Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
File: FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft (raw, json)
Hash identifier: FJGITgP9Ou3K+f27vX1odF2pgQ2WPG+EE3LDEF7TX24=
Subject key identifier: AC:6F:30:94:ED:FF:B0:3E:F1:8D:F1:38:DE:B5:EC:6C:67:5A:96:C1
Authority key identifier: 16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
Certificate issuer: /CN=16e49258dc76546dc595084d2593e181cd47983f
Certificate serial: 019A23D339BF17A703E21EF8FE54196E9A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 04:00:36 +0000
Manifest this update: Mon 27 Oct 2025 04:00:36 +0000
Manifest next update: Tue 28 Oct 2025 04:00:36 +0000
Files and hashes: 1: FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl (hash: F+mFvjAIgiYKvCV6y0LknvlZFXuS+YPyhhE4VvmiitY=)
2: VUbDzg-9AyYevbePTrpEdiRqwN4.roa (hash: t4/eKGmP5PXlxUDXBzE6y3aXXoUIuyqOs01O0kBzip8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:39:bf:17:a7:03:e2:1e:f8:fe:54:19:6e:9a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16e49258dc76546dc595084d2593e181cd47983f
Validity
Not Before: Oct 27 04:00:36 2025 GMT
Not After : Oct 28 04:00:36 2025 GMT
Subject: CN=ac6f3094edffb03ef18df138deb5ec6c675a96c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:d2:6f:a4:bd:ec:22:90:95:4c:6d:7c:b7:
c3:fe:40:15:30:c2:ad:4d:64:e9:79:b3:98:85:1e:
42:f6:95:63:f4:c3:e9:8b:df:f2:6f:55:e2:86:93:
c5:4c:76:9e:54:48:e4:82:70:31:1b:af:c4:06:d0:
dd:44:04:a3:a1:f8:67:a0:a6:bf:4a:7d:91:23:86:
41:a0:14:32:aa:9f:17:12:f1:93:c5:22:e9:46:7f:
9b:60:da:33:9d:ac:bc:a0:ab:92:e0:69:01:5d:b7:
cb:18:27:e0:da:83:43:ad:05:bd:22:51:31:69:49:
46:7d:1f:ef:c0:ba:d1:23:9b:da:cb:7a:7c:e7:8f:
06:9c:c5:b2:ea:52:81:36:c0:28:91:23:db:3c:ed:
d8:08:0a:de:df:5f:9f:b9:70:ea:19:04:35:1f:3e:
79:ce:dc:ce:00:27:d3:1f:bd:23:db:4f:fd:33:3c:
42:1f:d8:aa:15:3e:9c:64:25:6a:f2:d5:07:98:76:
36:13:db:d2:b2:b5:ac:30:59:7a:76:63:79:f7:ec:
99:ed:89:7c:92:ab:8c:ac:9e:d7:97:c5:b5:66:79:
e1:45:08:af:ec:81:bb:da:0b:f8:16:1d:c2:b8:1f:
f2:88:2f:35:d2:dd:45:6d:85:e1:b0:3e:40:51:9d:
fb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6F:30:94:ED:FF:B0:3E:F1:8D:F1:38:DE:B5:EC:6C:67:5A:96:C1
X509v3 Authority Key Identifier:
keyid:16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d3:70:c6:67:85:b0:82:a2:3d:0d:13:19:28:0d:2d:9d:67:
32:08:c2:df:86:b8:2f:39:b8:5f:35:31:21:95:1f:e5:17:d3:
87:13:9d:0b:87:c3:65:8b:90:49:dd:07:f6:91:22:0a:18:a0:
88:80:29:f4:b0:26:b2:b8:58:c0:3b:57:4b:b3:e4:ac:17:b6:
b8:cb:c1:04:b4:14:3b:8b:3b:a6:13:97:7a:c7:5f:4e:e9:28:
44:46:9e:9c:3e:fa:ca:ea:88:54:91:42:d2:b9:be:6c:53:54:
04:5c:b0:0f:18:63:76:14:9e:75:34:c9:5b:77:25:20:b8:95:
76:61:7c:b0:fc:f5:13:01:10:00:8d:75:e9:a8:82:ad:ef:5e:
dd:b2:e8:96:f9:01:c7:47:56:72:49:a1:c8:25:b1:93:fa:e5:
e2:fc:2a:c9:ac:21:35:1d:ce:da:de:e3:11:47:f4:19:c1:fa:
c1:22:f7:80:b3:46:52:e0:c7:1b:65:e2:81:a1:33:7b:ab:51:
68:56:64:75:41:bd:2f:7c:61:8f:bf:5f:78:31:78:bc:bd:38:
8a:a6:b0:b3:cd:2a:8c:20:5b:33:28:cf:11:34:ea:56:04:8a:
3f:f5:5d:3e:4e:c5:72:d3:16:bb:e0:29:e1:09:20:4a:ce:4a:
1e:5c:32:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:24:43 2025 by rpki-client