Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
File: FqwWDambNJSla1R8aKjiwJGGkbU.mft (raw, json)
Hash identifier: uyJjxa5P2z7Y0xUBIF5uR5p21+oH7qiJH5blUVxuTBI=
Subject key identifier: B1:D5:F7:2D:B0:52:A1:7D:3F:6D:4E:9A:E9:62:82:AF:7C:A8:79:55
Authority key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
Certificate issuer: /CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Certificate serial: 019A7293449B57CD9BF954C4A3455C50C6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
Manifest number: 1298
Signing time: Tue 11 Nov 2025 11:00:45 +0000
Manifest this update: Tue 11 Nov 2025 11:00:45 +0000
Manifest next update: Wed 12 Nov 2025 11:00:45 +0000
Files and hashes: 1: FqwWDambNJSla1R8aKjiwJGGkbU.crl (hash: qTk/xmwuxhODY7Q//GeuOHgrTJAZ1rNC6jd5WzmzEeg=)
2: H9dXCbHCAXGOrGOV28k8umzrLKQ.roa (hash: sDapbNuHEvC3TdmduqXaXIUkjYECPGi1w550P+lUprw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:44:9b:57:cd:9b:f9:54:c4:a3:45:5c:50:c6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Validity
Not Before: Nov 11 11:00:45 2025 GMT
Not After : Nov 12 11:00:45 2025 GMT
Subject: CN=b1d5f72db052a17d3f6d4e9ae96282af7ca87955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:92:12:f2:d3:f8:86:67:fd:98:70:03:f5:
34:1d:93:be:13:31:26:9d:6f:46:bb:bc:92:14:cd:
03:91:fe:86:76:46:30:77:95:2b:85:b2:de:8a:ba:
a1:85:78:93:18:37:82:02:e2:96:b0:69:6c:b2:bb:
11:06:9c:d7:e3:44:2c:29:6a:56:a2:55:73:be:af:
65:ed:bc:70:46:f0:93:a2:92:3c:65:52:30:d1:1f:
f6:bf:0c:ff:9f:28:e6:8b:0c:57:23:12:c8:e7:fb:
ed:3e:20:b0:31:df:bb:a2:87:5e:40:93:a9:08:92:
b1:63:df:3a:bd:7d:d6:7b:fa:1c:31:2d:f4:75:73:
dc:4e:dc:35:dd:4c:17:b4:38:c4:65:87:27:63:ae:
d5:04:46:5d:bf:80:f3:e6:02:9f:ad:ba:fd:1d:25:
51:8f:8c:77:2e:c4:94:32:c9:9d:c6:cc:24:40:19:
76:db:4c:f6:80:aa:3d:5d:04:fe:04:b7:02:b1:44:
fb:5e:4e:2f:3d:86:48:cc:a0:37:b7:e1:33:91:1e:
a1:6a:56:df:c0:aa:1f:76:8f:0f:63:b1:86:39:3f:
d7:52:b5:78:6f:1a:4c:42:ec:37:e6:d2:fe:be:a2:
8f:83:a5:5f:fb:ae:16:d9:61:d2:43:42:aa:72:fd:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D5:F7:2D:B0:52:A1:7D:3F:6D:4E:9A:E9:62:82:AF:7C:A8:79:55
X509v3 Authority Key Identifier:
keyid:16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:19:c6:a3:9c:51:8f:6b:a4:bc:b3:58:0b:e8:d3:79:73:f1:
f9:55:4f:79:32:a1:dd:8d:cf:52:20:3b:ec:86:e5:d3:ea:0d:
79:66:66:71:7c:20:bc:d5:d1:f4:57:70:58:12:ae:a3:7c:66:
e0:82:97:b9:10:c1:da:49:1d:3b:0d:90:f3:66:81:b4:4e:80:
8d:d2:b1:55:43:36:2f:f5:cb:0f:27:67:0f:65:88:f4:25:1b:
dc:25:91:5f:4b:84:6f:67:5e:e8:34:0c:41:11:46:94:d4:f6:
98:0f:80:f7:13:44:56:81:80:ff:85:75:be:cb:45:ae:e1:07:
59:a3:73:e5:20:65:cd:86:0e:88:66:81:8e:f2:30:6e:5c:ff:
ee:8c:7f:ad:83:91:e3:c2:fa:ba:56:0c:ff:f7:c6:52:91:fe:
52:42:fd:b8:9a:c2:22:89:9d:85:76:e3:2f:2f:fe:27:8f:a6:
3d:f1:31:0e:d3:8a:d8:fe:ce:d5:03:23:1f:54:f2:dc:e6:5d:
ac:10:b2:05:5b:8c:85:1f:cf:6e:02:10:51:49:15:11:56:f7:
fc:64:1f:0a:2d:c7:a9:16:2a:3b:de:c9:a3:5e:8c:be:9f:d8:
5c:bd:d3:f3:05:7e:f0:2e:db:c6:a4:ab:dc:9d:bb:fb:e5:3e:
22:ec:1c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:26:58 2025 by rpki-client