Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
File: FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft (raw, json)
Hash identifier: uojtIA9jM17vi+lhSS0etqEZlZ2Q3RkR2RulqmVq9kE=
Subject key identifier: BB:BB:84:21:E9:B8:01:95:E0:D3:FB:28:BB:8E:83:30:F9:01:0C:C4
Authority key identifier: 16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
Certificate issuer: /CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Certificate serial: 0199FC21CB6E3F1223F54F242314B6833BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
Manifest number: 0A02
Signing time: Sun 19 Oct 2025 11:01:37 +0000
Manifest this update: Sun 19 Oct 2025 11:01:37 +0000
Manifest next update: Mon 20 Oct 2025 11:01:37 +0000
Files and hashes: 1: FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl (hash: mNGf6qMM9eqTth8ZH7CeccnxW0zaF+iNguTjIj4v9fA=)
2: g3b-X86nv3p6U9DOq4hCU_Dnmdo.roa (hash: 2YoEPjb/mUp/HqQp7Qak5HkOS9XgXc9API514lfVQEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:cb:6e:3f:12:23:f5:4f:24:23:14:b6:83:3b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Validity
Not Before: Oct 19 11:01:37 2025 GMT
Not After : Oct 20 11:01:37 2025 GMT
Subject: CN=bbbb8421e9b80195e0d3fb28bb8e8330f9010cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:18:6a:b1:b4:77:9f:dc:5c:6d:8b:ec:9c:
0a:3e:ed:e8:79:3d:31:e6:ac:df:8b:d6:de:af:a7:
b8:cd:08:05:b5:34:b4:fd:26:07:74:05:01:93:e8:
c9:1f:03:56:0e:2d:b8:7b:5a:dd:31:53:5b:3d:5a:
cb:fe:54:8f:d2:6f:b6:03:ab:d3:88:69:0b:2a:76:
99:6c:25:05:22:c8:97:88:7f:87:9b:b3:b6:20:23:
64:37:22:29:e0:f0:7e:95:92:3f:1d:e0:0e:e6:4c:
7c:46:af:f9:4a:46:83:b7:a2:1a:7a:40:7d:37:ed:
4b:0b:2e:a5:83:68:a2:e3:ff:e5:db:19:b1:d6:d7:
f9:8e:09:79:4b:03:a5:39:a7:0b:3a:40:34:73:84:
38:45:10:68:bd:3a:62:7e:3d:54:80:56:0a:3f:8f:
a9:bd:73:97:98:49:f7:f2:00:e9:cb:f9:18:35:16:
8f:59:53:cd:ea:bc:da:92:fb:a6:d4:25:77:93:24:
ad:36:ea:9a:0a:90:6b:04:ec:ec:22:65:b6:ae:04:
07:94:d5:22:6a:3b:df:5a:cb:1a:c5:80:3f:44:33:
04:98:28:46:5c:7e:9e:af:9b:d5:95:9e:d8:c8:3a:
f1:3d:e7:77:16:77:ac:43:60:59:af:72:4c:d5:c1:
34:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BB:84:21:E9:B8:01:95:E0:D3:FB:28:BB:8E:83:30:F9:01:0C:C4
X509v3 Authority Key Identifier:
keyid:16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5f:c1:f2:e3:bb:2c:b0:12:f1:ac:35:43:10:af:68:bd:41:
24:14:92:56:b0:67:68:34:74:06:05:fb:ee:1e:2d:89:fb:87:
ad:7b:95:7a:09:f7:8c:82:94:81:79:db:8b:e2:20:4b:4b:73:
7a:ad:cb:c2:20:d3:02:bf:e1:49:a2:43:9e:f2:92:be:ed:34:
f0:3a:b8:f0:b3:d1:05:dc:fb:86:3a:c3:39:14:8d:0e:e1:0c:
4b:7a:cc:98:99:61:cf:46:a6:40:70:c0:57:6e:b7:aa:db:63:
5f:b6:03:da:3b:3f:31:de:4b:e8:74:a5:6e:61:1b:cf:06:4e:
a3:7c:4e:46:22:53:58:c0:c8:0d:4f:13:61:ba:de:5d:6c:44:
77:95:4d:fd:4d:14:f6:c0:0d:b7:24:0c:d3:58:5d:28:a4:27:
84:02:fa:53:70:23:54:87:30:7a:ec:0c:4d:ac:df:31:f3:70:
16:30:e2:41:0e:1e:16:13:1b:21:a1:8b:b3:96:20:b4:c2:d3:
61:23:7c:83:85:16:7c:ab:9e:a9:52:71:2d:87:1f:af:91:80:
ce:c5:c6:11:ca:69:ef:e5:40:62:76:c0:10:49:3f:95:ee:93:
76:f2:07:5c:19:79:46:27:8f:4a:4b:c6:7a:bb:c7:7a:e5:c4:
15:39:33:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:41 2025 by rpki-client