Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
File: Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft (raw, json)
Hash identifier: pF3y0HrvuAmYAxfboXg1QsMzcqg0BHJqRpw9WRtvA4I=
Subject key identifier: B6:A1:8A:64:B3:4D:17:9E:DF:39:CF:2C:FB:72:F5:22:62:3A:47:3A
Authority key identifier: 16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
Certificate issuer: /CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Certificate serial: 0198D705FE3094C2A52CC9FB28E1093C2DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 13:02:30 +0000
Manifest this update: Sat 23 Aug 2025 13:02:30 +0000
Manifest next update: Sun 24 Aug 2025 13:02:30 +0000
Files and hashes: 1: 1-bqNZN34Z6tA08rjf9Ue9gz9z4M.roa (hash: ZBK1wDofmlTI3jgUly3vW6cc/crra2evnmHTHJR0jqI=)
2: Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl (hash: bVrevigweBYn8SdHtPqyThPtwZpOUa2zlYXJLOW92Zk=)
3: TVDjYzkETmBCT7v1_fe4s6H8gEU.roa (hash: zxaM+TU0HD4P7dxOW2gfkICzMAb8AYSlKoeUfD1Wv0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:fe:30:94:c2:a5:2c:c9:fb:28:e1:09:3c:2d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Validity
Not Before: Aug 23 13:02:30 2025 GMT
Not After : Aug 24 13:02:30 2025 GMT
Subject: CN=b6a18a64b34d179edf39cf2cfb72f522623a473a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:25:75:33:db:12:c9:68:51:45:e4:fd:87:
fc:8a:b9:b6:17:9f:fb:0d:52:5c:da:73:83:d9:e0:
fb:07:72:d5:f4:a1:02:f2:0e:99:07:06:3e:15:4e:
fa:57:b3:da:6d:ff:27:fa:0e:c0:e7:bc:33:14:27:
03:1a:f2:76:c0:c0:15:52:82:ab:0f:40:48:2f:bc:
f2:de:29:34:e5:07:9b:6a:b4:37:3f:9a:33:a3:90:
30:f0:a7:18:66:8a:01:f3:c0:ea:f3:ae:f5:00:7c:
12:95:58:74:4c:77:32:7a:e9:24:73:53:1e:35:57:
05:6d:dc:7b:d0:09:28:c8:c4:e8:8f:d0:db:cc:b9:
b0:93:76:a3:14:f4:90:a8:e3:db:81:29:79:c8:17:
10:59:a1:e5:6d:19:2e:59:fb:ef:17:10:16:8f:73:
96:ab:c4:e4:fd:1f:3e:0d:6d:83:c1:dd:1a:cd:19:
66:3b:d7:e7:ef:1c:ce:33:dd:1d:18:ea:02:6f:84:
aa:d6:42:91:46:05:a4:85:b6:53:e7:d5:cd:8f:e3:
32:f3:f4:44:fa:5f:68:de:ff:3c:51:e9:e3:27:08:
0b:e1:cb:ec:68:17:bc:ae:b2:09:4a:52:c3:f8:55:
ca:aa:2b:6b:73:12:78:6e:9f:f6:7f:3b:55:36:40:
6b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A1:8A:64:B3:4D:17:9E:DF:39:CF:2C:FB:72:F5:22:62:3A:47:3A
X509v3 Authority Key Identifier:
keyid:16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b6:16:20:96:ed:62:3d:85:26:7b:c6:12:97:a3:e4:61:5e:
d4:c5:9b:97:d5:31:ab:21:cc:fa:23:09:04:75:b6:c7:27:3d:
76:36:d8:44:c1:1d:84:4b:55:37:61:63:75:ce:3d:01:be:e8:
44:58:a4:ca:3d:7f:54:5c:94:16:f3:da:dd:b0:26:c8:53:84:
99:f6:19:9e:ac:f9:29:a0:48:8f:98:59:4e:a3:53:e0:d1:72:
4c:77:66:5a:df:16:0c:6b:76:5f:7f:c7:92:96:c4:03:72:8b:
68:93:11:48:38:be:89:d6:1b:b4:c5:40:13:a9:dd:9f:a6:86:
c1:c9:ed:8d:0a:f6:7e:5d:06:ed:7d:f8:f4:83:ea:0b:55:4e:
1e:72:d6:55:12:47:3a:e2:fa:2e:ea:66:a9:d4:09:ef:70:47:
9d:00:e3:f1:83:e2:b4:9e:c2:7f:3e:7c:b2:45:f2:54:0a:1a:
08:9a:2c:f8:30:6d:e0:24:cc:0f:66:e0:b9:7f:8c:08:c1:40:
70:3a:a7:7f:0d:9b:ba:9f:ad:ad:f5:af:da:42:f2:fa:0a:9f:
83:16:e2:5b:92:ef:94:b6:92:e5:72:37:fe:66:65:3f:8f:bd:
2b:e8:57:d2:5f:69:d4:fd:64:46:44:08:df:a1:0e:ba:7a:c1:
e2:3a:87:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:18:19 2025 by rpki-client