Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
File: FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft (raw, json)
Hash identifier: 1vz+sJKlGVmUHawdNlnnBW1kVBgh3c1n/cguK4/I0AI=
Subject key identifier: B4:87:DB:D2:42:53:51:38:AD:F1:58:8D:CA:78:3B:9D:5D:12:23:E1
Authority key identifier: 16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED
Certificate issuer: /CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed
Certificate serial: 019A0291159E4E5F36FB9FD8430847DF5AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 17:00:53 +0000
Manifest this update: Mon 20 Oct 2025 17:00:53 +0000
Manifest next update: Tue 21 Oct 2025 17:00:53 +0000
Files and hashes: 1: FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl (hash: WCGz28/6J1OGFl2kmK4n+nlcwQIploWrYiCOz/9K38k=)
2: Tz0-GH9GTxNnsSYKPK-Ng0bqHFU.roa (hash: 6KAfAR9FK4FJFxLsDkhMRqDlSfVSMvMOJuzMsurfhN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:91:15:9e:4e:5f:36:fb:9f:d8:43:08:47:df:5a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed
Validity
Not Before: Oct 20 17:00:53 2025 GMT
Not After : Oct 21 17:00:53 2025 GMT
Subject: CN=b487dbd242535138adf1588dca783b9d5d1223e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:49:8c:6b:31:de:55:bd:18:63:2a:28:46:
e2:b8:de:9c:5d:6d:e4:a4:02:5a:a0:ad:ef:2f:9d:
91:e7:5c:9d:0f:b9:01:d4:d5:41:24:ae:11:6d:2e:
ee:4f:60:c7:b7:3c:57:db:60:67:6b:fe:69:61:12:
22:0d:f9:55:04:b7:d8:fa:8f:35:54:70:44:04:90:
bd:f5:75:3c:83:3d:95:0e:7a:b9:33:ae:69:53:5e:
1a:a4:a6:c5:ce:13:86:f2:4a:28:40:00:52:7c:57:
ac:19:02:3a:64:c0:3a:f2:c0:c7:60:1c:83:c3:58:
ee:18:a7:c6:e0:3c:fd:4e:97:74:b7:55:0e:d2:b9:
75:8b:76:4a:0e:f3:48:d9:bf:16:a5:d3:6a:a9:90:
14:64:e3:55:35:a7:b2:99:87:4e:5a:d7:a8:0e:98:
eb:24:4d:ea:12:2c:60:3f:e9:c2:3c:66:9c:f6:1e:
8c:9c:22:b9:4f:20:c3:ef:1d:7a:25:cc:6f:2e:bb:
20:a0:4b:fa:2f:8c:c7:77:99:5f:ea:03:0a:61:1c:
34:90:9a:39:0c:54:f6:29:1e:64:6b:81:4a:f3:51:
eb:25:70:33:f1:ab:6d:48:47:05:d5:b6:9f:db:ed:
7a:7c:30:e9:c4:53:cb:04:98:e9:f8:83:44:da:f7:
d4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:87:DB:D2:42:53:51:38:AD:F1:58:8D:CA:78:3B:9D:5D:12:23:E1
X509v3 Authority Key Identifier:
keyid:16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c2:77:f0:ea:de:d4:2a:8f:d5:92:a1:d7:bb:0c:cf:80:5b:
b5:a4:60:cd:61:fb:39:2f:ff:63:57:e0:7e:2b:0f:44:54:90:
31:f0:66:f6:e0:2c:9c:d4:07:87:d7:a5:11:f4:c4:e0:d2:3e:
80:19:e5:97:3b:4a:16:0b:41:4e:72:92:2d:af:9f:e9:16:5d:
53:96:d7:03:46:41:08:86:a5:83:20:03:4f:ec:a6:39:01:d1:
3f:1b:b1:93:b5:05:b6:ab:b7:f4:bd:aa:c7:36:bd:c0:74:f2:
84:9f:41:09:dd:79:22:38:aa:61:6e:57:3a:1d:b1:f6:97:24:
85:4b:70:82:02:71:23:f0:ec:97:90:7d:9e:52:45:e3:c0:bc:
84:7b:a6:b2:ac:49:6a:5a:af:f8:11:8b:c7:aa:f8:6c:a7:a9:
56:83:d3:5d:76:95:3e:93:ce:40:c0:56:57:92:24:94:57:14:
66:d8:1a:30:75:f1:dc:13:56:05:3f:3d:44:eb:05:f0:ee:a2:
db:4f:ec:46:0c:1b:63:23:c5:ec:fb:89:fd:e8:c6:af:bf:bd:
3d:f3:2c:45:30:42:86:23:d8:0d:5d:48:23:79:c3:0e:02:41:
0d:18:7e:cd:48:fb:19:27:6d:79:57:b6:c0:cc:f4:a5:36:3f:
a9:84:1d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:24:21 2025 by rpki-client