Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
File: Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft (raw, json)
Hash identifier: RtCQGdX370Jk1IITWyC63zpctudgv8+hnZGWveVNtJw=
Subject key identifier: 47:3A:96:3B:7B:18:FD:48:9A:C8:01:D7:15:83:92:11:ED:7F:35:DD
Authority key identifier: 16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA
Certificate issuer: /CN=161e0eae77a98c3623d1781f9af4557d3541d2ba
Certificate serial: 0199221EDDB496433F41CAE6287346C92014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 03:01:11 +0000
Manifest this update: Sun 07 Sep 2025 03:01:11 +0000
Manifest next update: Mon 08 Sep 2025 03:01:11 +0000
Files and hashes: 1: Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl (hash: xi5nTAHnvsXIFOzVs2Ps/IfE1jxJXqN3Ve3s+K2J/3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:dd:b4:96:43:3f:41:ca:e6:28:73:46:c9:20:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=161e0eae77a98c3623d1781f9af4557d3541d2ba
Validity
Not Before: Sep 7 03:01:11 2025 GMT
Not After : Sep 8 03:01:11 2025 GMT
Subject: CN=473a963b7b18fd489ac801d715839211ed7f35dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:6c:2a:f4:e9:e5:4a:6a:3a:97:3f:eb:f6:
4a:55:c4:92:d4:99:d6:86:68:4c:26:3f:02:4c:37:
a8:3f:4f:63:75:aa:23:7d:e4:c7:f7:9c:ae:7d:41:
f4:b6:d4:48:02:a5:0f:18:cd:d4:ee:c3:25:28:84:
b6:82:36:d3:83:96:76:c9:f4:18:ef:bf:06:ef:f3:
c2:a8:7c:98:dc:e9:8d:5c:4d:4d:e7:a0:56:f7:3b:
ce:cd:79:02:78:d8:e8:bd:38:66:ce:b0:5c:69:de:
4e:f0:54:68:94:c8:1d:78:73:79:10:2a:64:6e:2a:
8b:0e:ea:43:5c:0f:15:d1:e7:1d:9f:35:28:7d:6e:
11:e1:c0:43:cb:89:eb:87:30:9d:6c:2c:e3:d8:43:
01:fa:6d:db:48:af:3c:00:f5:65:5a:92:dd:35:59:
33:ef:3c:05:30:1a:a2:f1:f8:85:cf:c7:82:d2:51:
2b:48:ec:81:0b:df:3f:55:e2:3e:0a:3b:09:f6:e0:
f8:b0:85:7d:e1:91:4f:67:2d:56:54:94:dc:7d:0b:
9c:43:e5:2a:38:36:03:29:24:d0:04:b9:48:ba:f2:
25:7e:fc:72:fd:9b:8f:d0:f9:70:19:4d:9b:79:b1:
9c:ac:20:a1:ae:8c:a4:3c:5c:96:cb:e9:19:fb:c6:
ef:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3A:96:3B:7B:18:FD:48:9A:C8:01:D7:15:83:92:11:ED:7F:35:DD
X509v3 Authority Key Identifier:
keyid:16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1a:2c:d6:cb:80:90:70:c7:68:6b:c3:8b:bc:83:03:96:0c:
1c:d2:1e:dd:32:95:8b:ee:cc:3a:e7:00:e5:ce:8b:85:7d:bf:
89:3b:17:4b:79:46:92:72:87:d3:76:ef:9f:5f:0e:7b:3a:f8:
2f:7c:a3:3c:05:03:c6:8d:3f:fc:fa:cc:9e:a0:fb:96:4c:d1:
f0:69:70:54:55:d2:25:94:8d:67:f5:47:a3:a5:37:ac:2e:43:
04:d6:8c:17:e6:16:d8:b2:dd:c8:3a:3c:64:1b:4b:62:8c:6d:
38:9a:62:50:1a:06:3b:56:d8:a0:89:59:34:32:b5:bd:ce:29:
ab:fd:3d:aa:94:16:9a:49:3e:4d:92:33:b0:23:af:b4:3e:69:
1f:19:02:4f:6f:67:3f:aa:32:04:9e:91:96:e1:56:eb:b2:96:
43:5c:b8:87:bd:05:c0:98:c3:61:d8:ad:3b:e0:b1:6c:72:92:
54:77:c7:78:24:27:74:25:24:d9:7f:e6:3b:6a:9b:aa:49:5f:
25:b9:9b:6a:7b:96:47:e8:48:4b:71:42:63:4f:98:e9:a2:a9:
5c:f6:dd:95:ff:65:99:13:ca:5f:16:dc:81:ac:09:82:e5:98:
89:f5:a5:7c:f7:f1:4a:a1:83:2d:9e:4e:0c:dc:c1:2c:7c:37:
3d:8f:80:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:07 2025 by rpki-client