Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
File: FqBO4EsSgj6FP_JD02VR5M5oOnM.mft (raw, json)
Hash identifier: CaqIVF9wWIfTJ19c6700ZvBYYkEE3ote7oQIMzS8KaM=
Subject key identifier: 0C:2B:03:33:C6:82:6C:18:A4:C8:A3:6A:2A:67:D3:80:90:A5:8A:9C
Authority key identifier: 16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
Certificate issuer: /CN=16a04ee04b12823e853ff243d36551e4ce683a73
Certificate serial: 01984AAEF2F9B73C2599EBBA5FD0BD86D94E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 07:00:35 +0000
Manifest this update: Sun 27 Jul 2025 07:00:35 +0000
Manifest next update: Mon 28 Jul 2025 07:00:35 +0000
Files and hashes: 1: 7yvWMV7T5eN6efasr2rdxP4qnTg.roa (hash: IQLAVcCJbXWjx9lqcgGZjEbAOQis8qmzfLoEHM8bDrs=)
2: FqBO4EsSgj6FP_JD02VR5M5oOnM.crl (hash: yPycAIM6cBS7TBJZzDIEE5RekpJm6XHg5/zCN8iuilk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:f2:f9:b7:3c:25:99:eb:ba:5f:d0:bd:86:d9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a04ee04b12823e853ff243d36551e4ce683a73
Validity
Not Before: Jul 27 07:00:35 2025 GMT
Not After : Jul 28 07:00:35 2025 GMT
Subject: CN=0c2b0333c6826c18a4c8a36a2a67d38090a58a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:d9:f4:92:22:96:c4:88:f4:88:12:3f:23:
ff:38:df:44:7e:61:d5:aa:92:36:2f:d7:d2:e8:d7:
77:af:d0:b9:b4:e1:db:87:e4:0d:0d:71:85:9c:cd:
d5:3e:b0:5f:98:6b:46:ba:9c:db:21:d9:76:15:29:
29:da:41:1d:97:39:91:61:b2:c1:e8:e4:43:ef:94:
a9:c5:13:f9:e8:de:8a:cc:9f:94:77:c2:41:30:2d:
a3:47:86:9a:5e:8a:10:79:05:8b:c5:8e:dc:43:bf:
43:01:52:7b:01:ab:ac:be:c2:f0:e4:af:6e:de:49:
90:49:fd:c5:1e:2b:94:a5:8a:a2:c3:a4:40:b3:e6:
b0:cd:f2:59:47:1d:e8:0b:8f:0c:ad:30:f6:de:c7:
93:da:dd:ea:a4:c1:8a:14:a2:ad:d1:ed:2d:62:09:
df:63:3a:96:e8:3e:4b:18:e3:6b:c7:83:16:2d:16:
e5:16:39:ab:d8:da:bd:9a:b9:98:b8:03:3d:79:bd:
94:cb:2e:07:f7:8c:32:9c:c0:21:16:8f:06:31:ec:
95:9d:09:5e:95:69:bc:82:de:57:e0:14:3c:ea:a4:
18:2e:5c:cc:55:aa:2b:7a:f5:39:26:2a:17:af:ae:
3a:53:0d:f8:1d:d7:71:b5:ae:1d:aa:63:14:c4:f0:
cb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2B:03:33:C6:82:6C:18:A4:C8:A3:6A:2A:67:D3:80:90:A5:8A:9C
X509v3 Authority Key Identifier:
keyid:16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7b:d0:48:29:9a:f5:67:06:f1:27:7d:5c:48:76:c0:ac:fe:
b7:62:65:88:37:74:d0:a4:73:36:89:0d:84:e9:ca:2d:f1:a4:
d0:f2:46:3e:47:e1:9c:a4:c1:84:36:25:5b:a0:39:d3:fd:a9:
b4:14:2e:62:b8:61:0f:68:20:0a:e8:a3:81:1d:81:c4:50:42:
2b:23:76:8f:82:cc:3d:ac:46:eb:f0:5c:36:c4:12:c6:ff:33:
05:25:79:f1:38:7c:a3:92:b0:e7:d2:dd:3b:70:ec:00:ab:5b:
1d:a7:25:e9:75:e1:44:fb:75:96:d1:6e:d0:f5:aa:b5:e4:fe:
4c:8c:1a:c4:f5:db:50:7e:f8:bd:ae:1a:39:5b:05:db:9d:1a:
0c:52:79:bb:7f:90:22:46:5f:37:8f:e8:fd:65:37:97:14:4f:
be:ec:65:48:fd:62:35:98:7c:0b:89:89:9c:b7:85:6c:10:8f:
fe:84:d2:3c:3e:f9:35:c7:60:56:06:37:ee:33:8a:47:76:97:
77:7a:71:37:62:84:59:cc:a3:11:21:12:eb:ac:71:c2:58:cd:
46:26:d0:20:8e:4a:08:55:66:dc:a8:20:0d:71:4d:4c:97:af:
6d:59:d5:fd:9a:eb:3d:a6:b1:bd:b3:d3:41:e7:e9:ea:08:2e:
9e:9e:6d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:54:58 2025 by rpki-client