Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
File: FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft (raw, json)
Hash identifier: AQW0R+OuhTg4jjTcSl7xfOMiMRkyjBs+x/LNbJMk9BI=
Subject key identifier: D7:4C:EE:49:75:DF:8B:FC:94:15:FB:D2:DA:B8:DA:DD:0F:38:28:00
Authority key identifier: 16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
Certificate issuer: /CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Certificate serial: 019923D61A839BA30CE8D6310C2DC31231A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
Manifest number: 0992
Signing time: Sun 07 Sep 2025 11:00:57 +0000
Manifest this update: Sun 07 Sep 2025 11:00:57 +0000
Manifest next update: Mon 08 Sep 2025 11:00:57 +0000
Files and hashes: 1: FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl (hash: IQ3dPnQFwIXi8yegnTOPfLqcrz0CmHFvjK77sr/tNqA=)
2: g3b-X86nv3p6U9DOq4hCU_Dnmdo.roa (hash: 2YoEPjb/mUp/HqQp7Qak5HkOS9XgXc9API514lfVQEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:1a:83:9b:a3:0c:e8:d6:31:0c:2d:c3:12:31:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Validity
Not Before: Sep 7 11:00:57 2025 GMT
Not After : Sep 8 11:00:57 2025 GMT
Subject: CN=d74cee4975df8bfc9415fbd2dab8dadd0f382800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:84:b9:5f:8f:43:3f:22:7c:9b:09:e3:7d:2e:
b0:fb:35:bc:98:d5:17:fb:55:ef:a6:05:7b:35:e2:
62:7e:3e:0a:ba:2f:be:04:c4:9f:b1:0b:5f:25:2a:
81:ae:43:af:93:00:cd:6b:c3:80:31:05:95:1b:fb:
eb:91:20:dd:a4:f6:f1:20:4b:a0:c2:d6:1e:7f:5f:
0e:c8:ca:c1:34:b7:81:32:54:07:18:9f:44:6c:8b:
1c:ac:9b:9a:c1:26:33:d7:f2:d6:b0:09:fd:ed:57:
44:f1:7e:6f:de:28:a3:f6:f0:6d:5e:f6:e0:8b:72:
82:9f:c3:5e:d3:4a:67:b2:ec:04:5f:19:ae:d7:1e:
07:70:e3:87:55:ba:86:4f:16:cf:d2:2d:89:ae:42:
0f:e6:1e:55:29:d9:4e:3e:70:a1:c0:a4:38:28:af:
24:d7:d7:5c:12:bd:95:2f:54:d6:59:51:44:15:18:
03:b0:04:8b:d9:bb:44:88:46:a9:92:94:d3:6e:9c:
89:2d:5d:cc:3a:08:b7:08:16:77:c7:70:45:dc:d3:
97:f5:19:17:1a:ec:d2:c3:1d:5e:77:41:b8:66:24:
cd:10:43:ef:c4:99:2d:29:7c:95:0f:f4:ad:09:50:
55:ee:68:ff:79:58:b9:29:6d:0b:0e:ee:e6:e4:42:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4C:EE:49:75:DF:8B:FC:94:15:FB:D2:DA:B8:DA:DD:0F:38:28:00
X509v3 Authority Key Identifier:
keyid:16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0e:f6:75:88:ef:00:d1:ef:2b:17:44:e2:e5:b5:f4:ea:70:
54:5a:5c:3f:85:57:02:d4:71:43:14:a8:4e:81:d6:1e:02:27:
6a:af:17:6a:ee:de:16:f9:8b:1c:25:5d:e0:3c:e3:04:be:2d:
fa:7a:b3:dc:c2:fa:f5:90:6c:d4:b4:9a:fc:b9:52:01:79:a8:
7a:9a:de:2d:02:0b:66:3f:5f:8e:cd:8f:64:32:78:fc:92:fe:
30:6c:6e:76:d1:04:66:13:3b:22:db:bc:01:96:eb:d9:13:84:
b5:8d:93:48:9e:56:72:51:46:be:56:4c:79:5b:eb:50:8a:f1:
8a:7e:0a:61:d6:a6:14:39:b9:30:e7:a4:36:8e:ab:cc:2b:5d:
82:6c:43:f8:63:46:7c:d6:da:e4:dc:4a:30:67:31:43:ad:f0:
a1:a3:47:b8:29:30:18:ad:91:7e:6f:22:63:a5:bd:f9:20:d2:
84:d0:b3:d2:0c:a8:1b:af:0e:e5:ed:b3:37:9a:74:80:fe:e3:
c5:15:98:00:c1:cb:a0:ce:3c:1f:94:63:bc:2a:6e:6a:00:6b:
ca:34:ad:8d:5e:b8:a9:bc:aa:bd:0f:ae:38:f1:e6:bd:12:b5:
fc:15:f2:b8:8b:2c:da:66:f3:e9:5b:10:b5:05:48:e6:59:65:
6e:41:d5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:33 2025 by rpki-client