Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
File: FsbhUuwA0rDjB9YZ5388HRQm7vA.mft (raw, json)
Hash identifier: 2onRycd65jU7BkLqZL9dgWla1W+P6BKOv0N0ZuYhgCY=
Subject key identifier: 69:C5:06:67:AB:14:74:14:84:AA:79:7C:A7:66:3F:4C:1E:AA:C3:F2
Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
Certificate issuer: /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Certificate serial: 01982823056FD87B068CFFCDCC460C11E22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
Manifest number: 17
Signing time: Sun 20 Jul 2025 14:00:40 +0000
Manifest this update: Sun 20 Jul 2025 14:00:40 +0000
Manifest next update: Mon 21 Jul 2025 14:00:40 +0000
Files and hashes: 1: FsbhUuwA0rDjB9YZ5388HRQm7vA.crl (hash: mtdKQzv0LDOT2A0HkyF6YyaK6W82clPoNGspkZyGdPE=)
2: RyU-tKT6g5iQNEPXbzsjbHBM1_k.roa (hash: 2sFbg6PGW25XBrpSEBIs6U3UJCsY2lOFHoiV3xMg67c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:23:05:6f:d8:7b:06:8c:ff:cd:cc:46:0c:11:e2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Validity
Not Before: Jul 20 14:00:40 2025 GMT
Not After : Jul 21 14:00:40 2025 GMT
Subject: CN=69c50667ab14741484aa797ca7663f4c1eaac3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:83:c7:42:88:c7:36:03:60:e5:c7:20:b9:
7c:5e:f9:62:a6:5f:00:d7:fb:e9:14:ca:64:cd:04:
74:32:be:f4:e8:d0:05:a6:bb:e9:12:97:c0:32:e3:
86:13:e7:80:8c:31:dc:ce:68:c3:a9:18:7e:08:f7:
f8:d7:2e:bb:3a:4d:b3:12:35:e5:16:87:6d:5d:65:
63:45:27:d3:2a:f2:dc:52:16:a4:4f:34:1e:90:1d:
a4:df:c7:31:69:9e:be:b2:47:2e:75:d0:c1:c1:ca:
98:71:62:b3:26:07:68:c9:f3:4f:63:40:69:37:66:
0c:21:26:98:45:2c:61:ad:8c:a9:29:44:51:8f:de:
d2:47:ee:3c:5a:0b:10:35:99:f5:59:02:de:d4:39:
17:ce:cf:c8:cc:70:c2:d8:e0:bb:68:14:77:0f:53:
24:db:3e:66:cf:3f:ad:09:34:19:2d:06:3a:69:cc:
a4:ee:6f:5f:90:75:81:79:c6:a4:c6:f2:5c:1f:f9:
7f:ea:a3:e5:b9:b1:f1:99:cc:3f:93:c5:65:dd:b9:
bc:d0:31:4d:9f:45:3a:dd:fc:2d:ae:00:83:fa:ac:
fe:dc:f2:97:bb:12:91:7d:cf:eb:a1:bf:37:4b:d9:
cc:db:0f:26:1e:8b:a7:94:a0:7f:3c:0e:bb:b5:be:
e0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C5:06:67:AB:14:74:14:84:AA:79:7C:A7:66:3F:4C:1E:AA:C3:F2
X509v3 Authority Key Identifier:
keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6f:fb:f3:0d:e2:c1:89:d5:fb:4f:b1:36:b5:90:ce:86:b0:
35:08:87:b1:45:a7:ec:48:8d:96:06:0d:37:2f:1d:f3:15:70:
60:4a:6d:6d:9d:16:95:4e:d1:85:67:da:f4:f5:9a:11:78:42:
81:43:e5:c1:23:e5:a4:39:d1:55:e0:04:08:21:6c:5b:5c:0b:
e9:8e:9f:56:4c:fe:f7:42:f7:fb:31:ca:a0:09:df:06:fe:b6:
cf:fb:13:27:4f:ae:57:c9:73:10:8c:77:d9:3f:2a:c6:34:0a:
dd:80:a4:f3:c7:51:b6:78:be:6d:32:13:51:9c:76:76:c8:b0:
cb:29:7b:46:90:9b:82:10:8c:80:eb:87:f8:cf:33:ec:e7:9c:
8c:42:ab:71:d1:f4:cc:17:88:c1:a4:15:02:e8:d8:16:7f:6c:
a2:5d:36:20:f4:e8:18:2e:bb:b5:c9:cb:dd:40:62:38:2e:4f:
d9:7c:01:01:ee:66:1d:1f:03:60:42:26:f0:10:e8:62:db:d0:
76:51:25:0e:23:c3:6f:39:21:f7:59:69:fe:b3:14:89:9b:c1:
bb:68:5c:c0:7b:ca:15:db:60:e3:24:6b:85:88:a1:99:55:01:
d9:0d:74:d9:db:37:75:d8:08:4f:dd:38:fe:f0:7b:13:42:84:
50:15:2b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:23:31 2025 by rpki-client