a0:51:dc:0a:30:
3c:9f:b9:00:bc:20:88:b7:f1:15:3c:ac:93:17:b5:
f5:58:50:eb:8d:e0:50:bc:6c:ba:de:60:b5:ac:57:
72:f7:56:52:4b:22:9e:c1:f6:99:f2:25:b6:3e:24:
6d:02:b1:d2:6c:97:88:c4:95:65:2f:80:ec:1b:6f:
9d:5b:d5:b4:0c:26:02:96:9b:46:a2:5b:da:1d:42:
4e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AC:DB:F6:12:54:45:B5:EF:A1:7A:9A:96:17:20:E4:6B:1A:40:F0
X509v3 Authority Key Identifier:
keyid:7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:92:d7:14:29:89:d7:1b:8a:d1:75:60:37:65:17:df:79:2b:
26:29:53:3c:0b:44:ba:f2:9b:62:9b:f4:f3:e3:38:34:09:97:
ce:c5:8c:e3:57:b7:bf:5b:fe:64:c6:9c:ec:c2:31:10:70:ac:
63:be:24:9c:75:4e:a2:d9:e8:d1:5b:f9:f2:bd:67:da:92:7e:
8f:7b:c9:54:05:57:88:47:08:00:8f:fd:af:8b:7e:fe:34:bb:
89:3b:dd:80:2a:eb:4a:ac:b3:56:3e:1b:89:6d:32:b5:80:2b:
3d:ed:49:f1:d4:32:f5:5e:ce:d5:d9:0f:8c:cb:4f:a5:af:52:
28:de:a8:11:ec:13:cd:57:d1:77:b1:58:ab:03:87:bb:3f:23:
eb:b3:aa:06:44:84:ee:f2:e6:29:53:7b:f8:b7:71:38:07:72:
89:c3:14:61:4e:e7:77:a2:9b:bf:c5:a1:c8:24:7a:7a:fa:b9:
97:68:25:75:a2:01:c7:8e:fd:0c:d2:e3:7e:23:dd:41:79:a4:
fa:1a:9e:f8:2e:30:ed:e5:10:ae:ec:38:9b:07:e9:f3:fb:3c:
81:c6:f0:61:a1:04:12:89:c8:87:55:d8:a9:b3:df:9e:af:07:
95:f2:50:da:d6:78:8a:b4:e8:ce:ee:c9:a0:ed:5a:4b:8a:71:
85:84:d6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:12 2025 by rpki-client