Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
File: FpedN9oBar0TJ5JwulXWs8KWBXg.mft (raw, json)
Hash identifier: I3I6P+6xcYTw7Q8vzttQQKVK8hE6CItXEvnD9SWvmOo=
Subject key identifier: 7B:9F:C1:AE:65:71:B1:48:DF:FF:F4:52:BC:9E:1B:8F:52:5D:A3:D5
Authority key identifier: 16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
Certificate issuer: /CN=16979d37da016abd13279270ba55d6b3c2960578
Certificate serial: 0199350082D6BED7BB7B1D42AFEB4F696BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
Manifest number: 1556
Signing time: Wed 10 Sep 2025 19:00:49 +0000
Manifest this update: Wed 10 Sep 2025 19:00:49 +0000
Manifest next update: Thu 11 Sep 2025 19:00:49 +0000
Files and hashes: 1: FpedN9oBar0TJ5JwulXWs8KWBXg.crl (hash: NbyHhpmMfIFUrQhLhz4yi8WhqOZLHwu47Qity/CtgN0=)
2: PPUYZlg6H0XwL9T7p9j25_C1QJ0.roa (hash: ocscl0Gbeg5aCVZzJomKYL7Dzdpg0U688ymNmvZ0gWI=)
3: b62zrr5wzYN2MOAEsHfWSMG7FHQ.roa (hash: QoQnJbFutWiN0bVjBSQujyBlpWiG4wn++jIZ23iyHu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:82:d6:be:d7:bb:7b:1d:42:af:eb:4f:69:6b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16979d37da016abd13279270ba55d6b3c2960578
Validity
Not Before: Sep 10 19:00:49 2025 GMT
Not After : Sep 11 19:00:49 2025 GMT
Subject: CN=7b9fc1ae6571b148dffff452bc9e1b8f525da3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e0:29:9b:18:41:cb:e1:27:45:2b:e6:d9:ad:
cd:86:9a:7b:d2:02:3e:72:6e:ac:97:70:70:33:ae:
1d:ac:ce:b1:a7:b8:2c:e4:ea:a2:14:21:2b:f9:d7:
78:8d:40:70:b0:76:3c:f7:9e:91:78:4f:22:bf:c5:
44:23:fa:56:41:f3:0d:3d:8c:71:6b:51:a9:fd:93:
f3:99:33:99:40:a6:b1:60:69:11:91:84:e2:3f:e3:
66:78:7c:e6:26:b2:99:82:8b:af:9b:14:08:47:cc:
f7:a5:04:4d:39:b8:a6:0f:32:b2:a4:6c:eb:1b:a0:
de:bb:61:34:ec:6a:14:29:25:47:62:b9:a9:77:b2:
b0:63:86:7d:56:aa:82:53:03:58:67:2e:07:9e:28:
87:bc:7d:0f:cd:c5:0e:71:5c:6f:cb:a0:f2:79:f2:
58:3d:18:db:f8:8b:fa:68:b3:38:e9:f6:bf:4f:71:
47:84:c0:0e:78:37:c9:5a:d4:8a:d8:ce:b3:d5:70:
64:42:13:26:d7:90:c4:c7:81:67:24:39:82:4f:f1:
dd:b2:f0:18:a5:13:7a:37:ef:9c:bf:ac:a6:ef:ae:
ee:79:48:07:a9:4e:d3:8b:81:43:21:a5:d3:86:ef:
a3:1a:1b:ab:20:5a:43:f1:25:09:32:29:1a:c6:5e:
0a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9F:C1:AE:65:71:B1:48:DF:FF:F4:52:BC:9E:1B:8F:52:5D:A3:D5
X509v3 Authority Key Identifier:
keyid:16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c1:5c:61:1d:4e:32:00:c7:0d:79:af:fa:81:c1:f1:1c:16:
23:6f:c5:e2:bc:98:19:62:27:a7:4a:5a:44:2f:cd:0d:95:bd:
01:3f:12:27:c4:52:ab:c4:61:f7:8d:d7:6c:f1:88:bd:c1:d5:
85:c9:a7:ea:7a:a6:30:16:39:fb:9b:09:b8:6a:f8:ca:18:8a:
7c:96:35:a7:69:12:ee:b6:ac:23:01:ac:f0:db:19:16:55:d1:
fe:40:39:d5:bc:ec:9c:74:8e:28:23:89:55:45:b0:e8:8b:84:
a6:70:ee:04:c9:ee:96:5a:43:42:5a:c9:cf:bf:71:5b:24:9c:
c7:0f:e3:8e:10:aa:7e:a4:6a:60:02:b5:92:1f:23:e0:c1:c3:
42:4c:f8:69:c4:7d:66:42:38:cb:16:b2:fd:d3:89:53:48:13:
f1:99:08:26:44:76:ed:13:4f:15:aa:23:2c:fb:b5:a0:6f:bd:
34:3d:fc:ea:50:60:b8:ad:43:1e:5a:cc:15:26:a3:12:bf:82:
4b:6b:6c:58:11:5a:c0:86:c9:32:dd:ed:f2:de:74:65:e1:a3:
a5:d7:b2:a3:d5:3b:91:07:db:a3:4d:49:59:4f:94:bf:7b:c4:
04:a4:81:9e:d1:d7:2a:54:ad:3c:22:90:6f:97:54:11:5a:99:
04:84:3b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:59:23 2025 by rpki-client