Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
File: FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json)
Hash identifier: jziHzy1zEi8H5VAeoD6RXQL75D+TqtpEWPI1MtOdgY0=
Subject key identifier: B7:51:F8:1F:60:AF:A6:9D:D0:08:85:AC:CA:A7:3F:36:41:BA:74:FD
Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917
Certificate serial: 0199FDDA15F7BA0B58AECC4D63B068EA4B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:02:32 +0000
Manifest this update: Sun 19 Oct 2025 19:02:32 +0000
Manifest next update: Mon 20 Oct 2025 19:02:32 +0000
Files and hashes: 1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: /dFaRdTRQNmk4WwtSVcG578vZuOwut0/R6tXnSQJFds=)
2: H3v3Ir1uutigtDSCgvKQTveRQl0.roa (hash: 4A8WQpggwPpKrs7preaxNPkzpvVHS+MZyP8Wyyn6QVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:15:f7:ba:0b:58:ae:cc:4d:63:b0:68:ea:4b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917
Validity
Not Before: Oct 19 19:02:32 2025 GMT
Not After : Oct 20 19:02:32 2025 GMT
Subject: CN=b751f81f60afa69dd00885accaa73f3641ba74fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:51:0a:dc:ab:6b:e7:2b:b9:6b:e8:a8:40:
07:7d:cb:8f:02:ca:cf:43:a1:da:3c:84:9d:e2:fb:
8c:bb:21:95:b1:61:d5:49:33:1d:45:05:58:bb:fe:
ba:f2:99:8e:b8:b9:9e:20:bc:1c:e2:03:c3:9d:15:
0b:51:2f:cd:fd:7c:04:b6:72:a2:56:4f:c1:bf:af:
4e:d2:f6:00:c0:62:44:68:7d:f2:8f:ab:ba:4f:f0:
80:d4:07:60:58:35:b4:bb:94:7f:5c:2c:d6:79:07:
3b:c7:12:6d:4f:92:af:34:8d:16:f0:a7:17:85:98:
04:14:14:0b:2c:55:b8:d1:21:f3:d2:bf:4f:72:af:
dd:02:88:b4:a5:ca:ea:0f:78:3b:df:90:59:2d:01:
3f:63:e5:4c:5d:0e:8a:9d:5a:d6:99:d6:9b:26:3c:
b1:fd:71:38:1f:9a:38:28:2f:60:4f:e0:06:9b:72:
c4:7b:ef:6c:1f:27:77:61:8d:be:cc:b7:83:72:3f:
38:a3:2b:7c:f8:89:5d:00:e8:67:6a:e6:89:4a:1c:
21:04:65:e0:01:2d:4b:1f:2a:6a:a6:d3:4c:5d:e6:
23:bc:f7:02:b8:86:13:d8:f2:b1:1c:54:9d:d9:5f:
d1:8f:6d:d5:ed:19:42:03:c4:e7:ee:6f:95:e2:f6:
62:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:51:F8:1F:60:AF:A6:9D:D0:08:85:AC:CA:A7:3F:36:41:BA:74:FD
X509v3 Authority Key Identifier:
keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a2:2a:75:7b:6f:a4:1e:e7:c4:7c:46:f3:e9:07:b2:76:fc:
bc:e6:62:89:d8:2c:6c:aa:41:ab:03:fa:3b:07:00:03:49:df:
2a:56:e9:21:ac:60:82:19:d7:94:89:29:ea:3c:75:25:b0:f3:
11:4f:53:86:e0:b7:c9:da:6e:61:ad:20:7c:2e:c3:d3:69:17:
40:12:5f:70:a1:71:e4:15:50:0c:ae:2b:93:53:45:8e:03:89:
e1:d6:11:a6:a1:fd:cb:e1:2b:47:76:81:84:c9:57:d8:53:25:
6b:12:00:3b:f5:0c:8b:3e:ce:85:e7:90:92:28:fe:32:36:27:
57:5d:1f:f4:e2:9e:c2:d0:07:cc:e9:04:0b:9f:0e:20:c0:18:
84:61:cc:74:84:bd:15:91:6e:d4:10:89:08:40:5a:9f:1d:04:
b5:f8:2b:c3:ce:a8:55:9f:d9:06:93:ed:43:04:c0:d5:e3:98:
9d:1e:e1:2a:2f:28:b8:f7:60:8b:ab:10:e4:ce:03:39:d8:e3:
62:73:41:32:5e:7f:f6:b9:e5:96:c0:8c:34:da:c5:01:4e:e3:
ad:13:43:da:a4:a2:82:39:d2:ab:af:6d:72:33:91:2d:82:b0:
64:4c:db:34:3a:8c:87:4b:58:77:28:4c:f2:d8:60:84:fb:7e:
6f:3a:9d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:31 2025 by rpki-client