Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
File: Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft (raw, json)
Hash identifier: QDmwPNxRoOgf4akzvy8qEUNQeIsFAnlx43QuCMm2cXY=
Subject key identifier: F4:9C:A2:14:26:9A:36:45:D0:FD:44:21:23:8D:DD:25:5F:9F:48:92
Authority key identifier: 16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35
Certificate issuer: /CN=16edcfec9f6e325bc2c39d24193f830f43183135
Certificate serial: 019A29671B64D677C16C804299B78A56797B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
Manifest number: 094A
Signing time: Tue 28 Oct 2025 06:00:14 +0000
Manifest this update: Tue 28 Oct 2025 06:00:14 +0000
Manifest next update: Wed 29 Oct 2025 06:00:14 +0000
Files and hashes: 1: Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl (hash: EUIejDeBG71HMiq8uT6GTpkgfvgwLVktOk1lp99VDsw=)
2: a6yjRQPaEVSmn2Af_50hlyGwo-8.roa (hash: f+GvZNBih0mNs6EfHvNm1HRb2NXRxOiIU+W+BUZl09g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:1b:64:d6:77:c1:6c:80:42:99:b7:8a:56:79:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16edcfec9f6e325bc2c39d24193f830f43183135
Validity
Not Before: Oct 28 06:00:14 2025 GMT
Not After : Oct 29 06:00:14 2025 GMT
Subject: CN=f49ca214269a3645d0fd4421238ddd255f9f4892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9e:89:31:55:59:14:be:65:9c:c7:c2:ee:d6:
e4:78:2e:09:65:b6:e7:16:ad:33:98:ce:fe:6a:e6:
40:01:e4:62:67:1a:c0:35:bc:fd:57:3c:66:d7:e8:
ff:60:9f:58:fe:48:a3:f8:5f:f5:64:b5:f5:83:5d:
98:33:8f:32:80:c0:d6:c9:16:58:e9:90:2f:e5:89:
94:26:25:6e:dd:7c:db:aa:1f:a8:84:0e:6f:f9:85:
3b:ed:6e:a4:95:8b:60:90:80:b4:39:f7:12:03:91:
9f:a5:ee:b1:18:a0:82:d9:6e:21:8c:98:0d:b0:fa:
2e:75:89:3a:56:4b:f2:0e:79:dd:3b:d4:3b:63:00:
3c:13:c5:6b:6c:ce:93:35:28:14:9b:86:57:f8:be:
25:8e:1f:46:71:95:3d:78:b2:53:83:90:32:16:de:
b8:d2:f4:ba:4d:55:3a:c6:e0:a7:a8:91:33:1b:68:
16:6d:99:86:f4:4a:1d:27:98:9f:29:c6:14:56:d8:
19:bf:e7:55:cb:30:be:e7:7c:06:7e:1a:e5:a8:42:
7d:d4:fc:b1:2b:11:32:49:48:03:6d:07:e8:3e:a3:
7f:59:77:fb:3e:3d:4a:28:49:46:29:82:65:f4:62:
c5:89:1c:09:08:45:eb:f0:96:9a:bd:d4:c0:a6:c8:
a8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9C:A2:14:26:9A:36:45:D0:FD:44:21:23:8D:DD:25:5F:9F:48:92
X509v3 Authority Key Identifier:
keyid:16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:60:a8:25:52:7b:f1:81:88:eb:f2:9b:8c:e6:35:e0:ae:79:
8a:55:71:11:1b:b4:26:52:58:ff:fb:4d:59:e5:c2:7b:cc:12:
ef:f8:35:61:9a:df:53:fb:f4:6c:6e:e6:e9:30:05:49:5a:70:
22:16:9d:21:40:3e:e1:8e:50:bd:cf:71:a4:47:ad:2a:9d:19:
64:44:c8:13:d8:95:36:b3:ea:e2:0c:88:44:50:b3:b0:2b:4d:
92:83:70:b9:ce:de:a4:18:56:4f:b6:7a:ff:bb:4f:f1:06:18:
27:30:ad:c8:d6:9f:44:5e:f6:53:b0:bb:2f:58:81:b8:50:b3:
a7:67:37:66:82:99:f4:ff:dd:cd:e7:34:79:f2:9d:a0:98:d9:
a4:1b:9f:40:84:ad:81:22:fb:8e:11:c7:0a:0e:8c:fd:aa:ec:
25:63:09:63:63:7d:99:16:8e:ee:bb:fc:57:b3:97:8d:4a:b6:
5b:23:ec:35:71:08:98:1a:ea:dc:76:c9:d6:bf:c8:7a:ac:3e:
5e:55:71:d9:f9:1b:8c:68:c3:26:fc:3d:df:4e:9a:f6:70:90:
ab:32:88:70:4a:bb:b4:b2:f6:ea:d8:a5:45:34:69:89:55:1f:
5e:8a:93:71:f9:39:f8:17:3d:53:ac:47:17:4a:e6:bf:ef:f2:
54:d6:8e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:06:49 2025 by rpki-client