Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
File: FmqYZpgAXVfnuS96ONIZu7gP4f8.mft (raw, json)
Hash identifier: 1BtCEUTwFEqgWYn+g+eybpFYwv1HaRMF2kXb53OQIc4=
Subject key identifier: 0B:DB:E5:95:92:44:63:3D:4A:CE:80:66:A1:A0:41:EC:91:9C:0C:A9
Authority key identifier: 16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
Certificate issuer: /CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Certificate serial: 0199FFC74063FCB5D13B0126D1B06A318992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
Manifest number: 116C
Signing time: Mon 20 Oct 2025 04:01:12 +0000
Manifest this update: Mon 20 Oct 2025 04:01:12 +0000
Manifest next update: Tue 21 Oct 2025 04:01:12 +0000
Files and hashes: 1: FmqYZpgAXVfnuS96ONIZu7gP4f8.crl (hash: f+rqO/LYLJK38ro1dAkPo2cipqEU2ZQsrzeUeTl1mkk=)
2: c4nEiNEeJD2vFf8wumBi1yYvs6E.roa (hash: aF0QKy6JcPOas0fgNBBJCKQQxMBB/xZccd3mvICIadY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:40:63:fc:b5:d1:3b:01:26:d1:b0:6a:31:89:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Validity
Not Before: Oct 20 04:01:12 2025 GMT
Not After : Oct 21 04:01:12 2025 GMT
Subject: CN=0bdbe5959244633d4ace8066a1a041ec919c0ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:18:dc:0e:77:7d:b1:3d:1b:65:e4:10:1e:
e6:8d:98:61:53:5c:71:ad:45:5e:e9:c9:66:98:19:
34:ae:6a:2f:e2:d3:a4:86:5c:9d:44:d9:24:ab:7f:
8f:73:ee:9a:ad:ed:23:73:3d:88:5a:18:72:a2:23:
52:66:28:8b:15:f1:32:3c:4d:db:4c:a5:25:cf:e3:
5d:3b:e3:63:1d:45:68:f3:d1:40:b2:ae:a2:e7:f8:
8d:31:af:98:d9:34:ee:cb:d6:c9:5a:e1:a6:28:f0:
ff:93:4d:1a:ec:ca:f1:db:b1:ba:c0:12:d0:f9:a5:
90:b4:1c:9b:b8:1a:70:dc:b5:8d:81:26:9a:89:96:
6e:ae:bb:9a:30:a7:d9:5e:52:ff:cd:25:9e:2b:fc:
8d:6a:e0:8f:63:46:6e:36:b8:06:2d:92:99:f1:b2:
f4:7f:12:5d:ab:9b:ba:8a:f0:a8:71:81:78:12:5c:
57:63:3c:2a:65:84:d1:23:45:fc:e0:bc:8d:5f:4f:
ff:5e:94:98:6b:de:29:89:c7:d4:4a:46:2e:f1:02:
17:ce:73:ea:8a:d7:29:77:32:8e:19:78:97:92:96:
d1:d4:f4:55:da:99:63:42:a1:e0:0b:01:2e:f6:b0:
27:86:bd:e8:bf:41:98:8e:d6:78:80:51:52:f4:a9:
81:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DB:E5:95:92:44:63:3D:4A:CE:80:66:A1:A0:41:EC:91:9C:0C:A9
X509v3 Authority Key Identifier:
keyid:16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:06:ac:8d:81:cb:e5:ba:31:48:17:2f:32:85:d9:2d:20:ba:
87:a6:a6:b0:2c:21:c3:55:2b:19:a5:b3:bc:e9:3b:4a:e3:f5:
cb:8c:64:1e:a5:75:c6:c3:22:a2:a6:8e:9a:5e:81:a6:72:7f:
2a:2f:e0:48:2b:a1:c4:8a:18:98:20:70:ad:b6:f8:57:01:06:
4b:fe:bb:1e:ce:ff:f4:d8:e6:5d:7b:7d:35:24:25:03:43:5e:
2f:78:e3:89:22:df:a9:cf:b4:63:f6:a1:16:91:4f:62:c9:08:
d9:ac:25:a8:60:01:46:10:b0:8b:2f:5d:20:1c:7c:0c:b7:4a:
b9:98:5d:7b:95:3c:3f:a5:fc:4c:d6:de:b9:6f:52:4d:12:93:
07:df:12:5a:64:c4:15:00:58:ed:c7:fa:d6:c2:2d:6a:72:cc:
9f:a9:e3:20:be:90:0f:59:82:38:e9:d7:7d:43:8c:b2:a5:0d:
f9:d6:6b:0a:2b:8e:48:5f:a3:6c:7c:f2:3e:9b:40:b4:f3:4f:
da:dc:6e:d7:44:d0:60:e7:9b:5d:c2:76:26:3c:35:2e:34:18:
02:2b:e4:21:61:fd:57:78:27:d4:39:6e:5e:e7:d4:18:df:9e:
51:2b:6e:22:20:32:5b:42:0e:ab:f3:d6:26:c0:c4:92:e4:8b:
50:b6:9a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:20:48 2025 by rpki-client