Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
File: FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft (raw, json)
Hash identifier: +7Yvg0zslCiG38T7O53w4mDG5+mUyGTQ5aYmOzxRYoo=
Subject key identifier: D2:D6:BC:9B:A5:E3:3E:13:18:1C:E8:AD:06:25:F5:7E:C4:E5:D1:7A
Authority key identifier: 16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE
Certificate issuer: /CN=168a919a4a463f3ca2bba5442550fc247da90cae
Certificate serial: 019921E7A427FEC5FDF291468C15A071DAAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
Manifest number: 0191
Signing time: Sun 07 Sep 2025 02:00:52 +0000
Manifest this update: Sun 07 Sep 2025 02:00:52 +0000
Manifest next update: Mon 08 Sep 2025 02:00:52 +0000
Files and hashes: 1: FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl (hash: c2UnW2rBm0RIqd1PnnO7QBNBgaTDnczg8GF0dpAScXc=)
2: ve2iEFS7yneK4NHtoTNszVB8cZo.roa (hash: g/XvhTcgORHoQzc25n1ZqGUd92LVhhds69w5ITmpr4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:a4:27:fe:c5:fd:f2:91:46:8c:15:a0:71:da:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168a919a4a463f3ca2bba5442550fc247da90cae
Validity
Not Before: Sep 7 02:00:52 2025 GMT
Not After : Sep 8 02:00:52 2025 GMT
Subject: CN=d2d6bc9ba5e33e13181ce8ad0625f57ec4e5d17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:e4:f2:1f:bd:27:16:17:e9:64:dc:fb:d0:
83:39:e5:ea:16:06:10:79:fe:60:e2:12:b5:c6:54:
f1:8e:05:58:f1:7a:89:8f:87:17:64:31:f6:51:03:
52:71:0c:3a:da:14:76:17:82:94:e4:27:ad:ff:9a:
84:95:19:9d:29:38:19:cc:69:df:0b:66:34:8e:88:
61:55:47:c1:96:e4:a6:61:0d:a4:be:92:2d:2f:ae:
12:cb:67:d8:62:f8:48:68:fe:95:67:29:09:83:43:
1e:c3:72:70:d4:32:74:48:e7:cc:36:6f:5c:41:9b:
01:fb:4a:3e:e8:a3:79:f1:c3:1e:81:e0:4f:8a:f6:
b9:3e:33:0b:cb:c0:20:96:08:1e:eb:5b:30:42:5b:
7a:8a:cf:3b:c0:b4:52:52:19:df:f5:09:08:77:2f:
83:04:87:63:d1:a8:be:ad:d5:ad:9b:0f:6f:31:66:
fe:2f:c8:07:15:82:5c:cb:a1:0a:82:8d:90:01:e0:
45:64:14:89:11:e7:3e:60:23:43:7a:4b:d1:07:16:
c8:c1:dd:53:19:a0:bc:b4:f2:f2:cc:89:1e:5b:31:
3b:9c:07:6a:a2:97:c7:31:7e:67:7c:4d:f2:31:b0:
8e:a5:70:33:aa:09:9a:c2:e6:f6:14:a4:f2:ae:f7:
8a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D6:BC:9B:A5:E3:3E:13:18:1C:E8:AD:06:25:F5:7E:C4:E5:D1:7A
X509v3 Authority Key Identifier:
keyid:16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:42:85:6c:c6:8d:65:35:ab:e9:78:28:fa:7d:22:9c:93:45:
f3:99:79:5c:56:ae:2e:f9:fc:e1:fb:b6:67:67:50:9c:ae:61:
96:02:98:cd:4a:1a:f2:ce:e8:d5:f8:17:ed:fa:6a:f1:e2:06:
1d:f1:ca:c7:dc:c7:91:23:c5:57:6a:da:67:40:aa:50:2a:fc:
ef:b2:cd:ee:57:7b:ce:88:3d:30:2c:4d:2f:64:9e:75:bb:d0:
ce:30:f7:f0:33:8e:7a:57:89:e9:b3:a8:ec:1c:02:2d:87:9e:
50:92:ed:06:9c:9f:08:15:e9:9c:c5:3c:09:81:f1:cc:f2:8f:
ee:8d:dc:c6:60:94:60:50:fc:4f:65:4b:e8:54:af:ec:ac:e4:
0e:ab:a2:d4:59:d3:54:26:43:86:09:ef:c3:95:53:cb:1c:e8:
7e:04:72:f5:fb:7e:df:66:ec:d9:af:e1:61:66:9e:82:9e:02:
c1:b8:99:01:85:b6:89:c3:3e:d1:7e:91:2f:82:91:7c:d9:1c:
d8:51:ab:47:54:3e:d4:00:36:91:50:8b:0a:18:d0:f9:ac:68:
44:7f:a8:6e:38:c6:77:2e:e3:c5:06:7f:fc:fd:06:70:86:b8:
e8:14:56:52:05:55:7b:69:b1:df:2d:16:0d:c5:f9:29:b6:e6:
4e:41:ef:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:08 2025 by rpki-client