
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
File: FmqYZpgAXVfnuS96ONIZu7gP4f8.mft (raw, json)
Hash identifier: TwU3v035M4nTnaxuaHJi6cBSIr4IZ9hoVVwlYso9xnY=
Subject key identifier: 49:3B:16:85:14:B9:29:D8:38:5E:FB:83:23:CD:3A:9A:7C:3D:95:17
Authority key identifier: 16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
Certificate issuer: /CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Certificate serial: 01984966A5EFF2DB1A7F4B7B9A1EE36591E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
Manifest number: 1089
Signing time: Sun 27 Jul 2025 01:02:00 +0000
Manifest this update: Sun 27 Jul 2025 01:02:00 +0000
Manifest next update: Mon 28 Jul 2025 01:02:00 +0000
Files and hashes: 1: FmqYZpgAXVfnuS96ONIZu7gP4f8.crl (hash: g0Bj2maninope6kyoDhiOvEZ3DaP6lfR/LXoHQPebRA=)
2: c4nEiNEeJD2vFf8wumBi1yYvs6E.roa (hash: aF0QKy6JcPOas0fgNBBJCKQQxMBB/xZccd3mvICIadY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:a5:ef:f2:db:1a:7f:4b:7b:9a:1e:e3:65:91:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Validity
Not Before: Jul 27 01:02:00 2025 GMT
Not After : Jul 28 01:02:00 2025 GMT
Subject: CN=493b168514b929d8385efb8323cd3a9a7c3d9517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f5:7d:37:cd:f6:37:5a:cd:d8:ce:88:ee:2b:
e4:cf:95:6c:88:ad:be:1b:02:0e:ed:a7:6c:91:9c:
c9:f1:4c:2c:36:b5:38:68:d8:3e:c1:d2:49:52:b3:
8e:92:b5:4a:46:bf:94:c9:24:da:0f:6e:6e:43:3c:
b8:0c:20:24:99:db:91:f2:c4:49:c5:2b:d2:bb:21:
11:34:df:c3:a9:72:16:7d:d2:13:f9:7a:f7:87:91:
d1:61:a8:40:31:c3:94:95:84:8d:08:82:e1:c0:76:
22:98:37:0d:8e:27:44:74:95:62:cd:c6:25:c9:b6:
dd:a5:6b:19:f8:f4:45:fa:c0:06:f4:3b:fa:c9:d1:
9a:42:f9:7a:a5:00:c9:a0:a1:fd:5a:3e:d3:12:88:
f7:19:04:dd:7b:10:69:fc:4b:3c:a6:80:df:37:d8:
f8:40:55:92:3e:8d:30:58:00:bc:5d:37:b9:f0:6d:
e1:3a:17:63:88:ea:83:02:99:b6:6a:ed:ce:1b:ca:
10:b2:d0:8e:d0:26:62:aa:cd:aa:07:db:de:b4:dc:
c3:6c:88:72:0c:0c:1d:2b:55:5a:30:1a:bf:89:fc:
7d:c9:50:f1:7c:b9:bf:a9:b8:25:33:9e:e9:b4:ca:
30:c9:5a:c9:ad:89:16:78:c3:b9:6b:60:bd:c7:1a:
48:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3B:16:85:14:B9:29:D8:38:5E:FB:83:23:CD:3A:9A:7C:3D:95:17
X509v3 Authority Key Identifier:
keyid:16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:22:b5:eb:f6:ea:25:55:0d:d9:97:05:d1:a8:dc:79:dc:c6:
da:fb:26:7e:8d:87:c1:69:91:0c:97:32:5c:cf:e0:5b:78:03:
6a:9a:1b:90:c6:2c:15:e8:c6:d5:4f:36:b1:2b:fa:dc:4b:2e:
5a:ba:18:ec:e1:a0:d3:8b:f3:20:79:2c:ff:c5:48:04:a9:99:
11:a6:68:7c:50:09:52:24:09:40:30:43:53:fd:00:d3:4c:2f:
f6:a3:a6:58:20:91:1e:27:63:ff:b6:69:e4:55:2f:ff:ed:af:
0f:54:5b:b9:81:15:b5:d6:c6:36:00:5d:7b:3d:20:62:1f:87:
e2:33:03:0f:b2:9f:52:b7:34:23:06:b9:77:28:03:e1:94:7b:
90:af:d9:ec:49:3f:b2:ac:05:7a:96:89:49:4f:15:19:ae:56:
d1:d5:e2:33:cf:cd:8c:be:48:68:c1:6d:5f:94:93:e6:57:4b:
3e:74:6d:3d:c9:41:a3:a6:e6:24:1e:1c:39:7f:8d:8a:05:b1:
95:80:e0:01:f1:0c:48:9b:dc:b0:cd:76:90:a5:71:6f:96:5a:
1a:fe:a9:f0:d9:d0:32:d2:72:c1:e5:a7:d3:5e:ef:a3:52:c9:
92:c6:94:6f:07:13:01:29:be:7b:78:b3:f9:bf:2e:77:35:a1:
76:13:34:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:46:23 2025 by rpki-client