Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
File: FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json)
Hash identifier: YfhKVEk5vA2JQj1hWBXkwfjeUvsrxN2wwmCPyZCsjYo=
Subject key identifier: 81:6D:A1:E8:A1:3A:B1:97:36:02:0E:28:6C:62:8A:68:D9:0E:29:C5
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial: 019844ACB88A5F31A31B1DDAF69C6EF4201C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
Manifest number: 160B
Signing time: Sat 26 Jul 2025 03:00:26 +0000
Manifest this update: Sat 26 Jul 2025 03:00:26 +0000
Manifest next update: Sun 27 Jul 2025 03:00:26 +0000
Files and hashes: 1: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: kW1oCLv1CMOYYzD9SfWA9Gtkts5ekfojaRWrGBPWbgs=)
2: UUcKOryc_ykhvD7v1VUPE00sScs.roa (hash: dAexA2neb3HcfI1bNYdykFIadotQ4NdMRRVIE6QTBe4=)
3: q7sVZrLDAVZQekWMRkAvaSDSl9g.roa (hash: RRTQ5jExs41DvyGCsYtTzal7l6KRuDTnah7ylDN5VEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:b8:8a:5f:31:a3:1b:1d:da:f6:9c:6e:f4:20:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Validity
Not Before: Jul 26 03:00:26 2025 GMT
Not After : Jul 27 03:00:26 2025 GMT
Subject: CN=816da1e8a13ab19736020e286c628a68d90e29c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:58:ce:4e:79:99:75:c0:4f:27:1c:9a:a0:
6a:6a:18:5a:c9:8b:57:5c:d5:a9:4e:00:63:a2:68:
4f:ec:56:89:2a:26:01:94:ad:93:0d:2b:95:21:c5:
93:7d:5a:24:49:ac:f6:76:b1:37:f6:90:f5:65:53:
76:82:0d:25:a1:03:f4:b7:46:1f:8c:45:7b:90:29:
66:1d:21:f6:44:7f:d2:40:98:89:8c:97:69:49:a6:
84:03:5e:dd:a0:c6:dc:d8:d4:5d:38:c9:89:96:08:
70:60:89:1a:b1:80:33:55:8e:f2:d9:2b:ad:91:29:
88:8e:f1:50:f3:0f:59:28:48:88:f5:4f:fb:b9:ac:
e3:0c:0f:6e:ea:de:f0:06:e2:7e:25:30:53:92:8a:
06:f6:f7:73:2c:e1:59:93:31:ca:4c:e5:5f:1f:c4:
62:3e:a9:0f:94:87:69:a2:a0:3e:19:ad:df:f4:02:
80:24:7b:ac:c5:ce:34:62:0f:e2:f0:93:d0:31:f3:
9b:aa:9d:ec:39:34:b8:ca:4f:df:17:63:2a:d6:52:
a4:e1:c4:e3:d5:5d:73:dc:bf:85:5a:ac:7d:5a:dd:
92:ac:a6:97:a9:1d:93:75:01:c2:ef:01:1c:5d:2e:
3e:e7:17:a4:f6:b7:58:42:ea:6c:6d:ad:05:ab:e9:
5e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6D:A1:E8:A1:3A:B1:97:36:02:0E:28:6C:62:8A:68:D9:0E:29:C5
X509v3 Authority Key Identifier:
keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cd:6c:0a:1e:52:10:2e:e9:d3:77:fe:90:6c:ad:90:e9:df:
a9:f0:3c:b1:eb:da:f7:9c:dc:fb:ce:40:aa:e3:5f:14:7c:90:
0c:8a:c2:09:ff:b1:58:b7:d7:f4:f9:18:70:fc:5c:0c:ce:62:
4d:ed:e8:7c:e8:4b:57:56:4f:37:17:53:b3:41:27:ff:d2:dc:
b4:bd:83:da:a2:fb:e6:d3:05:a3:9a:c6:78:ec:1e:27:10:5d:
92:cd:c3:5d:96:fb:1d:15:4b:f7:7b:1f:c1:6c:23:c8:20:2b:
a6:95:58:4a:a4:68:41:49:0c:14:94:25:96:57:f9:80:52:e5:
5a:f7:62:ee:c1:e8:dc:7f:fd:04:19:83:71:73:2f:72:83:62:
17:ef:ac:47:b9:45:e2:7b:f3:1d:ae:f8:63:7a:24:60:1d:a9:
51:48:50:b9:86:da:ec:a7:0d:a8:d9:a7:46:78:03:06:e7:2e:
0e:64:f9:b3:76:26:67:e1:ed:ce:34:34:69:04:52:1b:91:c1:
1c:48:7b:f8:13:2e:91:52:13:bb:8e:6b:9f:7a:ad:ff:74:be:
eb:ae:5b:1f:60:8d:bf:97:17:14:3b:5d:53:a2:3d:51:26:b8:
47:f0:5b:45:1c:6e:b7:13:5d:fd:7f:8c:1c:de:1a:ee:13:c8:
d5:93:2f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:42:23 2025 by rpki-client