Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: +lr+VMvQk83IKWxAwBQN4+8lVV2QDJH6upoz0iItcpQ=
Subject key identifier: C2:89:64:D4:13:EF:66:C9:AA:04:0B:41:6C:17:17:08:CE:98:9A:18
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 0199FF59C6B5006913B21381D61E23B89D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 02:01:37 +0000
Manifest this update: Mon 20 Oct 2025 02:01:37 +0000
Manifest next update: Tue 21 Oct 2025 02:01:37 +0000
Files and hashes: 1: 1-TdRJj4h2RmubOdxb9rkHHG6bhc.roa (hash: IbIK2UxlwKjCUY9QjIcWsizwAMtE57kEDfBifLf6mzQ=)
2: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: /Y7BVtMJlj2ZOxNUv0F++ucEqoZOpHrF0kBfMJcxZ9k=)
3: QR0Kgwt3HCwjc-xcqO7iblC-rKY.roa (hash: 0rkvAXImNg4dab81A4VmHvprnFlgPXRICVp6eT39HwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:c6:b5:00:69:13:b2:13:81:d6:1e:23:b8:9d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Oct 20 02:01:37 2025 GMT
Not After : Oct 21 02:01:37 2025 GMT
Subject: CN=c28964d413ef66c9aa040b416c171708ce989a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:b2:c7:ed:c7:2e:57:f6:ee:f2:24:2c:6c:
ff:b9:3d:1b:64:f3:30:53:21:4f:7a:d6:16:ae:0e:
64:59:d0:0b:3b:00:10:1c:3c:e4:b3:1b:b9:49:4c:
07:a1:1b:09:25:14:77:61:d9:52:98:45:d6:41:aa:
14:6e:10:06:65:43:8c:fc:75:8f:80:a1:31:03:5d:
b9:8c:84:04:d3:e5:b2:04:07:65:c9:8c:7f:30:23:
4d:b7:2f:71:01:3e:58:b2:58:83:60:3e:53:dd:8c:
ec:65:72:25:97:47:41:06:0c:e6:72:36:38:f6:00:
33:19:19:76:98:dd:44:6d:7f:90:ad:6b:a2:a8:31:
33:fd:f1:59:0a:c8:36:5d:dc:f5:63:ac:30:10:81:
d1:c7:2b:b0:3c:2b:1c:aa:ed:3a:a1:8f:41:fc:e0:
0b:fa:dc:f9:6d:88:36:45:56:a2:c2:34:7e:bd:b1:
e4:00:1f:45:26:4b:75:ff:76:1d:5f:c6:ae:12:08:
74:6b:50:1c:47:80:15:1d:e1:0a:19:3a:86:f4:fe:
d6:c8:06:15:46:24:e9:59:6f:e3:c4:11:93:3d:81:
1f:7a:29:a2:5d:1b:c4:99:e3:98:af:70:aa:f7:06:
41:72:ff:18:7f:0c:44:4d:d5:ea:ae:2e:e8:60:93:
f9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:89:64:D4:13:EF:66:C9:AA:04:0B:41:6C:17:17:08:CE:98:9A:18
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:03:fb:40:47:5f:8f:6a:c1:bc:25:8a:5b:5c:63:43:e4:49:
21:1f:61:a5:80:f2:c8:28:be:3f:97:59:32:a4:02:7f:4d:c6:
55:04:fb:8e:01:f5:eb:37:94:96:0d:07:70:e9:1c:bc:e0:9c:
2e:b9:e2:d6:e4:38:e2:59:34:f1:91:88:70:2a:c3:f6:87:4f:
be:cc:95:08:1a:5b:48:41:6b:16:c0:07:b4:9a:6f:4b:67:4b:
93:01:7a:d3:4f:c8:0f:14:27:f9:4d:e9:44:2d:fd:18:8d:fc:
75:a9:ad:73:d3:fb:ec:f9:d6:70:15:91:c9:24:c6:5a:23:54:
a9:3d:d6:04:1d:d5:e5:f9:22:1b:a5:4a:a6:4f:3e:fc:55:f2:
b4:ca:5e:d9:8f:0b:53:38:ae:87:ca:b3:b6:ee:56:8d:7b:d0:
09:d7:2f:56:d8:61:47:cf:36:cc:36:34:63:78:ed:d9:e3:66:
98:11:3b:b2:53:14:9c:ad:3f:ec:cb:8b:ea:6d:68:bd:73:cd:
13:e5:3a:75:11:46:35:2f:88:d5:8e:58:3f:ce:73:0a:dd:c1:
3b:61:38:40:4d:9d:7b:29:fa:f4:07:ab:11:3e:68:d9:c6:9f:
89:b9:16:d3:c9:74:18:23:e1:16:05:fc:a0:02:63:52:72:93:
22:ee:da:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:51:33 2025 by rpki-client