Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: vDP3xZV9vBmFIwL6P/3jAhs7LY0/7Cc+MREDjC+OBHk=
Subject key identifier: 5C:8A:36:27:9B:EA:5D:E7:33:94:96:C3:EE:44:89:42:C5:E1:50:B7
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 01992EC7951420E92B22418D9542168BA05B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 167B
Signing time: Tue 09 Sep 2025 14:00:55 +0000
Manifest this update: Tue 09 Sep 2025 14:00:55 +0000
Manifest next update: Wed 10 Sep 2025 14:00:55 +0000
Files and hashes: 1: 1-TdRJj4h2RmubOdxb9rkHHG6bhc.roa (hash: IbIK2UxlwKjCUY9QjIcWsizwAMtE57kEDfBifLf6mzQ=)
2: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: fufrzCnsvFICuGbqNQMDh5uSbTNQX2BUlEslRwE8wCI=)
3: QR0Kgwt3HCwjc-xcqO7iblC-rKY.roa (hash: 0rkvAXImNg4dab81A4VmHvprnFlgPXRICVp6eT39HwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:c7:95:14:20:e9:2b:22:41:8d:95:42:16:8b:a0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Sep 9 14:00:55 2025 GMT
Not After : Sep 10 14:00:55 2025 GMT
Subject: CN=5c8a36279bea5de7339496c3ee448942c5e150b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:55:f4:df:07:d7:c3:08:00:2b:d9:3d:b9:35:
7b:ea:10:20:37:66:71:67:d4:2e:4c:5d:05:9a:85:
1a:9d:65:ac:77:4b:5b:a0:ce:d6:ec:05:d8:4d:b8:
ed:b1:0d:df:4d:d7:47:48:0e:dc:04:89:ff:46:f8:
95:51:79:dc:55:04:49:d0:44:d6:96:99:df:1c:f3:
a8:55:89:c8:f3:38:9c:e3:e2:0e:97:58:08:67:4c:
34:39:f3:5c:4a:c7:6c:d4:62:36:a0:09:a7:f1:e8:
c9:53:84:3c:a5:e6:05:88:1e:b6:2e:47:30:6f:ce:
ba:70:3d:f1:80:58:e7:70:6d:a4:dd:cf:60:6d:b9:
35:4e:45:52:d9:f0:49:d6:5e:87:fb:63:51:44:2a:
f2:10:b1:71:9f:c2:ff:91:65:c1:52:52:19:93:fa:
98:aa:8b:79:ed:07:b4:e3:6b:7b:e8:47:f1:c2:a0:
11:da:6e:ca:ee:94:31:b3:74:5e:ca:86:39:47:79:
cc:80:17:0e:ba:57:a8:e7:db:da:71:06:70:c3:de:
b3:eb:12:63:5d:9a:21:5d:b5:92:c3:7e:e1:b7:83:
09:91:22:7b:fb:91:f0:05:3e:90:c1:ca:9e:10:52:
04:00:82:b7:3f:6e:3f:38:b3:d3:83:dd:de:46:ee:
58:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8A:36:27:9B:EA:5D:E7:33:94:96:C3:EE:44:89:42:C5:E1:50:B7
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5d:48:27:ca:24:bf:af:cd:0e:2f:21:7a:59:3f:dc:66:95:
80:8b:f8:cd:d9:89:6b:92:a2:fc:67:0b:50:35:b6:32:64:90:
e6:30:1c:e7:3e:f4:47:33:9d:53:84:33:9f:62:72:20:9e:d1:
c0:6b:6c:e1:e3:0a:b4:d5:bf:fe:38:3b:c2:92:ca:df:cc:12:
d7:e7:10:0f:fa:84:83:89:95:6a:aa:43:ec:a2:06:b4:a9:06:
65:a5:fb:0f:4c:50:2e:ca:e5:34:20:94:46:ce:b0:36:7d:53:
93:2c:48:8a:2d:ad:39:98:3c:d3:88:49:96:e7:91:aa:7f:4d:
34:7a:85:1a:f2:c2:7c:5d:3b:8f:e6:d7:da:9a:b9:de:6c:85:
f2:3b:bf:48:bb:c9:79:b5:ca:ad:c2:3c:db:d0:47:86:12:01:
8b:77:89:a1:a2:5e:ef:97:6a:d4:c6:56:f9:08:46:ef:05:64:
78:1d:35:bf:3f:80:ba:b9:54:b7:7e:bc:ad:62:52:22:75:22:
45:86:28:74:ce:0f:03:fb:36:43:8b:90:15:49:3b:13:86:68:
e8:bd:83:b5:f7:d8:ff:59:2c:c4:a8:65:e6:db:63:8d:75:9b:
fb:2c:ab:4d:24:06:8b:44:2e:de:f5:4a:30:12:78:5a:90:57:
d9:28:2b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:19:46 2025 by rpki-client