Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
File: F2w05a5wFsNgXTJpVkrpaFRDWV0.mft (raw, json)
Hash identifier: 4AFFmIA0tLntK4zMEzU6FZjNTyZ8eiIe3/iiHB4Evdw=
Subject key identifier: 3B:35:E6:FF:E3:38:34:61:F7:AE:69:C1:41:79:00:D5:2F:E4:3B:B4
Authority key identifier: 17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
Certificate issuer: /CN=176c34e5ae7016c3605d3269564ae9685443595d
Certificate serial: 01984A77CB267B399159B102A79AE0FE9ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
Manifest number: 0868
Signing time: Sun 27 Jul 2025 06:00:21 +0000
Manifest this update: Sun 27 Jul 2025 06:00:21 +0000
Manifest next update: Mon 28 Jul 2025 06:00:21 +0000
Files and hashes: 1: F2w05a5wFsNgXTJpVkrpaFRDWV0.crl (hash: UAHGYtxUdKgycGSYb6kX1kI97PjKLGwtkgJigGw9wZI=)
2: wlY-QtAkBrD3gjKIpeQoXPyzFOM.roa (hash: zJBXQ4JCSb3Ylp4EVKprUMeUDS30W25c/gEiCbzENgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:cb:26:7b:39:91:59:b1:02:a7:9a:e0:fe:9e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=176c34e5ae7016c3605d3269564ae9685443595d
Validity
Not Before: Jul 27 06:00:21 2025 GMT
Not After : Jul 28 06:00:21 2025 GMT
Subject: CN=3b35e6ffe3383461f7ae69c1417900d52fe43bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:82:12:30:5e:34:a2:fc:a9:8e:28:be:af:35:
bd:45:8e:b0:db:9d:18:98:7a:17:29:cf:0e:08:c2:
ff:d7:a7:d2:b8:97:ce:22:64:00:a4:d7:ea:3d:47:
3b:4c:19:04:df:14:a5:8a:85:1f:8b:bc:b6:30:f2:
11:92:46:36:39:5d:eb:ec:08:a2:14:70:ff:8b:89:
4d:2c:53:f1:08:55:82:63:2c:6f:cc:cc:11:43:5e:
d1:90:30:3c:04:9c:69:06:41:29:20:9d:f5:d4:a7:
ae:ca:53:99:ed:48:f0:08:5d:e0:12:3e:67:2f:a5:
3e:33:71:a2:d6:cc:0a:ff:2f:59:32:7b:d0:dc:6e:
8d:0b:35:2a:ce:98:a2:6c:ed:c6:3a:10:29:36:f6:
f7:1f:78:8e:ec:c7:9e:19:98:ab:c1:74:5b:06:58:
a1:1c:5c:8d:e2:1a:86:53:26:23:c5:89:5c:52:f8:
b1:e9:dd:5f:41:f5:d5:f0:ea:43:fc:c4:01:af:54:
70:3e:b6:d8:f2:49:6a:b4:40:3d:05:93:97:9f:c4:
9e:c3:22:f1:a7:65:2f:0e:7a:ba:c9:af:33:52:cb:
23:68:b1:c1:33:8d:7e:b4:60:a4:40:00:8b:fd:3d:
5b:b7:22:98:93:73:db:4c:72:9e:6e:a6:f6:f8:f0:
59:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:35:E6:FF:E3:38:34:61:F7:AE:69:C1:41:79:00:D5:2F:E4:3B:B4
X509v3 Authority Key Identifier:
keyid:17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:30:62:cd:37:34:1e:03:cb:89:4f:98:16:90:11:b1:d5:9d:
fe:df:c5:ed:b6:26:66:d3:d3:a3:4d:a1:4a:43:a7:c5:1a:c5:
0d:75:73:a9:4a:0b:a8:dd:40:0c:6b:17:aa:50:6f:b7:a4:73:
50:00:9f:e2:af:b5:19:a6:01:97:a3:32:99:b2:03:41:0c:31:
2e:26:e1:cd:0b:a0:55:04:27:e1:18:5b:fa:ac:1c:40:52:c9:
2a:f5:a2:2a:07:b4:bc:b2:1d:3d:c0:ec:82:bd:ba:31:dc:ba:
ed:98:87:2a:7e:c4:67:5c:50:8b:b9:b0:dc:23:45:79:fc:b2:
fa:2b:8d:e3:e2:d4:5a:c9:77:3a:fc:d5:c2:4b:27:96:5f:dd:
0b:28:27:a4:09:d7:f2:72:bc:5a:61:84:5e:96:09:0e:6e:e7:
08:24:ff:73:3b:79:1e:df:8a:c3:bd:a4:06:28:e7:fa:dd:d6:
83:b3:84:ba:7a:b7:44:42:2e:b0:d1:13:02:3c:ba:4f:6d:1f:
48:a2:74:0d:3e:d0:a4:1d:ae:32:22:3e:70:89:ca:68:b1:8b:
25:e0:a8:75:8a:13:23:ce:1c:00:66:cd:7a:62:41:61:ff:73:
b7:07:b3:a2:32:e7:d7:b9:ed:2f:10:88:7c:5d:f3:fe:da:d9:
06:78:f2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:04:31 2025 by rpki-client