Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
File: Fv4NAkzduvhoIpEiFYlxRysky00.mft (raw, json)
Hash identifier: B3UgoBNQxtIgSL9BhZY8RME+2fiLrbCIvMVvoQEEXq4=
Subject key identifier: 59:20:94:D8:1D:B9:46:BA:75:A8:A9:26:64:5B:E8:89:9C:8B:B2:5D
Authority key identifier: 16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
Certificate issuer: /CN=16fe0d024cddbaf868229122158971472b24cb4d
Certificate serial: 01984475A004D8FAAC9C166299652BD0B71F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 02:00:15 +0000
Manifest this update: Sat 26 Jul 2025 02:00:15 +0000
Manifest next update: Sun 27 Jul 2025 02:00:15 +0000
Files and hashes: 1: Fv4NAkzduvhoIpEiFYlxRysky00.crl (hash: ZLggtQMlVls5WUVtaIIJeLByrvibUSWZq5POO6sGGKc=)
2: ThZzWFH5INkQ7ymiA_IBq-KPEM4.roa (hash: dM5mDKUs0Ppdg4qZBmK0UY+RheCcm2hY4o7VfDpWvQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:a0:04:d8:fa:ac:9c:16:62:99:65:2b:d0:b7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fe0d024cddbaf868229122158971472b24cb4d
Validity
Not Before: Jul 26 02:00:15 2025 GMT
Not After : Jul 27 02:00:15 2025 GMT
Subject: CN=592094d81db946ba75a8a926645be8899c8bb25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:77:e9:f9:04:11:f5:d3:21:b2:c2:1e:30:
b5:ce:69:13:8c:fd:66:fd:06:41:f2:f3:2e:ee:04:
e2:12:a3:3f:e3:4b:31:ce:3b:7c:59:7d:43:c1:f3:
ad:80:b5:98:06:d1:4c:e4:b3:66:85:8e:93:8d:4f:
7b:cb:90:76:43:9a:40:3d:ad:48:7c:f7:d4:9f:fc:
c6:d3:ea:55:94:16:c9:57:88:3c:aa:e5:75:62:5a:
1d:07:73:fa:06:ec:20:d3:3f:2f:79:2d:5d:f7:2a:
ff:ee:c0:12:b1:34:bc:ef:41:39:0e:e8:9b:74:98:
6d:d6:c9:05:43:77:30:62:2a:47:9f:9a:76:a0:4c:
b4:ba:dc:53:72:16:ed:f6:7b:60:d3:e7:a5:35:6c:
1e:7a:bc:26:f5:23:ab:17:72:3a:6c:02:7c:65:68:
3d:b0:d5:8c:5a:fc:cc:c9:67:a7:51:4e:ed:d9:ca:
84:b7:a1:61:76:57:af:91:05:d0:71:8e:07:02:33:
d1:e8:85:31:ed:27:23:b8:a8:61:e3:50:22:25:d8:
a9:79:7f:10:33:f3:78:45:7c:a9:84:d6:98:04:29:
08:e0:f1:db:2f:a1:74:87:bd:8a:ca:18:3c:93:d0:
0a:bd:e5:95:93:d8:33:af:52:8f:3f:80:04:85:c7:
bb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:20:94:D8:1D:B9:46:BA:75:A8:A9:26:64:5B:E8:89:9C:8B:B2:5D
X509v3 Authority Key Identifier:
keyid:16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4a:af:6a:7f:40:c7:1f:c4:a3:ad:b2:bc:06:d1:18:4b:f0:
78:59:4e:39:4e:69:00:c0:d4:c4:7a:bb:a0:79:7d:79:b7:62:
49:96:29:7f:9d:50:bf:fb:7c:07:e8:dd:3d:57:8f:7f:6f:a5:
be:fd:f2:a5:c4:00:6c:fc:94:ad:1b:d6:ec:30:8c:a8:91:33:
b9:22:ee:e1:3a:38:50:5b:d3:59:c1:02:92:b9:47:f8:4a:19:
0c:7e:ed:2d:11:6f:ed:8b:75:33:e6:11:7f:86:b2:53:4a:1e:
97:b4:aa:37:66:a8:33:c7:17:44:cc:7d:4a:fb:99:d1:30:d5:
98:fd:19:9a:33:58:d6:cb:25:64:bd:9f:d9:1e:b7:48:93:46:
11:6d:40:f3:96:e8:ec:d6:21:af:05:4b:00:e2:03:28:75:8f:
b0:c3:8c:cd:56:19:45:6a:5e:7d:71:a6:05:5f:5c:6d:58:6d:
16:3f:dd:69:f1:3a:30:01:23:d9:52:c2:61:61:a2:74:4d:d3:
56:b5:07:09:67:72:ac:4b:62:27:c8:de:93:39:a4:18:d0:56:
c5:d4:e2:27:44:83:cf:75:e8:3a:85:45:48:e5:28:23:21:8d:
36:10:ec:02:e7:df:3b:f6:94:89:4d:69:6a:50:86:0d:d6:f8:
df:1f:48:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:36:12 2025 by rpki-client