Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: iUfQANZVeAoZg96RBqCgG0/Hx3qbstKmBwCvZlso49w=
Subject key identifier: 1D:10:05:71:05:14:87:58:8B:8C:F0:B8:42:B6:7E:E2:D3:52:6B:3F
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 019933B6EC9837CB2799DFB87295BF7DA2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 167E
Signing time: Wed 10 Sep 2025 13:00:50 +0000
Manifest this update: Wed 10 Sep 2025 13:00:50 +0000
Manifest next update: Thu 11 Sep 2025 13:00:50 +0000
Files and hashes: 1: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: n7Gy2YY5+t8PPeKrNWIPSzfJbT7HeSvSiej7vjYjzb8=)
2: WEXs_7mi3mpWOcUG8wP1gKvlFMA.roa (hash: +bGwwC+VYAEY8cjrkr182bmVAbIXzAvAjxcOXwPk5RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b6:ec:98:37:cb:27:99:df:b8:72:95:bf:7d:a2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Sep 10 13:00:50 2025 GMT
Not After : Sep 11 13:00:50 2025 GMT
Subject: CN=1d100571051487588b8cf0b842b67ee2d3526b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:04:b2:57:37:8e:17:8c:9d:98:92:0f:b4:b3:
35:f1:78:48:f5:f5:74:a4:91:09:66:64:a2:5c:d9:
c6:17:b5:6d:c2:b4:d0:34:32:5b:e8:cf:32:21:75:
51:37:ca:d4:85:e9:f2:8a:5e:d1:14:c4:30:34:e4:
00:c6:40:ab:d5:a4:c1:28:84:f3:02:77:f6:09:8b:
e6:47:b2:19:8c:00:4b:6a:95:7c:7b:bb:ae:37:74:
e1:8c:fa:4a:21:42:a3:28:29:07:33:d8:93:60:23:
67:d8:1b:8a:2a:36:41:35:2e:58:b0:5d:3e:e1:89:
70:1e:79:f0:28:77:b6:f1:90:a5:19:c9:b1:5d:ff:
5d:cb:54:63:ae:95:d5:cb:5d:b9:f8:5a:0a:b9:ef:
b5:ae:96:58:f0:a4:27:72:6d:89:f3:99:82:5f:47:
73:6c:2a:87:78:40:bd:4e:8b:0e:d7:24:bd:ff:53:
f4:3d:22:67:18:4f:03:57:07:68:e6:90:66:bb:2a:
9e:27:cf:59:48:95:cb:42:bf:97:8b:96:e1:1a:4c:
36:3e:47:08:dd:b4:fd:32:43:5e:94:04:a5:c3:a8:
1f:6b:c8:d4:cc:1e:46:2e:37:7b:ea:5e:02:52:8a:
35:19:b6:7c:a5:82:b3:e3:b6:2a:e8:ea:a6:1c:a1:
6c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:10:05:71:05:14:87:58:8B:8C:F0:B8:42:B6:7E:E2:D3:52:6B:3F
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a1:da:d3:27:58:11:7e:35:2f:88:1f:e8:50:05:82:81:3e:
5c:d7:13:0e:b1:49:2d:f1:cb:39:5a:dc:e0:7c:c2:c7:67:3b:
bf:54:51:73:a5:98:56:99:96:72:99:6f:9b:4d:9a:7a:7c:28:
50:44:3e:1a:d5:28:ea:99:0c:ba:aa:03:0c:ce:3f:22:c5:53:
17:07:95:f7:5d:56:82:74:74:68:bc:4f:41:51:75:df:1a:30:
23:d3:8c:b4:f4:f4:bd:7e:27:94:bd:72:b7:a7:83:03:2f:60:
be:c7:32:aa:40:db:aa:95:8d:56:46:70:b7:36:58:e6:f7:3e:
01:42:31:d4:9b:1e:07:e7:0d:b4:bb:6c:ec:13:45:39:1d:cc:
e0:c8:7a:88:8c:10:57:58:fd:cf:5e:91:ae:c4:8f:25:90:a4:
5e:01:92:8f:f0:f6:33:e5:6a:c9:38:9c:b2:b8:f1:e8:a8:98:
fb:4f:0f:2f:e4:e4:4b:e1:65:f4:ff:59:ca:a6:f2:8d:c1:98:
21:14:e1:bb:f7:94:97:07:bd:25:4c:c6:e2:c3:ae:c7:05:f9:
54:f6:23:6f:a0:4a:04:f0:90:28:38:83:68:d5:08:cc:82:77:
22:d0:89:8a:56:f8:14:ae:c8:a3:19:ba:01:ad:20:3f:5a:1f:
e6:46:e2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 16:08:13 2025 by rpki-client