Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
File: Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft (raw, json)
Hash identifier: kS/4MZddXl2OlTLty+zdtPeHWkKZ/0Qw4e9eBzLhMiw=
Subject key identifier: 3E:CB:87:68:3A:69:F2:DD:4B:71:56:27:40:79:B8:6E:45:9E:CA:DA
Authority key identifier: 16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35
Certificate issuer: /CN=16edcfec9f6e325bc2c39d24193f830f43183135
Certificate serial: 0199FB0F11D1D509D763B330DCC225BFD1F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
Manifest number: 0932
Signing time: Sun 19 Oct 2025 06:01:32 +0000
Manifest this update: Sun 19 Oct 2025 06:01:32 +0000
Manifest next update: Mon 20 Oct 2025 06:01:32 +0000
Files and hashes: 1: Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl (hash: dPQ8h5hXIue/Dxf21Rkmf8eeopemp8J5oSGj0jEXlBM=)
2: a6yjRQPaEVSmn2Af_50hlyGwo-8.roa (hash: f+GvZNBih0mNs6EfHvNm1HRb2NXRxOiIU+W+BUZl09g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:11:d1:d5:09:d7:63:b3:30:dc:c2:25:bf:d1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16edcfec9f6e325bc2c39d24193f830f43183135
Validity
Not Before: Oct 19 06:01:32 2025 GMT
Not After : Oct 20 06:01:32 2025 GMT
Subject: CN=3ecb87683a69f2dd4b7156274079b86e459ecada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ac:09:f0:2f:3d:bb:35:7b:74:5f:fc:b4:dd:
39:50:76:29:c1:48:d4:50:b9:7e:7f:63:92:80:bf:
ce:83:2a:47:31:26:68:af:31:57:59:6d:b6:fb:93:
d2:39:b9:9a:7a:44:0d:e6:54:81:30:ec:79:1a:27:
25:d7:14:10:61:32:a6:04:9f:80:0e:52:0d:90:2a:
47:e9:36:5f:d1:09:8f:75:e0:a3:b8:c0:61:c3:83:
e3:b9:59:cf:c5:7f:d0:bc:e9:1e:25:34:4d:5f:8b:
7b:2a:bc:83:4d:79:e9:08:f7:78:9d:a1:01:52:7c:
95:92:cb:57:50:7b:fa:72:84:15:fd:33:85:80:99:
6b:c8:77:3f:c5:86:8e:a4:90:70:46:a5:b0:88:e2:
35:d6:a5:a1:f4:02:b6:cb:63:b6:7a:34:c8:1d:a6:
2c:30:95:50:90:c2:e7:99:98:27:da:e8:c8:e5:15:
d5:1a:69:0b:f2:65:7e:17:db:1d:39:b1:b7:71:80:
ae:24:52:80:80:d0:78:90:24:1c:97:db:46:52:03:
f6:91:5f:ff:1e:1e:21:30:df:f3:96:3a:2d:9d:cf:
52:22:98:98:9b:2a:d5:e7:36:d1:6b:46:1b:29:d1:
63:9e:95:6e:ca:f0:35:ff:5d:25:2a:ed:4a:f5:a5:
2e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CB:87:68:3A:69:F2:DD:4B:71:56:27:40:79:B8:6E:45:9E:CA:DA
X509v3 Authority Key Identifier:
keyid:16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:be:3b:c7:8c:ff:46:93:aa:34:e7:a9:d8:b6:f5:4f:b4:67:
43:0e:30:f4:9f:c5:92:e4:0b:b2:63:78:51:c3:25:79:ba:84:
dd:2b:77:99:6b:2f:d0:c2:ea:39:ad:c1:d2:6e:0e:bd:52:83:
da:0c:e0:0c:02:89:bf:ee:c4:41:69:42:b9:c9:85:1f:d4:21:
94:11:9b:67:6a:ad:f3:62:0c:9c:4b:36:31:ff:3e:4b:e5:fd:
cd:c3:fa:b5:40:de:32:90:eb:6b:4a:17:b3:4c:50:5a:fa:fb:
ff:8a:13:b8:ef:0c:08:8f:5b:7f:b2:07:fc:5a:70:86:96:6d:
6a:60:30:10:73:0b:de:cc:c9:8d:ee:e6:28:43:ad:db:e1:80:
3b:b3:36:6b:9d:e3:d3:6a:37:1a:7a:e1:cd:4d:e6:0a:6d:bf:
c5:fb:25:e7:51:e0:41:bd:3c:b7:9e:ec:6e:97:d7:81:7b:38:
92:de:fd:1d:a9:3b:d5:73:f7:f1:80:4b:47:95:0d:d1:6b:25:
12:aa:c9:ad:1e:dc:1d:e8:fc:8c:d4:ed:62:d9:3f:0f:9a:08:
72:76:c6:1e:56:31:55:37:f5:34:1e:bb:af:c2:ff:5c:b1:47:
af:a2:f0:e1:28:0e:ae:3b:3c:89:15:91:18:4f:87:39:7e:c9:
5c:2c:39:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:00 2025 by rpki-client