
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
File: FnrFIxoNe8WCRZCgsvYh7emEdww.mft (raw, json)
Hash identifier: 1CKyDpSJoC1QwIpKgO1Y29TtdNv0JM7FBCxKmY+eYHA=
Subject key identifier: 0C:F8:64:18:83:1F:37:23:11:30:A2:FC:A7:03:85:5D:9C:B1:9A:F0
Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
Certificate issuer: /CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Certificate serial: 0198D58368C21DEF6D4F420B1034FE041E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
Manifest number: 110E
Signing time: Sat 23 Aug 2025 06:00:15 +0000
Manifest this update: Sat 23 Aug 2025 06:00:15 +0000
Manifest next update: Sun 24 Aug 2025 06:00:15 +0000
Files and hashes: 1: CpHbUv6AMr2IBRTUslkSn14mbAM.roa (hash: hbGa8sRUPNzKoKWW9t46YLOtfBF6LvE9GQwcI4qQDDE=)
2: FnrFIxoNe8WCRZCgsvYh7emEdww.crl (hash: UZmUDy3ML2gSou9QdcF/ae/d9657Ep5jSdStTVOeZuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:68:c2:1d:ef:6d:4f:42:0b:10:34:fe:04:1e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Validity
Not Before: Aug 23 06:00:15 2025 GMT
Not After : Aug 24 06:00:15 2025 GMT
Subject: CN=0cf86418831f37231130a2fca703855d9cb19af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:43:39:3a:c4:d1:79:85:8b:16:8a:15:7f:
9d:d6:cd:b8:b9:d5:60:1a:d8:08:9c:2b:16:4c:45:
68:e0:40:28:27:bf:95:e6:73:ac:90:4e:36:65:55:
c9:b1:c9:88:05:d8:0a:82:43:2f:81:9f:70:3f:1d:
63:9d:e9:05:07:2c:6a:2e:6d:ff:f4:63:d6:29:7f:
3b:f6:f2:be:f4:50:f3:f1:3e:74:f1:07:db:f3:6b:
c9:20:a0:17:71:a3:b9:b1:93:fc:6b:26:8e:e2:3d:
b6:11:07:f9:ad:7c:e2:94:2f:25:e1:99:29:b5:dc:
30:39:e9:d5:d3:5f:3a:b0:67:44:d6:58:00:4b:ba:
a6:30:ec:82:6e:ac:fc:9b:46:08:9c:94:a2:a0:80:
1a:d4:52:48:76:67:3f:09:b2:82:33:e9:35:66:ed:
78:bf:a4:95:fa:48:a7:d4:63:45:47:59:47:7c:7c:
60:4c:4d:ee:8b:ed:0c:73:b2:d4:00:7d:e5:8b:86:
ae:e5:15:12:3b:c1:4e:75:3d:20:50:b0:fb:39:db:
2f:4d:e1:29:ad:87:ba:eb:e2:ea:57:0b:31:4e:b2:
80:21:ed:d6:99:05:c3:e0:45:2d:fc:90:dd:48:d0:
c7:85:85:e8:6a:fa:8c:19:d1:d7:01:0b:e6:c7:ea:
e5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F8:64:18:83:1F:37:23:11:30:A2:FC:A7:03:85:5D:9C:B1:9A:F0
X509v3 Authority Key Identifier:
keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f6:a1:4a:3f:7b:a7:d3:ee:95:c2:fc:00:46:7e:5a:7c:0a:
46:2d:d6:0a:9a:92:e1:3e:f3:a2:43:fd:ae:d0:ec:b0:af:1b:
9c:76:07:e7:2f:02:ca:82:19:6c:a7:9b:64:f1:f4:9c:7a:03:
27:57:db:69:3e:06:9e:f4:9c:c3:fd:6b:5f:c1:f9:42:9a:c4:
dd:ab:31:f4:3e:0f:a7:b3:62:da:14:40:d2:d4:cc:5a:b4:9d:
bf:9d:05:b8:50:6c:fa:91:b8:b1:9e:e2:b8:db:25:ee:d6:be:
6b:93:ac:9a:92:08:e0:ad:31:38:bd:e3:87:eb:3a:d3:90:26:
da:a7:78:36:eb:5b:eb:ff:51:83:c0:50:9e:f8:b2:c6:82:ac:
1b:a2:a3:ee:ed:5b:d7:f3:01:2c:66:22:ec:b8:f1:5f:50:a5:
69:f5:94:98:9c:ad:72:52:7f:a7:12:ca:80:f5:28:fd:93:ed:
40:f0:39:19:0b:9c:38:29:e8:9e:eb:0b:1c:f0:63:56:63:65:
1e:d1:14:fc:6d:5f:d1:47:65:55:22:f5:bb:88:68:fe:b2:55:
9e:49:31:d2:76:fb:b6:af:81:b1:3b:e2:13:09:fd:9f:e2:c2:
70:11:09:9a:4f:4f:67:fa:0b:e3:5f:f9:a4:48:51:c3:c0:6f:
9b:45:89:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:23:36 2025 by rpki-client