Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
File: FqThByM1EnDNjJzGSwlkiOZOIw4.mft (raw, json)
Hash identifier: Usd1bIOLwvVlYpEmdlSj3UYHgagyjpd1u6eCAgKLtis=
Subject key identifier: 30:0A:3E:35:1B:F5:98:5E:F5:A1:38:42:D1:3E:5F:28:12:C0:E8:26
Authority key identifier: 16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
Certificate issuer: /CN=16a4e10723351270cd8c9cc64b096488e64e230e
Certificate serial: 019A236529BBAEB9D7B71E463793C2CA5AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
Manifest number: 0867
Signing time: Mon 27 Oct 2025 02:00:23 +0000
Manifest this update: Mon 27 Oct 2025 02:00:23 +0000
Manifest next update: Tue 28 Oct 2025 02:00:23 +0000
Files and hashes: 1: FqThByM1EnDNjJzGSwlkiOZOIw4.crl (hash: 2knXSe+zXddLoAMrvOvnx4VojhrbahTa6nAQ8xSK4sk=)
2: LHS-1GPmf3JlxOhkC8EvvEXsIio.roa (hash: qJmDzf2hiWRAwgR4H4d0P3HUtRpMHlkEr8kbVnNHB5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:29:bb:ae:b9:d7:b7:1e:46:37:93:c2:ca:5a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a4e10723351270cd8c9cc64b096488e64e230e
Validity
Not Before: Oct 27 02:00:23 2025 GMT
Not After : Oct 28 02:00:23 2025 GMT
Subject: CN=300a3e351bf5985ef5a13842d13e5f2812c0e826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:75:82:27:c6:34:d5:c5:02:cf:d8:0f:66:
32:f5:cf:02:33:a3:91:0b:a4:8a:80:bf:cc:5b:28:
e7:90:68:1a:af:f9:c9:71:3b:28:66:98:cb:54:4c:
38:98:71:6f:16:93:5e:b0:a1:cf:51:3e:8c:f0:8a:
8c:49:cb:8a:79:2e:e2:44:a8:44:4f:da:84:9f:56:
95:3b:14:af:2e:a7:c7:33:24:d4:39:ed:15:54:81:
1a:17:e6:99:41:ff:3d:12:2b:ea:51:d3:d0:5c:56:
cf:d3:52:05:8a:dc:53:b7:1b:23:9c:39:7c:32:14:
d6:95:a9:66:e0:d3:30:d0:2f:69:37:4a:b1:bb:fe:
18:28:8d:98:24:6a:6d:a1:81:45:22:50:63:a3:51:
6a:88:62:f8:9c:1e:d7:ba:15:c9:d7:a6:52:36:24:
cf:9d:a9:59:a4:6d:09:96:ee:03:8f:28:ef:ae:33:
53:d3:ba:97:bd:f0:01:d4:05:45:78:94:2a:8d:7b:
2f:30:0a:18:90:27:57:39:18:6e:a3:ce:bb:b5:c0:
e0:1d:17:62:c1:4d:e7:b0:94:aa:6c:20:7d:10:cc:
11:31:3b:6c:78:1b:be:18:65:0c:01:2d:5a:56:cb:
84:44:8f:71:21:f3:7d:c1:c2:cb:fe:ef:35:47:56:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0A:3E:35:1B:F5:98:5E:F5:A1:38:42:D1:3E:5F:28:12:C0:E8:26
X509v3 Authority Key Identifier:
keyid:16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:81:90:71:29:f8:18:39:90:77:ba:9b:cc:dc:84:78:48:56:
16:b8:22:c2:7a:d5:4c:e8:51:8e:cd:00:5a:74:46:b2:eb:ca:
35:2d:7f:fa:95:d7:2b:00:76:50:50:63:45:84:30:80:58:b2:
e2:b0:c3:53:50:a6:5b:2a:78:a2:53:27:92:ed:c8:1f:d6:ef:
30:ff:b4:b1:8d:32:ba:5f:67:aa:f6:b9:de:f6:cf:d1:6b:aa:
37:d5:25:2b:0e:03:2b:a3:eb:65:c8:4d:8f:f4:f0:3c:01:b6:
71:53:d6:69:1c:a7:6f:7a:ad:cd:33:4b:70:e0:4a:94:b2:5a:
32:3a:69:08:0b:ca:61:85:d4:1d:2e:b7:a9:e4:ec:32:39:e3:
9f:e6:69:88:b4:35:b9:91:57:f9:d9:91:d8:1b:3b:f7:44:02:
19:e2:fb:2f:36:ca:62:92:8d:fb:8f:92:39:8d:ae:2c:4b:95:
66:f5:a5:c2:91:6e:16:98:9b:0a:fc:93:59:0a:01:d9:73:0e:
9e:0e:6b:ef:bf:62:51:79:f5:5c:c1:04:c4:84:65:19:3c:8a:
f1:90:5c:c6:fa:48:a1:40:01:9c:9f:79:88:c0:b2:41:2c:db:
f3:b6:45:0e:14:01:3a:64:62:90:9e:8b:d0:e7:04:63:a2:2e:
4c:f8:b1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 08:53:45 2025 by rpki-client