Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
File: FnhcBIzz1bIYafSUNPLTu0fUO6E.mft (raw, json)
Hash identifier: 9C41nBpbqjbNEclEu3KgTIYj6FzB9sIdAeUxe6/h5G4=
Subject key identifier: 98:69:36:C3:EC:08:76:0E:73:1F:97:6E:1C:AE:29:FC:1A:5B:93:BD
Authority key identifier: 16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
Certificate issuer: /CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Certificate serial: 019858343860F932DFE5722A14D5F2E1C3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
Manifest number: 1509
Signing time: Tue 29 Jul 2025 22:01:13 +0000
Manifest this update: Tue 29 Jul 2025 22:01:13 +0000
Manifest next update: Wed 30 Jul 2025 22:01:13 +0000
Files and hashes: 1: FnhcBIzz1bIYafSUNPLTu0fUO6E.crl (hash: 9f8j1/Mh7YbK6lmsPYa9stvLuLtnz80eT/MN6dQ/LJ8=)
2: lvXJyQy3nWKTfzu8oFBAWTYMtuo.roa (hash: s4PZbf+hjf3iDmNtbUCQUPc0IiLibPsLSs4quWHg7C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:34:38:60:f9:32:df:e5:72:2a:14:d5:f2:e1:c3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Validity
Not Before: Jul 29 22:01:13 2025 GMT
Not After : Jul 30 22:01:13 2025 GMT
Subject: CN=986936c3ec08760e731f976e1cae29fc1a5b93bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:ef:f2:c9:43:62:28:e9:97:e2:ad:48:f6:
f6:fc:aa:52:97:6f:80:3c:ab:f5:aa:81:61:dc:81:
dc:f9:a5:3c:6f:5c:0f:bf:fa:90:75:e7:01:17:b0:
7e:1e:56:43:f3:b1:3e:76:80:ec:98:7c:c5:8d:d1:
d2:97:fc:d5:22:03:b1:f7:d6:9e:f2:46:e9:5d:2d:
59:25:c2:2a:d5:c3:31:0b:0d:a0:f3:e9:18:57:79:
9c:64:94:87:2c:52:7d:c3:64:68:2f:84:94:08:79:
26:9d:39:e7:13:81:fe:4e:eb:db:c9:2f:a8:23:74:
f9:8d:30:84:68:b2:13:1f:1e:76:56:f4:25:7f:67:
dd:a0:99:1e:47:59:9f:32:d6:f8:8d:07:07:7b:72:
57:d1:88:77:29:b5:c9:7c:e6:f4:4c:e9:b8:7a:8a:
90:65:cb:5a:d3:0d:ac:58:b0:43:ec:5f:7a:4f:41:
6b:5a:3e:ab:d3:d0:ca:a1:09:1a:f9:ad:b5:f2:63:
25:ba:4d:5b:fc:e9:3b:b9:90:0d:bb:a4:09:fd:8f:
6c:dd:f0:67:91:56:22:d9:eb:9a:f3:97:93:ff:b2:
fa:03:3f:3a:76:88:bb:13:fc:b5:3b:1a:39:24:0c:
cc:03:52:44:3d:c4:07:78:26:6d:55:ee:5c:66:63:
78:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:69:36:C3:EC:08:76:0E:73:1F:97:6E:1C:AE:29:FC:1A:5B:93:BD
X509v3 Authority Key Identifier:
keyid:16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d9:f6:f7:af:74:e7:3f:99:41:ec:49:2f:dd:df:59:b4:70:
d3:a2:cd:73:aa:36:ed:d2:79:02:e6:68:b2:eb:61:c5:00:42:
d1:fc:59:30:dd:fd:5e:a5:c0:ed:f0:c4:a0:d4:ab:67:78:ec:
77:9b:e6:1b:64:31:0a:bc:9b:04:b9:44:75:e0:fd:54:9b:15:
9d:76:89:47:77:ee:0f:d8:3f:fd:6e:5a:7a:59:bd:15:02:eb:
de:89:bf:16:79:1b:6b:f7:3d:db:7b:e9:5d:72:35:e1:bc:e8:
20:33:f2:6d:1c:17:25:a8:ce:d9:86:a7:cd:68:68:40:e2:c1:
f1:63:e7:52:49:b8:0a:e8:91:0f:13:67:6c:e9:10:38:49:28:
81:ca:2d:b0:ff:45:b8:d0:3f:93:b3:4d:78:3f:76:46:78:b9:
17:0e:32:47:f9:10:30:4e:b5:05:a9:82:6e:f1:33:a9:3f:74:
2a:e1:14:33:32:4d:30:67:37:82:dd:c8:db:f3:46:80:53:2f:
de:0f:8b:eb:53:79:ad:ba:6f:ef:63:16:14:9d:83:d9:98:2d:
f4:a0:20:49:7f:cf:52:6c:e9:ad:7d:2d:4f:af:e1:c7:f7:ac:
35:ca:82:2a:37:79:db:5a:d9:32:03:d0:8f:7c:48:a0:66:fe:
ba:c3:24:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 07:54:41 2025 by rpki-client