Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
File: Fv4NAkzduvhoIpEiFYlxRysky00.mft (raw, json)
Hash identifier: KFtraluWqtxlMcNltiCDELPsLzBAEBZ89Xvw+2N242w=
Subject key identifier: B0:3A:7A:EF:AF:A3:2F:94:80:63:D7:EE:66:2E:D7:F3:32:F2:4C:C9
Authority key identifier: 16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
Certificate issuer: /CN=16fe0d024cddbaf868229122158971472b24cb4d
Certificate serial: 0198D660ADFF81EB127C2923877B9E2AA1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:56 +0000
Manifest this update: Sat 23 Aug 2025 10:01:56 +0000
Manifest next update: Sun 24 Aug 2025 10:01:56 +0000
Files and hashes: 1: 4fmXOv2Kgd432CXMCpVRy2AJtbo.roa (hash: 2TQeLzhsNOH6+/qpKP4Ba4rD86mzULZyqA9NmQY2j5A=)
2: Fv4NAkzduvhoIpEiFYlxRysky00.crl (hash: jaREAs6xS0fad0RhuNGrD8oQTdgV1CNRvca/UefFqpA=)
3: ThZzWFH5INkQ7ymiA_IBq-KPEM4.roa (hash: dM5mDKUs0Ppdg4qZBmK0UY+RheCcm2hY4o7VfDpWvQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ad:ff:81:eb:12:7c:29:23:87:7b:9e:2a:a1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fe0d024cddbaf868229122158971472b24cb4d
Validity
Not Before: Aug 23 10:01:56 2025 GMT
Not After : Aug 24 10:01:56 2025 GMT
Subject: CN=b03a7aefafa32f948063d7ee662ed7f332f24cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1a:5f:61:ee:a2:f1:55:63:c1:ca:d9:b9:47:
e3:0b:73:36:b8:97:5a:1a:3b:b4:2a:92:f0:2d:7a:
c5:5c:5e:91:7a:27:45:36:64:59:5e:76:08:28:e0:
db:81:20:b9:41:eb:fc:a9:aa:61:74:68:56:e1:0d:
98:b4:3f:c7:65:f6:5d:e5:57:ce:d5:aa:93:68:8e:
46:17:61:c6:8f:22:c2:a6:6a:61:8b:72:af:50:64:
92:70:97:a8:6e:33:f8:4d:bf:33:d2:a9:d2:20:31:
ea:45:8e:9a:40:16:11:86:98:f8:45:06:c0:5a:54:
a3:76:54:d9:e3:86:05:79:65:6d:db:cb:98:9f:7b:
cf:18:1d:7e:c8:d4:58:5f:20:30:e2:dc:eb:cf:6e:
fb:fc:aa:8e:f7:7e:0c:6d:6f:4d:77:b9:71:4d:45:
7d:38:ad:6d:51:a5:22:90:d7:23:25:57:c3:e0:c3:
f3:90:70:06:07:4b:3d:7f:c8:78:34:6d:a5:38:43:
9b:d6:3e:e4:d7:60:df:01:b8:bc:c1:de:0d:0a:8f:
46:3f:12:20:8d:03:82:ea:65:15:3d:d7:2e:cd:cb:
0d:5a:99:e0:ea:74:44:85:41:a6:49:84:23:a0:02:
7a:f2:1c:00:8e:29:f4:b5:c8:78:94:96:4a:51:22:
df:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3A:7A:EF:AF:A3:2F:94:80:63:D7:EE:66:2E:D7:F3:32:F2:4C:C9
X509v3 Authority Key Identifier:
keyid:16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:0c:79:2f:73:af:ab:42:b5:c3:01:74:8f:a0:40:35:72:5b:
a7:80:01:81:b1:3d:cb:18:bc:ca:0b:48:7b:1e:e6:0a:6e:d7:
f5:b1:43:a5:20:ed:a0:aa:d0:6c:bd:da:4d:a6:c3:80:cd:31:
e5:74:73:5c:61:c7:95:05:ae:78:14:8d:60:c0:fe:7b:af:ed:
80:ca:82:4a:66:50:52:eb:ab:5d:a1:d4:10:27:25:ce:40:24:
68:0c:46:af:bb:2c:5c:cd:2c:4f:e1:cc:65:0f:49:e6:78:0f:
5b:ac:2f:50:ad:92:c4:f0:f0:ac:e0:32:1c:8f:56:34:22:df:
83:e3:dc:56:13:e6:16:54:2b:55:27:ba:00:16:fc:9a:f9:47:
d0:a1:a0:54:ad:67:b5:5d:b5:8f:c0:89:c7:1d:ac:e0:54:bd:
6c:8f:f7:bb:bb:ef:34:2a:7f:59:79:43:e2:ca:b6:9a:0f:e7:
9e:36:c6:2a:78:b7:75:0e:d0:e4:2c:f3:4a:82:15:0c:e7:dd:
66:ab:f1:5c:10:62:9e:aa:5e:8d:7f:3f:04:89:3f:72:59:d1:
de:d0:a8:58:22:64:b2:d9:8c:37:63:34:96:35:22:63:07:15:
37:a0:25:be:45:66:ca:e2:e5:d8:5f:74:47:49:c6:72:e7:a0:
e5:2b:18:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:39 2025 by rpki-client