Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: J/5HY2fj5p1GMOys/UYiiRq1ipPr0wa9GUPE1HZ5Yhw=
Subject key identifier: 93:2C:29:58:50:3A:71:44:65:F7:D3:46:9F:D7:9F:D2:5D:2B:32:16
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 0199FC8F7E171B9BB3983C5BEDD4350788A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 13:01:26 +0000
Manifest this update: Sun 19 Oct 2025 13:01:26 +0000
Manifest next update: Mon 20 Oct 2025 13:01:26 +0000
Files and hashes: 1: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: oygVvQoxQvfJSUTxb0ngcObiAJZzdD1UPiZLxelrtxs=)
2: WEXs_7mi3mpWOcUG8wP1gKvlFMA.roa (hash: +bGwwC+VYAEY8cjrkr182bmVAbIXzAvAjxcOXwPk5RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7e:17:1b:9b:b3:98:3c:5b:ed:d4:35:07:88:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Oct 19 13:01:26 2025 GMT
Not After : Oct 20 13:01:26 2025 GMT
Subject: CN=932c2958503a714465f7d3469fd79fd25d2b3216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:bd:49:4e:3f:c3:e1:67:ab:d1:96:89:e1:
35:42:c4:cf:88:1f:7b:67:51:ac:2a:7b:e5:be:09:
13:b1:1c:2c:3e:7a:3b:96:94:bf:95:9b:38:6c:36:
37:55:86:43:a0:15:a8:f6:36:e7:4a:b5:fe:2e:ad:
be:8e:aa:1e:70:04:be:40:7e:bb:d4:8e:5c:d0:05:
b2:cf:9d:5d:54:f0:64:21:7b:33:a7:03:2c:14:c9:
70:eb:26:82:62:f6:93:6d:f8:dd:85:8e:2e:92:90:
52:2d:6c:c0:46:7b:e1:ef:c6:ee:d3:53:13:d2:ba:
85:c3:cd:0f:76:24:01:cf:fe:6d:de:cf:37:44:dc:
6c:27:25:60:5c:52:02:c8:83:8d:f1:94:1f:66:8f:
d9:56:9f:c0:1d:44:0a:7b:43:6a:4a:da:de:2c:63:
ae:b5:1e:ac:5f:b6:82:4a:ad:df:7c:5f:c1:3f:5b:
27:bb:07:b0:99:e3:d7:0b:3e:41:db:0c:14:0c:94:
3b:92:98:50:60:72:ff:36:01:00:f4:e6:a2:d2:ff:
d0:09:19:cc:0f:70:44:0d:e2:9f:9f:a9:69:83:60:
a4:df:b5:cb:10:9f:80:35:6c:97:64:94:24:bc:89:
f6:03:83:4a:9f:e2:5e:e9:36:07:97:30:7f:37:c3:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2C:29:58:50:3A:71:44:65:F7:D3:46:9F:D7:9F:D2:5D:2B:32:16
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:79:59:7a:12:cd:b3:d7:70:de:5b:69:f3:be:2a:66:69:79:
ec:44:12:79:22:2a:99:94:de:53:54:0b:4d:f9:27:22:c9:e8:
89:e7:23:66:fc:74:0a:b9:d7:2a:e8:ae:96:63:8f:bc:6c:ed:
7b:63:2c:b8:2c:a4:be:5a:e5:f1:84:e6:30:6b:a8:a3:d1:65:
10:6c:84:e7:84:89:97:fb:a7:fd:d9:aa:63:b1:00:89:01:11:
6b:cb:fa:4a:9d:78:ac:0b:de:34:43:8a:80:e1:7d:11:02:fe:
c9:33:dd:2c:09:05:f8:8a:4f:04:a9:40:cb:22:63:36:e3:de:
91:ae:50:91:21:82:30:4e:d9:90:7d:c0:f7:d6:83:d3:36:23:
38:73:b2:2e:d6:d2:43:f1:28:ad:96:67:7f:0f:ed:bd:ab:3f:
8e:d4:a7:a3:d1:23:64:03:95:7d:83:93:69:d6:dc:67:91:24:
a5:42:6e:54:18:47:7a:4c:50:f7:5c:a4:13:e6:0d:aa:b2:5f:
0e:f5:78:52:5e:46:48:54:0a:b0:84:30:43:ea:ae:40:0a:80:
34:c8:7f:d4:ad:e6:c1:06:43:93:36:eb:00:39:e6:dc:b1:72:
30:72:df:b5:4e:05:93:fa:a6:5c:03:90:66:0e:e2:77:5d:c2:
13:67:f6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:59 2025 by rpki-client