Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
File: Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft (raw, json)
Hash identifier: vJNVEdax6erlwI5tanM0AMlW9rXWK+NhOdPMaTCR+EU=
Subject key identifier: 28:A5:DE:15:1C:91:37:5D:71:35:B7:74:98:91:96:23:A0:B1:72:E9
Authority key identifier: 16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
Certificate issuer: /CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Certificate serial: 0199FC8F77A4A3926983FE67AC4E929328D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:24 +0000
Manifest this update: Sun 19 Oct 2025 13:01:24 +0000
Manifest next update: Mon 20 Oct 2025 13:01:24 +0000
Files and hashes: 1: 1-bqNZN34Z6tA08rjf9Ue9gz9z4M.roa (hash: ZBK1wDofmlTI3jgUly3vW6cc/crra2evnmHTHJR0jqI=)
2: Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl (hash: 2y+owCarZ3iUrV9mMvKdMFQC22YsOw87EtNrS7Xb7ko=)
3: TVDjYzkETmBCT7v1_fe4s6H8gEU.roa (hash: zxaM+TU0HD4P7dxOW2gfkICzMAb8AYSlKoeUfD1Wv0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:77:a4:a3:92:69:83:fe:67:ac:4e:92:93:28:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Validity
Not Before: Oct 19 13:01:24 2025 GMT
Not After : Oct 20 13:01:24 2025 GMT
Subject: CN=28a5de151c91375d7135b77498919623a0b172e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:d4:6f:83:34:67:7c:08:d3:da:df:5b:22:
3e:43:1f:83:ad:02:ef:92:0a:f9:30:8e:8f:bf:99:
67:68:4e:3d:58:07:4f:38:f4:b7:60:fe:33:3e:9d:
76:0b:f5:74:57:0e:12:62:09:66:7c:be:96:4d:e6:
0d:ce:61:ff:93:7b:1d:cc:07:90:d9:f9:d3:31:80:
17:42:cb:02:2a:ac:9e:e1:66:2a:a2:20:22:01:a5:
ec:c7:b2:39:8c:8d:0d:7a:68:15:5e:42:8e:4f:44:
b9:ab:40:9f:cd:af:94:e8:33:c6:f5:2c:66:66:a5:
e5:f8:0b:aa:68:87:78:ad:95:3c:c1:41:96:4a:f0:
12:a3:a6:14:2c:d3:a6:d3:8b:91:d1:66:2c:1e:48:
7d:9d:7c:d7:81:3d:23:83:a8:74:a6:c9:26:f9:50:
1a:7f:42:00:e5:8d:ff:91:13:56:83:68:bb:a0:c9:
84:59:18:2c:e0:33:90:e4:bd:db:a2:0e:b4:1d:69:
2a:c2:e8:de:10:4c:7c:d1:2c:59:46:74:4b:ee:fb:
bc:41:dd:69:c8:d5:bc:cf:2f:65:a3:11:b7:81:d7:
b7:42:71:37:de:0a:d2:ba:cf:67:00:91:0c:8a:99:
50:8b:2b:5f:b6:07:8d:80:b3:97:b2:7c:23:be:64:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A5:DE:15:1C:91:37:5D:71:35:B7:74:98:91:96:23:A0:B1:72:E9
X509v3 Authority Key Identifier:
keyid:16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:45:7b:4e:d6:7b:cd:c8:4b:aa:40:0e:0f:dc:fa:da:16:39:
12:b3:17:89:b4:8d:d7:bf:ca:4d:59:69:bc:37:94:74:86:f1:
6b:84:1a:8b:66:0c:2d:9c:f6:91:97:03:7c:ae:7b:86:7d:77:
62:a4:4c:e4:77:50:12:ca:a3:32:7b:7d:0b:78:66:4c:f7:64:
13:59:85:69:1f:34:0f:a4:ed:2f:69:33:a8:a6:84:6d:0b:8b:
30:bc:d5:02:e8:4b:29:89:94:bd:b7:21:bf:ce:5b:e9:af:63:
7b:fe:74:1c:f9:ce:3d:aa:21:1e:ed:26:45:d7:cb:17:97:f9:
c3:54:69:bb:89:00:99:dd:3c:40:0a:90:11:83:80:8f:11:22:
83:3d:9c:11:46:1d:24:2e:d7:4a:7a:ba:b5:33:80:84:e6:cf:
77:89:95:4b:b4:cf:bd:e0:17:88:78:a4:8b:54:85:71:f4:99:
31:4f:1b:57:14:39:3f:87:0a:e9:41:cc:d4:12:b5:bb:a2:3c:
9b:2c:78:27:4e:a1:41:0c:1b:50:e7:27:14:6c:bf:e9:fe:2d:
17:f1:da:21:57:49:56:c3:4e:e1:88:c8:e1:b1:0b:ab:2a:01:
7b:d3:ca:e1:67:bb:b2:a0:6e:e5:95:be:5d:fb:ea:09:b8:7e:
9c:63:2d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:07 2025 by rpki-client