Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
File: fm16FsP81nnQXSjtkgk1wIaujP0.mft (raw, json)
Hash identifier: soGQPiC6xaQXDuqBPPg5aLadZEmW+PJott7dQWaE+VE=
Subject key identifier: 43:5F:87:B5:7B:06:AC:76:B2:78:53:B2:DE:D9:06:0B:E0:FB:54:DB
Authority key identifier: 7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD
Certificate issuer: /CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd
Certificate serial: 0198D4734C9199489946838549D1A18D6770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:03:02 +0000
Manifest this update: Sat 23 Aug 2025 01:03:02 +0000
Manifest next update: Sun 24 Aug 2025 01:03:02 +0000
Files and hashes: 1: fm16FsP81nnQXSjtkgk1wIaujP0.crl (hash: +a1BQJhtblRD6LZshhGOfaU+yf7Fnc5iUbrP5mYqmaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:4c:91:99:48:99:46:83:85:49:d1:a1:8d:67:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd
Validity
Not Before: Aug 23 01:03:02 2025 GMT
Not After : Aug 24 01:03:02 2025 GMT
Subject: CN=435f87b57b06ac76b27853b2ded9060be0fb54db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:0b:dc:cb:db:2d:aa:f0:97:ee:de:9d:b7:
ce:3e:04:73:4d:10:ee:14:a0:1b:f9:5e:5c:9e:e3:
37:c2:97:9b:68:b3:25:9c:87:5e:80:af:a7:46:5e:
9b:f7:9f:04:15:48:ad:99:d6:bc:53:a0:f7:16:78:
5f:5d:01:32:11:b7:5c:eb:95:a8:d2:82:7b:e4:4b:
13:1f:f9:7f:0d:50:f1:0b:3c:3e:f7:24:a2:72:6e:
2c:7e:90:cb:89:a3:61:fc:d4:db:1b:37:fa:1d:41:
48:93:24:99:f6:ea:6e:47:ec:59:14:ce:10:a8:7c:
70:4a:9d:e4:48:75:8b:ae:e9:8b:02:a0:9e:76:78:
8e:27:c5:19:98:3d:ab:b4:dc:b9:ef:1d:52:e3:bb:
ac:d2:6d:2e:91:ff:69:24:99:2b:e3:e9:cf:db:9c:
8d:5c:3b:95:55:51:15:c2:c3:a4:4b:ca:25:16:18:
4a:d1:c6:c2:74:8d:d3:ad:3e:ba:b6:0a:1f:b2:ff:
37:7a:31:60:95:86:22:f6:3b:16:90:5e:ac:ec:8f:
d1:2d:ec:c5:25:98:e0:55:22:13:00:98:59:fe:a8:
92:56:69:42:72:44:eb:0f:a0:4d:64:03:e4:62:45:
63:2b:22:ff:73:c7:dd:8d:a9:66:95:38:48:82:ab:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5F:87:B5:7B:06:AC:76:B2:78:53:B2:DE:D9:06:0B:E0:FB:54:DB
X509v3 Authority Key Identifier:
keyid:7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4d:59:49:bc:4b:66:c2:db:e9:e8:a7:8c:1b:13:0a:a3:16:
8b:89:8b:db:a6:f6:38:c0:36:cd:08:7e:4b:fd:ae:95:c8:a5:
52:a4:42:37:fa:9c:01:f3:99:7f:20:e2:1a:e3:78:4f:21:a8:
13:bf:82:95:b8:5f:9c:4b:98:18:48:fb:b6:68:1b:d7:6d:a3:
3a:2b:d7:d5:19:a5:62:2e:bb:2a:13:1c:3a:74:f1:fb:f3:f3:
27:d9:ad:f6:2f:49:27:8c:6d:9f:13:0d:fe:87:d6:8f:15:42:
de:28:06:4c:05:18:c2:0c:48:0c:ab:82:76:c2:c1:f5:cf:8f:
ff:44:9e:60:1a:0c:21:73:b5:d5:43:aa:a7:05:d0:30:21:74:
e2:58:20:f5:38:d1:ed:22:97:a9:aa:af:5b:e5:81:1d:ac:31:
97:30:21:29:05:eb:8d:dc:5a:12:b6:30:96:f0:b6:c2:78:b9:
69:84:45:b3:5b:c8:8d:6c:b1:8a:a5:51:74:22:3a:4f:f7:e3:
a6:35:3e:b0:32:46:11:c4:bc:18:8a:b0:44:98:b3:a6:b6:8c:
0d:d8:85:6e:8e:4c:4d:ec:c2:91:1b:7e:f2:3a:82:ca:5f:3f:
5d:00:0f:0b:7d:c3:7a:d8:b5:a9:a3:e3:1b:c0:19:a2:07:f9:
45:68:56:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:40 2025 by rpki-client