Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
File: Fvz0hmtshesMt2iO3UODD0GdZqI.mft (raw, json)
Hash identifier: fHYW+CY5oVbiLvbT+9S2a+b8S8fgCR7uNlOrjfp3X0M=
Subject key identifier: F3:1F:CB:4B:F9:86:66:9C:95:C0:A3:2B:FA:19:2B:5D:7F:4F:4C:12
Authority key identifier: 16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
Certificate issuer: /CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Certificate serial: 01992255BEA0FD9AFD3297D9CD13B6153D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
Manifest number: 1385
Signing time: Sun 07 Sep 2025 04:01:08 +0000
Manifest this update: Sun 07 Sep 2025 04:01:08 +0000
Manifest next update: Mon 08 Sep 2025 04:01:08 +0000
Files and hashes: 1: Fvz0hmtshesMt2iO3UODD0GdZqI.crl (hash: OAktIM1IflWGdEe3CMAV+2zeObZQt1nblxrSNLGScJE=)
2: a5UnemfayVAdbbDqB5jidjgbSJ8.roa (hash: FqrPLPAJKzFu5i1kf8q3fsGuwgt9nQGlLWvvqh/+z7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:be:a0:fd:9a:fd:32:97:d9:cd:13:b6:15:3d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Validity
Not Before: Sep 7 04:01:08 2025 GMT
Not After : Sep 8 04:01:08 2025 GMT
Subject: CN=f31fcb4bf986669c95c0a32bfa192b5d7f4f4c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:43:0f:28:87:55:78:e7:6e:d9:ab:18:fd:
b4:7c:41:78:c6:48:a5:d8:67:21:6e:92:05:52:96:
ab:80:7a:74:7b:59:59:fb:11:2e:e8:7c:f9:27:c2:
bc:6a:26:15:b2:ce:ce:08:26:f1:98:b2:59:0f:cd:
17:3e:ca:a5:1e:5a:24:d8:c7:dc:57:3c:92:63:78:
7a:00:ef:e3:16:73:e7:1d:12:ee:81:60:56:09:13:
1d:76:30:2b:84:c7:e5:f8:e3:3d:30:6c:29:c1:ad:
01:2c:38:96:98:17:7e:40:03:a0:27:d5:02:cf:5a:
8e:f3:c1:13:28:ee:d4:6f:5c:66:66:fe:48:4e:f6:
12:5a:08:c4:0f:35:6e:d2:6c:ed:4c:f1:c7:9c:2c:
43:a3:cc:30:d4:14:55:36:ca:55:32:4e:09:96:b0:
6e:14:33:7b:93:fa:5e:a1:22:90:d1:93:68:92:45:
3f:64:84:b5:50:26:b1:7d:9a:ed:9e:80:cc:93:d3:
c0:48:65:96:8d:28:7a:7a:29:b2:f7:a8:84:64:38:
38:3c:0c:df:44:23:68:7a:03:bb:c4:37:e9:2a:81:
8b:e4:d9:43:33:ed:f3:ed:6a:4f:da:2a:84:3e:85:
68:fe:0e:6c:6e:63:f4:43:21:53:92:30:00:37:f1:
38:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1F:CB:4B:F9:86:66:9C:95:C0:A3:2B:FA:19:2B:5D:7F:4F:4C:12
X509v3 Authority Key Identifier:
keyid:16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:df:67:7e:17:8e:39:48:d8:d2:d7:c3:a4:94:d6:db:c3:ca:
e7:61:71:a3:f6:41:d7:f4:10:23:55:47:ad:e3:4c:6c:c8:fe:
10:55:8a:55:89:6f:9d:d9:23:fa:7b:bd:e4:71:d0:e2:eb:3e:
b6:2a:41:a4:73:e2:89:43:0c:49:4d:76:25:aa:24:83:d6:27:
30:9e:d3:0e:44:81:e3:6f:87:85:89:38:05:33:e9:f6:5f:60:
bb:6f:68:7f:96:28:50:68:00:9b:22:1d:70:64:a4:c6:70:de:
ce:6f:d9:8c:a2:29:d6:d0:51:1c:40:67:85:c9:8f:16:81:d9:
34:df:27:79:04:72:9b:ac:62:18:14:0f:99:03:65:fc:cf:21:
c2:c2:e0:8c:b0:16:8c:47:8a:87:6e:80:2c:37:03:0e:d5:fe:
e5:79:f1:ff:99:d3:19:8c:23:1d:e2:09:4a:f4:0b:3d:02:fd:
4f:d8:34:2a:04:18:fd:3c:25:bb:7c:62:00:12:6b:11:ab:5f:
1d:6b:88:b7:fe:2b:09:14:bc:da:27:8b:bd:a7:6c:88:99:8b:
63:c0:5a:71:df:68:2f:de:1f:f6:da:7c:5a:cf:a4:68:1b:22:
19:71:92:f3:99:a6:94:1f:b4:ff:30:91:0d:26:e3:13:7a:4d:
34:f7:32:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:11 2025 by rpki-client