Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
File: v16_5FjImQcA8EwBsRMuOjdiPeU.mft (raw, json)
Hash identifier: fwu1aHt1sbe6IbTBKJ+QI7ygF2y6XhPujaCzgN6PQ2w=
Subject key identifier: 07:60:A2:6F:B5:56:29:06:7E:2F:16:46:F8:BF:A8:C5:0D:25:05:AE
Authority key identifier: BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
Certificate issuer: /CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Certificate serial: 019922FAFA5FBE7DC2FF6F855A7A0428D598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
Manifest number: 1604
Signing time: Sun 07 Sep 2025 07:01:37 +0000
Manifest this update: Sun 07 Sep 2025 07:01:37 +0000
Manifest next update: Mon 08 Sep 2025 07:01:37 +0000
Files and hashes: 1: i6hB2IahOI67PvpUTSQc2nj4R3g.roa (hash: d+MeIEX0oXT1ILgVQ/KLqsvbNLNFr38pDADmv1QHEqI=)
2: v16_5FjImQcA8EwBsRMuOjdiPeU.crl (hash: jjndZoI1zlOG92/aVnhzuULhlRjVZP5nBRAhosndJs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:fa:5f:be:7d:c2:ff:6f:85:5a:7a:04:28:d5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Validity
Not Before: Sep 7 07:01:37 2025 GMT
Not After : Sep 8 07:01:37 2025 GMT
Subject: CN=0760a26fb55629067e2f1646f8bfa8c50d2505ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:bd:04:2b:9c:a2:df:69:1f:88:c0:cc:11:
45:e2:eb:8e:40:2f:f0:c8:09:25:49:d3:c0:21:6d:
c8:9e:d0:e4:af:7e:68:ee:9a:3e:9a:e5:ac:2e:73:
83:ab:bf:67:92:f1:5a:f9:5e:5d:1c:ea:37:43:5b:
85:42:1e:85:98:81:dc:b5:b5:9f:c6:ba:22:cf:da:
94:03:3d:af:8f:86:dc:7d:3c:76:bb:78:9b:b1:3e:
90:9f:44:3b:ea:79:85:a5:88:9b:35:5c:49:78:f3:
98:51:85:12:0b:a1:dc:c9:3f:0e:0a:f8:89:3c:44:
3b:64:f6:41:5d:02:41:5f:78:dd:99:3f:8b:a8:78:
ba:a2:b3:05:68:11:59:2e:81:95:a5:1d:56:9a:36:
38:3d:b8:0b:e9:18:af:bf:9d:c8:96:dd:a5:66:a6:
2b:94:03:37:42:c8:54:2d:00:b8:e8:7a:c8:7f:42:
47:52:e7:28:dc:9f:de:7c:96:0a:37:22:0c:b1:ff:
f7:0a:a6:fd:4d:4e:68:af:50:27:34:dc:e8:1f:01:
a0:4f:a5:42:69:71:e7:3b:08:92:b5:9e:c8:ba:3b:
37:a6:3d:58:89:95:7e:a0:a0:d6:00:08:52:c4:ac:
bc:15:40:d8:23:51:df:62:5b:eb:1c:20:2e:db:f4:
95:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:60:A2:6F:B5:56:29:06:7E:2F:16:46:F8:BF:A8:C5:0D:25:05:AE
X509v3 Authority Key Identifier:
keyid:BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9f:6a:dc:de:f3:78:a4:ec:2c:08:a9:eb:26:8b:07:19:e4:
42:9b:9b:35:12:5e:85:fb:69:a6:f1:89:cc:b8:82:3c:be:4f:
9f:eb:06:5b:09:20:be:49:b4:0c:34:61:a4:db:5e:5b:1f:2c:
0b:a7:38:e2:3e:53:3e:73:aa:4f:65:9c:6d:a7:fe:b5:07:dc:
87:c4:20:01:ed:d1:60:d4:9d:eb:07:08:a5:95:88:ba:77:f2:
81:d4:d4:ce:f2:5c:c5:74:6f:69:a4:1f:ab:11:6e:8d:cb:d4:
ca:85:48:19:ef:04:de:ec:73:d5:43:d4:24:22:a6:ba:a2:5a:
c4:24:00:1e:16:2d:7c:c0:f6:9c:ba:96:90:13:0d:ac:7b:e2:
8b:6e:0f:1d:00:2e:ea:cd:b7:8b:4b:dd:16:21:59:98:8c:1c:
90:97:ec:2c:89:5f:68:8b:41:27:ae:47:f4:01:09:62:0f:ad:
9b:86:b5:bf:af:e4:db:63:b6:e7:d8:e2:94:0e:c7:66:23:57:
8b:80:33:e7:ca:01:2a:eb:be:d5:e3:cd:2c:b7:79:10:b7:c1:
34:fc:10:4d:54:1f:22:e1:13:04:19:5c:9b:3a:11:4a:74:cb:
6f:8c:07:0d:21:64:70:5d:36:e6:bb:79:dd:b2:04:9b:04:0c:
8f:44:bd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:30 2025 by rpki-client