Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
File: Fv4NAkzduvhoIpEiFYlxRysky00.mft (raw, json)
Hash identifier: eys1AYzSE/ThJN1yQmHrN92Ffj4XLB2qwCMY3sKw/jc=
Subject key identifier: DD:39:97:B7:D8:33:C3:99:DE:5C:7C:F7:01:B7:35:A7:76:59:7A:F1
Authority key identifier: 16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
Certificate issuer: /CN=16fe0d024cddbaf868229122158971472b24cb4d
Certificate serial: 0199FBEB285BE4720C7F2FCCFC79DBABE43F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:56 +0000
Manifest this update: Sun 19 Oct 2025 10:01:56 +0000
Manifest next update: Mon 20 Oct 2025 10:01:56 +0000
Files and hashes: 1: 4fmXOv2Kgd432CXMCpVRy2AJtbo.roa (hash: 2TQeLzhsNOH6+/qpKP4Ba4rD86mzULZyqA9NmQY2j5A=)
2: Fv4NAkzduvhoIpEiFYlxRysky00.crl (hash: alkiysS7NZCoQsIcu8PUPCT2yDL7TCLYbGMQhXvZOw8=)
3: ThZzWFH5INkQ7ymiA_IBq-KPEM4.roa (hash: dM5mDKUs0Ppdg4qZBmK0UY+RheCcm2hY4o7VfDpWvQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:28:5b:e4:72:0c:7f:2f:cc:fc:79:db:ab:e4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fe0d024cddbaf868229122158971472b24cb4d
Validity
Not Before: Oct 19 10:01:56 2025 GMT
Not After : Oct 20 10:01:56 2025 GMT
Subject: CN=dd3997b7d833c399de5c7cf701b735a776597af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f9:d6:5d:0c:b7:a6:a6:a4:6f:e9:92:25:d8:
44:a1:bd:af:39:f0:9c:97:af:6e:c2:f9:0d:bb:e1:
90:e4:d4:93:55:68:44:b9:7b:8b:d0:ee:01:b5:b4:
b4:72:4b:66:a2:09:79:03:bb:e3:28:60:1a:92:0e:
25:47:9c:3f:92:d9:9d:b5:19:f9:34:53:4a:30:c8:
23:bf:83:58:f2:a9:03:a9:75:43:68:c8:4b:8b:f2:
be:49:bc:59:3c:32:27:42:21:2e:69:05:c4:d4:1f:
a6:c9:08:88:b5:3d:ea:df:43:ef:b6:b0:9f:35:11:
10:62:a5:58:c8:39:3b:a2:d0:a5:2f:ef:42:68:c2:
f9:e9:c9:1a:5d:f0:0a:c1:c1:e9:62:d3:44:90:7a:
29:d6:d3:3e:e1:d4:a2:fc:4b:c4:15:e9:5d:b0:82:
85:f9:3e:9f:56:a0:68:fc:70:6b:04:ff:7d:df:f5:
36:09:9b:11:f7:a1:3c:b3:99:be:40:7d:88:9b:c6:
7b:84:64:96:06:73:6c:d7:e8:b1:3c:03:45:b7:af:
9a:44:35:f5:81:1d:76:8f:d5:e6:67:eb:92:f8:1d:
ff:0b:e9:3f:ab:c8:ec:bb:fe:95:90:39:69:b7:3c:
c2:19:c2:64:41:27:8b:fb:e7:d9:af:96:61:4a:c9:
21:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:39:97:B7:D8:33:C3:99:DE:5C:7C:F7:01:B7:35:A7:76:59:7A:F1
X509v3 Authority Key Identifier:
keyid:16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:53:d9:9c:47:8f:ab:7b:c4:ea:25:15:de:89:0f:38:54:da:
c4:f7:c1:c3:16:d7:f6:cf:5c:c7:ed:3a:ce:cf:de:6c:ae:e8:
87:34:86:f6:04:5d:f6:68:5c:b2:71:f8:f3:ec:d9:7a:b7:ed:
a7:29:17:84:d2:24:c1:b5:29:2c:95:e5:ad:af:fd:0d:f1:68:
77:ff:dc:00:b0:e1:75:53:71:7c:76:d3:9b:51:0c:18:6b:69:
f9:bf:fc:f6:42:57:9a:4b:7d:9d:64:a4:04:6a:6f:1b:84:12:
97:48:79:99:19:e4:d1:11:46:b6:eb:bf:54:a7:80:06:b2:b2:
1c:9f:81:9b:60:6b:e4:39:37:7c:77:4e:a4:20:f9:96:58:e1:
68:db:11:12:8a:91:f1:e2:ad:ba:fc:ee:12:08:d0:ce:16:4c:
fd:05:69:1a:a8:17:2b:5a:9d:43:ee:2c:1e:c6:66:73:07:b3:
c2:77:4f:59:95:dc:be:9b:3f:ff:09:a4:9a:c3:95:79:23:96:
80:26:dc:77:b5:ef:14:db:ce:3f:35:13:c4:aa:60:fa:c5:42:
ce:38:05:c2:31:80:e7:d9:30:ad:56:7a:1d:5c:46:9b:23:0d:
5b:3c:3d:47:07:05:11:1d:14:e2:5b:bb:a5:4b:7d:62:9e:bc:
6e:cc:4f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:53 2025 by rpki-client