Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File: FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier: nn8M2r05p0XmQNNXtnH2eCnYLRG2hC76XVwIXp7GlHs=
Subject key identifier: 8F:89:21:F4:FB:98:D2:48:0A:E1:A0:F2:AD:C5:77:D9:CB:C7:54:3F
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer: /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial: 019848F735794138827A09035CAC63F80B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number: 0720
Signing time: Sat 26 Jul 2025 23:00:17 +0000
Manifest this update: Sat 26 Jul 2025 23:00:17 +0000
Manifest next update: Sun 27 Jul 2025 23:00:17 +0000
Files and hashes: 1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: dZRVC1mJqfWLXcJDN2p21do0FD7YoK/p/Jz5uCurVfA=)
2: QOsoDDzE2ufJorNRF7vrLppBjZI.roa (hash: fHVneKRvI/gKsCi1tf45/HVfXiMRdMYJLFW5hZLpBag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:35:79:41:38:82:7a:09:03:5c:ac:63:f8:0b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
Validity
Not Before: Jul 26 23:00:17 2025 GMT
Not After : Jul 27 23:00:17 2025 GMT
Subject: CN=8f8921f4fb98d2480ae1a0f2adc577d9cbc7543f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:52:b7:68:8c:2e:82:ce:9d:0a:86:e3:4c:
19:12:d1:ea:61:56:3e:62:57:4f:64:73:ab:b3:9e:
10:d5:eb:58:5c:d5:71:3d:99:b9:cf:17:0e:45:5b:
70:73:a9:ff:a0:03:ad:6b:8d:f0:fe:b7:b2:f6:e8:
a2:12:d8:aa:65:1e:c1:e3:fe:15:33:3e:09:2e:cc:
b6:a7:bb:37:0c:70:2e:d0:a8:99:da:7a:3b:c8:1d:
0d:82:02:0d:5a:0f:91:bb:84:aa:d0:b7:84:3e:63:
94:69:fc:a7:25:0e:db:74:ac:c3:7f:59:94:95:87:
45:46:5d:a4:bb:75:1e:45:42:0b:66:55:b3:65:3a:
ed:49:75:54:a1:5f:04:a1:20:fc:6d:83:59:1d:42:
17:82:b1:7a:f9:e9:51:36:aa:9c:a2:21:09:ac:73:
fa:18:f2:47:9c:d0:77:06:24:1a:99:03:ab:56:67:
b2:52:08:44:c4:f0:5d:0f:a4:ac:07:55:0c:a5:20:
52:56:e6:87:8d:d9:30:b1:88:c7:97:b7:f3:42:cb:
d0:13:07:33:40:fc:a8:d9:eb:9d:42:f6:61:ab:b1:
c0:91:6b:5d:01:f0:87:0c:e9:1f:2e:9c:a0:51:83:
e0:5a:97:79:91:83:04:e6:0e:0e:63:21:be:b9:5e:
c9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:89:21:F4:FB:98:D2:48:0A:E1:A0:F2:AD:C5:77:D9:CB:C7:54:3F
X509v3 Authority Key Identifier:
keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:52:eb:e4:fc:91:d7:e2:c1:00:87:86:27:6c:28:6b:5c:f9:
07:ec:9f:6c:d3:54:e2:13:30:d6:cb:bd:fd:2f:4f:92:46:4b:
b7:d6:c1:1a:79:0b:36:f8:77:76:99:b2:93:e7:25:1b:c4:b1:
5b:0f:d3:99:65:39:cb:a8:b6:d5:d9:46:0c:ed:33:1b:d2:14:
91:96:7b:27:f4:e7:bf:1b:89:78:ce:fd:ef:44:6f:08:14:96:
14:c5:4a:87:d9:f2:33:87:39:8a:92:28:d3:2d:dd:b7:72:67:
65:b5:dd:0f:e9:ea:52:b2:94:73:3c:13:c8:a4:f6:e8:0b:c8:
82:aa:37:52:2d:0c:fa:2f:88:8f:16:fd:18:97:f5:21:b2:2f:
8a:10:14:dd:52:a7:6d:aa:08:c7:c6:ec:a2:44:e2:61:e0:60:
9c:0b:9d:05:b1:04:1a:7a:d7:7c:b6:71:54:05:f3:99:7e:23:
45:aa:04:bc:49:aa:46:ea:91:9e:48:b1:f4:7a:6f:1a:cc:b4:
bb:d2:59:22:60:2e:00:bd:3c:f5:46:56:de:c1:a7:a3:cc:31:
bd:b6:11:fc:ce:7e:6f:a7:39:44:e3:5c:ab:3e:5f:75:66:03:
32:ec:ff:bf:51:6d:91:b7:36:9e:63:43:b0:e7:0f:07:71:67:
f7:ed:71:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:59:52 2025 by rpki-client