Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: SI6lY7nYofU5a0PGsmUFHNtmPnkc/EGNgjkEFgxfOC0=
Subject key identifier: 07:9F:B3:88:F8:A3:9C:80:F8:75:22:09:D3:FE:50:CC:B2:8E:4D:35
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 0198D5F1609985EB321C231820DDA608D344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 08:00:22 +0000
Manifest this update: Sat 23 Aug 2025 08:00:22 +0000
Manifest next update: Sun 24 Aug 2025 08:00:22 +0000
Files and hashes: 1: 1-TdRJj4h2RmubOdxb9rkHHG6bhc.roa (hash: IbIK2UxlwKjCUY9QjIcWsizwAMtE57kEDfBifLf6mzQ=)
2: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: 7DheGgnNK3gMYhn/SR26BD2fmniL40V5mPPGsMBwQ+E=)
3: QR0Kgwt3HCwjc-xcqO7iblC-rKY.roa (hash: 0rkvAXImNg4dab81A4VmHvprnFlgPXRICVp6eT39HwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:60:99:85:eb:32:1c:23:18:20:dd:a6:08:d3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Aug 23 08:00:22 2025 GMT
Not After : Aug 24 08:00:22 2025 GMT
Subject: CN=079fb388f8a39c80f8752209d3fe50ccb28e4d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:d7:43:49:b9:ae:51:e8:f5:52:98:7d:ad:
a1:36:2d:b2:ef:0e:77:f7:23:65:8e:1d:7b:d2:a8:
d6:92:4e:e5:53:13:65:b2:de:ce:f6:d8:40:27:42:
37:6d:07:67:1b:42:0e:e0:fa:9b:49:d1:de:c4:35:
6f:f6:86:14:b1:4b:56:74:b1:66:dd:68:41:81:27:
56:4a:09:1a:da:32:62:b8:36:fa:c1:71:62:83:d2:
77:e6:37:43:05:a4:71:5c:28:38:13:ba:37:2a:25:
31:b0:dd:d1:e7:d6:82:da:f1:1f:7e:d4:77:d8:0c:
3c:13:23:8f:7b:97:00:51:40:3e:7e:65:2e:23:d5:
28:fa:af:fd:7f:8a:d1:1c:62:a0:64:e4:b6:4d:ac:
95:1e:84:53:c5:1b:5d:dd:36:4f:70:f5:ca:70:0a:
c5:25:4f:dd:8f:a9:03:73:37:a8:c3:53:52:47:59:
8a:57:f0:95:02:3d:c0:3e:88:17:1f:a7:fb:48:9d:
4c:fa:2b:0d:a0:1f:be:de:0d:5d:d8:62:6f:96:a2:
00:33:38:39:af:45:cc:45:c0:23:b3:7a:7e:15:8a:
f4:c3:92:fa:da:d2:d5:90:c9:52:4e:89:00:31:5e:
7a:d1:a6:ea:00:88:a8:30:80:24:a5:ac:30:9d:89:
11:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9F:B3:88:F8:A3:9C:80:F8:75:22:09:D3:FE:50:CC:B2:8E:4D:35
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:01:a2:fa:e2:eb:12:6d:3d:1e:84:ac:56:05:60:78:94:06:
f4:50:c4:d8:0e:db:26:b0:da:f3:63:0c:c1:1b:7a:b6:0b:a1:
5c:80:05:e0:d7:c6:ba:e6:dd:a9:81:47:bc:66:64:0e:98:51:
f4:56:d9:aa:e8:8f:ae:d1:be:4d:8c:2e:82:eb:3a:66:9e:3b:
27:00:4c:3f:7d:4b:62:42:d7:dd:27:87:62:a6:a0:44:9d:de:
c7:93:8f:8d:e3:dc:3c:05:51:bc:52:e2:9c:b7:eb:0b:af:88:
b2:4a:18:2c:90:20:e8:dc:88:82:34:5d:21:a2:08:cf:c4:2d:
39:17:27:86:25:9f:0f:d9:c9:4e:94:1d:4a:5e:89:f6:0a:ee:
f1:05:0a:33:19:19:c8:7f:a3:a2:34:7a:29:f4:a4:61:7f:54:
c1:58:df:b8:14:12:04:2a:16:9a:63:c0:eb:56:bd:e0:54:ca:
21:a0:87:e9:ba:0f:2d:17:13:05:f7:d5:e4:b9:b4:0d:38:55:
f4:cf:7b:62:a5:56:e2:48:04:f1:df:99:d8:0f:b4:1f:ee:12:
37:44:8b:4e:56:4c:f6:d3:0e:39:c4:d4:7a:5a:bb:6b:48:97:
fe:ab:43:96:75:28:e9:95:fc:4f:80:4a:a5:af:65:b4:b7:fa:
6e:9a:0b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:24:38 2025 by rpki-client