Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: cjlBHPrl8HdyGiDeCJBFHWuyF6hCJxVDcapKNpvNt9c=
Subject key identifier: 2D:53:9D:C1:35:A2:65:15:F2:D3:06:A1:39:31:2F:D8:F8:41:22:4F
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 01995154AB21295D390F242A4A58E883811F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 168B
Signing time: Tue 16 Sep 2025 07:02:07 +0000
Manifest this update: Tue 16 Sep 2025 07:02:07 +0000
Manifest next update: Wed 17 Sep 2025 07:02:07 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: Pw/Q6aQGK61K9E7+i37V/WaFoGPWJgHeJPJdCL97FgI=)
2: ghOgZScInzU-k80H-uXo6Z44fh4.roa (hash: lvvfvqGDTHXluMikuB2xTzxX/lcqRvi6zFraBkTfrlc=)
3: y-KKayWDkSAQJ7WHnrYBMGYeW7s.roa (hash: eQq4AAV0PFKKGDw6XQHABkksm4Mts0DM9GmL48be7Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:54:ab:21:29:5d:39:0f:24:2a:4a:58:e8:83:81:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Sep 16 07:02:07 2025 GMT
Not After : Sep 17 07:02:07 2025 GMT
Subject: CN=2d539dc135a26515f2d306a139312fd8f841224f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:88:f4:4f:76:a7:c6:f2:bc:4a:eb:07:a8:9b:
a7:c4:4d:1f:7e:95:fb:8d:a0:ca:6b:79:6e:7e:86:
8d:1d:7b:ca:26:5a:2f:1b:2b:0f:3a:09:7b:03:b5:
31:22:3c:78:18:a4:ca:ab:61:52:d2:e0:5c:21:15:
6d:79:2c:f2:47:e7:b0:48:ee:6b:7c:d3:62:2b:04:
34:2b:80:3e:29:67:46:0e:86:1f:d9:4f:d1:cf:2d:
b7:45:56:84:28:6b:f3:b9:69:89:73:f5:78:60:40:
4c:2c:9d:c2:e7:04:9e:e8:ab:c9:64:a5:f4:1f:c2:
e3:5a:21:4d:13:16:f6:12:e1:4f:c5:b5:24:6b:e5:
b8:51:86:fc:83:d4:e7:f7:5a:2f:6e:13:01:e5:34:
00:51:10:ee:df:51:bb:27:8b:83:ff:a2:3a:b5:17:
e7:50:7e:76:12:00:2f:ad:42:58:f9:7e:3f:81:6d:
f1:a8:29:6d:bc:63:79:46:7c:41:36:2f:6c:e8:ab:
72:1a:4b:0f:9b:79:dc:62:f2:cc:7f:79:47:bc:66:
b6:ad:6b:9d:b1:4d:06:35:da:9b:82:2e:7d:88:22:
2c:db:b0:24:03:29:fa:41:74:00:38:37:ab:1e:d2:
01:54:be:5d:cb:1f:f6:3e:2b:d5:b2:3c:07:dc:ea:
89:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:53:9D:C1:35:A2:65:15:F2:D3:06:A1:39:31:2F:D8:F8:41:22:4F
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:84:9c:51:58:64:3f:fe:6a:9c:91:65:20:5f:c6:f6:ac:4e:
f7:c9:c9:87:d1:16:53:cd:a7:d3:7e:bd:ce:27:ea:29:50:74:
fd:d3:9c:d7:86:72:38:65:9c:f2:17:17:e7:32:06:74:b8:b8:
10:19:ff:a0:97:b1:9e:ad:93:e8:e2:15:ac:f5:f2:b7:c9:57:
b9:20:43:30:b1:8f:54:d1:54:54:4b:91:d8:10:b1:cf:9e:85:
48:92:30:41:c7:51:08:10:91:41:ca:10:86:07:03:53:04:95:
46:63:3b:59:dd:f2:ea:1a:f5:2d:ec:f9:28:44:46:2e:51:2d:
87:14:c4:ae:4b:a9:11:c8:40:91:91:16:d3:70:6e:97:a0:f5:
75:a0:d0:c7:38:8b:b1:bc:74:09:48:8f:49:af:33:ab:42:ff:
47:f0:e9:6d:7e:8b:9d:54:10:c9:05:7a:5d:82:ec:5c:ef:26:
39:49:1f:37:66:a1:97:8e:e8:a3:c7:c1:e0:66:79:fb:a3:91:
36:51:57:e4:48:0a:2f:71:8e:bd:8a:eb:85:3b:3f:ae:8b:e0:
a9:1d:33:f2:72:f2:92:14:35:1a:e8:f0:c5:da:44:19:bb:01:
76:34:a9:d6:53:3a:b5:fb:6c:28:2a:c4:69:fa:a0:7e:98:b2:
52:60:ca:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 11:53:55 2025 by rpki-client