Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier: U3R/XjGb6xBWSOyNlP4q1PnpdTiCOOeekHx2WvQj/WE=
Subject key identifier: 00:91:73:14:91:23:1F:A1:A2:9C:63:ED:5A:8B:06:11:0D:4F:75:CF
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial: 0199312374FCE8BE169588917D3D13507C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number: 160D
Signing time: Wed 10 Sep 2025 01:00:31 +0000
Manifest this update: Wed 10 Sep 2025 01:00:31 +0000
Manifest next update: Thu 11 Sep 2025 01:00:31 +0000
Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: 1I/Zw/5cjCvuQCUtPO5KS8Jp8y1rE6mQvufIqsrWyQ4=)
2: ThMXbqzx9UxsJ7TnPmcwU32vPLA.roa (hash: 4NEDCtF2sgEdEat+pt3nEdPQAXszdJX/0mX9HFFwmgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:23:74:fc:e8:be:16:95:88:91:7d:3d:13:50:7c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Validity
Not Before: Sep 10 01:00:31 2025 GMT
Not After : Sep 11 01:00:31 2025 GMT
Subject: CN=0091731491231fa1a29c63ed5a8b06110d4f75cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:73:3e:8b:b8:94:9f:42:26:fb:ed:b5:59:
d5:47:97:7f:d6:cf:0f:ec:76:03:f6:12:4e:3e:a9:
22:ed:c4:5a:b2:30:d1:87:ba:dc:15:85:ad:21:51:
71:eb:be:ef:fb:46:8b:6d:8b:ac:7c:0e:0d:49:4a:
9d:3d:41:de:eb:3f:c2:79:89:d6:fe:24:04:7b:ff:
b6:6e:f1:61:05:54:2c:5d:5c:16:bd:27:67:5f:7e:
96:77:cc:a9:7f:d5:2b:fe:22:d9:4d:97:fc:0b:e0:
88:c8:36:8c:0c:26:44:de:39:c9:20:d3:6d:e3:43:
b4:61:10:50:f3:38:4c:db:20:d5:c3:33:9f:a2:9f:
ee:e3:7a:b9:e9:9c:ca:d9:88:c0:c2:1f:5f:a9:84:
06:df:77:2f:8c:db:5d:b8:55:ff:f4:f8:ac:f3:87:
d2:cb:66:bb:9f:2f:16:2d:aa:6a:18:fe:fb:a8:47:
99:62:1e:e7:f3:96:8d:66:57:89:f1:1d:cf:25:d1:
fa:d9:e1:08:0b:ef:46:db:c3:ad:de:0d:22:a1:36:
ff:c1:4c:18:ed:aa:e5:bb:1d:f2:a1:41:89:e7:40:
63:57:c2:6b:68:b3:9f:b1:bf:5b:90:f2:df:b2:11:
a6:f9:e2:4b:74:69:03:a9:c3:23:35:21:9b:cc:eb:
05:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:91:73:14:91:23:1F:A1:A2:9C:63:ED:5A:8B:06:11:0D:4F:75:CF
X509v3 Authority Key Identifier:
keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9f:12:48:0c:a5:2f:48:56:1c:3b:c8:cc:d9:14:2a:dd:45:
dc:90:2e:77:34:15:7a:e0:f8:2c:d7:8e:96:60:bf:8b:6a:30:
75:d2:a5:5b:b0:6f:d3:52:d0:0c:1b:f9:9e:8d:41:47:5f:6c:
bf:8e:71:9b:6d:24:fd:74:27:22:97:30:87:f1:ed:36:37:9c:
17:68:13:b5:a1:84:7d:31:39:f8:3d:21:f5:de:7d:25:c7:46:
eb:4a:e7:7d:aa:14:9c:0f:28:e8:9a:bd:3e:cc:c2:9e:5b:ce:
d2:46:5a:16:dd:64:ee:0b:b6:74:ca:40:76:5c:4d:8a:bd:92:
d9:f3:73:bc:d7:fe:da:c4:3f:79:b1:04:cc:b2:c5:90:7d:66:
62:f1:2a:b7:79:2e:d5:31:bc:4f:02:69:9f:f6:59:8b:c8:c8:
7b:63:21:29:92:dd:53:82:c8:0b:30:7a:e9:6e:11:7f:1f:92:
dc:cc:18:cd:cd:8a:a1:85:28:58:de:11:b8:10:ca:85:90:8e:
dc:25:28:6c:7c:79:46:79:72:91:e4:4c:21:73:d2:50:47:2a:
09:b7:b2:c8:35:9e:97:3e:a0:c8:a0:dd:ab:da:2d:d2:3d:24:
a7:0f:e7:4a:3f:38:0c:9a:7f:31:84:1e:9b:1d:de:c8:87:e9:
4d:56:4c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:21:35 2025 by rpki-client