Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
File: FqThByM1EnDNjJzGSwlkiOZOIw4.mft (raw, json)
Hash identifier: E4NjSMFIBndtfKLqdmknEqSYn38G2t2LwsJ5yMuVltc=
Subject key identifier: 0A:0F:F2:A8:8F:9E:B7:B8:78:B7:BE:AB:C4:DA:43:29:C7:D5:44:BE
Authority key identifier: 16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
Certificate issuer: /CN=16a4e10723351270cd8c9cc64b096488e64e230e
Certificate serial: 0198D54EA9B75D7A8DA7ECA59546835F2912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
Manifest number: 07BA
Signing time: Sat 23 Aug 2025 05:02:38 +0000
Manifest this update: Sat 23 Aug 2025 05:02:38 +0000
Manifest next update: Sun 24 Aug 2025 05:02:38 +0000
Files and hashes: 1: FqThByM1EnDNjJzGSwlkiOZOIw4.crl (hash: GB0bNL091/hBi6S/Ql1lT/oIrvVSn2glj23/dZNPBtk=)
2: LHS-1GPmf3JlxOhkC8EvvEXsIio.roa (hash: qJmDzf2hiWRAwgR4H4d0P3HUtRpMHlkEr8kbVnNHB5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a9:b7:5d:7a:8d:a7:ec:a5:95:46:83:5f:29:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a4e10723351270cd8c9cc64b096488e64e230e
Validity
Not Before: Aug 23 05:02:38 2025 GMT
Not After : Aug 24 05:02:38 2025 GMT
Subject: CN=0a0ff2a88f9eb7b878b7beabc4da4329c7d544be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:c8:24:5e:f4:dc:71:ed:fc:68:54:cd:df:
09:13:99:a5:c2:4a:11:9b:af:2a:a2:41:97:0e:b2:
76:77:a8:ca:3f:17:f3:8f:a8:45:99:05:4a:d4:f2:
5f:07:3d:f8:1c:da:87:6d:0b:c9:21:95:13:3f:cb:
ff:ff:4c:3e:d4:93:0b:c1:0a:ab:a0:ca:b5:7e:2f:
ad:61:6d:48:e2:ad:50:7f:fc:3e:33:2a:c3:6f:6e:
aa:99:86:b7:b4:73:fc:01:d5:98:55:00:3c:40:10:
d7:29:eb:ac:b9:df:18:d4:b3:4c:04:a7:fe:01:48:
e1:ad:c6:49:fb:73:74:ec:3e:10:20:e5:10:e8:da:
e3:07:9c:b8:42:17:b0:ec:05:fa:f2:df:a8:1c:97:
d6:26:16:95:ca:b4:2d:0e:d9:d2:c7:33:9b:ff:28:
aa:0b:1a:c2:17:c2:53:ec:99:54:ab:73:62:a2:b7:
00:c6:bb:3b:33:95:fb:92:2b:22:83:18:b2:4a:9e:
04:eb:05:47:b2:7e:3c:49:df:0e:a2:82:9c:f8:3f:
fb:87:d5:46:11:60:7f:18:bd:74:07:85:c9:82:6a:
07:34:41:4c:85:92:d9:e7:9b:54:25:43:a1:40:df:
92:77:29:c6:ea:cb:ce:f2:fc:66:d0:04:a1:e3:63:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0F:F2:A8:8F:9E:B7:B8:78:B7:BE:AB:C4:DA:43:29:C7:D5:44:BE
X509v3 Authority Key Identifier:
keyid:16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:49:64:7c:7e:fb:59:c1:06:0b:cb:1c:cf:2c:ab:ca:82:33:
07:ad:73:48:c5:df:3f:92:8e:49:01:43:9e:74:a0:c0:0c:f9:
cf:58:c6:ca:4a:9c:6b:fb:96:d0:24:c5:e6:8b:e8:10:0e:7a:
95:f5:da:ad:c7:ed:62:88:55:65:da:5e:bb:50:97:ae:cf:ce:
e9:d1:0e:ca:0a:d6:43:32:a9:a6:47:b6:ba:83:ff:46:93:f2:
84:4f:8b:4a:12:4b:4a:04:2f:fe:9d:1a:b7:03:84:85:2f:58:
01:01:f1:82:7c:a0:a3:07:35:dc:4f:ff:f7:c3:a9:d5:0c:b5:
fc:39:7d:4b:2a:7d:31:1f:80:05:85:0e:42:0d:d6:c7:11:a4:
23:40:58:14:40:5e:79:bb:c8:1b:df:42:d2:22:19:61:19:92:
61:20:fc:e2:a5:20:0f:8c:62:e4:79:75:e1:71:63:3b:04:c5:
a9:f2:6e:be:a0:b5:35:17:4f:b8:86:a1:cf:7e:17:19:3a:37:
a0:df:b0:b5:7a:17:f6:b2:f6:cf:b8:5f:b3:d9:41:ee:91:f2:
85:fd:b6:d8:4a:2f:fc:71:4c:4d:64:cb:3a:cb:77:9a:bb:63:
11:93:3f:1d:a0:34:18:80:83:00:94:ed:61:69:5d:e3:b4:f3:
88:c2:2d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:53 2025 by rpki-client