Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
File: Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft (raw, json)
Hash identifier: 2q5pmJkveEkK1A+BKHEjUxFDaLg9CdaO2XU19jFewSY=
Subject key identifier: 21:69:60:1F:AB:A2:5B:D4:72:1F:03:3E:06:74:9C:C0:92:58:4E:13
Authority key identifier: 16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69
Certificate issuer: /CN=167d54d8cb6a8309c512605657c2563e3a1aaa69
Certificate serial: 0199FCFD5604AFF4E0D955771EE363EBA2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
Manifest number: 0BAA
Signing time: Sun 19 Oct 2025 15:01:25 +0000
Manifest this update: Sun 19 Oct 2025 15:01:25 +0000
Manifest next update: Mon 20 Oct 2025 15:01:25 +0000
Files and hashes: 1: Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl (hash: oE2AjbbCXq9L3KEsN0+5aU3ZjvDDBYwpBVxrI8b+Kew=)
2: KhY12QXPgZGvijy8NVkM5-EZS4E.roa (hash: CzHA8lyjc+xI7dPqpc2iJoeImIrTVoVteRcgbm8dNIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:56:04:af:f4:e0:d9:55:77:1e:e3:63:eb:a2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167d54d8cb6a8309c512605657c2563e3a1aaa69
Validity
Not Before: Oct 19 15:01:25 2025 GMT
Not After : Oct 20 15:01:25 2025 GMT
Subject: CN=2169601faba25bd4721f033e06749cc092584e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:cb:52:e1:fb:88:4f:cc:a0:c3:86:fc:ab:
82:a1:c5:a1:3a:f9:44:60:2e:3f:a1:76:de:69:14:
eb:b5:44:71:7c:55:f7:43:e9:81:b2:02:ce:0a:0d:
8d:31:13:b5:ce:5e:5d:88:37:68:22:a6:c4:4c:72:
e4:fe:6a:a3:d5:fa:b4:7a:de:76:b0:fb:1d:62:5f:
22:d7:c5:d1:d4:fb:ec:aa:a7:45:9e:ea:df:1e:20:
d2:c3:15:f8:21:64:09:97:40:b0:5b:49:2f:e8:81:
ef:ca:5d:b6:74:55:2d:59:c0:1b:97:6d:61:db:f7:
f0:2b:3c:10:ca:73:f4:d3:4b:68:57:8d:d8:3c:a1:
40:d9:21:cc:d8:3b:cb:81:d5:08:13:63:56:93:ca:
f2:28:4f:79:29:41:3b:38:21:de:6d:24:d0:5a:c8:
f7:9a:83:56:f4:75:0e:46:86:f1:7d:e1:45:4c:da:
0c:c9:ed:4f:f5:5c:c3:15:fa:ac:68:3d:c7:c7:c8:
85:27:16:0e:88:ae:67:55:1a:71:16:b5:cd:4e:18:
11:c5:c5:49:d2:2b:e2:11:44:b1:89:95:3d:e9:e1:
81:19:24:bd:98:9a:9e:51:6e:2c:a2:3f:be:64:25:
22:ec:34:1c:d9:24:fa:e7:61:a5:31:76:f9:e7:2b:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:69:60:1F:AB:A2:5B:D4:72:1F:03:3E:06:74:9C:C0:92:58:4E:13
X509v3 Authority Key Identifier:
keyid:16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:35:f5:06:7e:44:39:f9:ae:5e:1b:d9:b8:74:b4:bb:cd:23:
6e:7c:9c:52:6d:db:b1:d5:a1:4f:5c:d8:e8:3d:92:4b:9e:9d:
a5:fe:ce:58:3b:c0:ea:dc:24:a5:32:bb:a5:db:de:05:59:3d:
a2:d7:18:db:87:1e:24:19:8c:48:87:6c:df:c1:58:27:62:69:
bd:15:40:ff:95:56:5d:51:66:eb:99:80:94:db:09:69:5f:dc:
a1:cb:b7:f6:d8:bb:9b:06:0d:fc:80:ff:2d:37:9e:99:39:31:
23:5f:32:e9:09:44:5f:1a:2c:e3:06:02:47:d2:dc:bd:52:2e:
54:1b:c5:78:5a:4b:df:3b:88:7a:1c:15:2e:82:e6:1a:16:b4:
af:76:88:22:17:8f:af:cb:2d:4b:26:01:be:12:0e:a2:e6:53:
72:09:c9:08:d5:93:33:46:20:81:16:71:0d:ad:83:57:7c:c0:
40:a1:60:59:4e:f7:5c:68:3f:52:7d:8d:1b:6e:aa:9a:2f:a5:
77:c7:ae:39:5d:87:a4:a0:d1:ae:60:fb:e2:90:d4:10:97:c4:
8d:b9:2a:6c:da:21:0c:63:2e:99:85:9e:cc:60:95:82:83:ac:
4f:ef:ea:09:e8:34:04:02:cd:39:b9:88:38:34:b3:ae:73:fa:
c3:1b:a0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:02 2025 by rpki-client