Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: qQfZ1MtUXMz/2NSIIhHYcxzlN4b1zdl4ZqwimRWo78E=
Subject key identifier: 26:30:9E:20:8A:2C:D0:9B:D0:95:FF:2B:17:BA:52:21:7A:28:85:83
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 019A711342C975F36C37E6C27030F4222E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:01:18 +0000
Manifest this update: Tue 11 Nov 2025 04:01:18 +0000
Manifest next update: Wed 12 Nov 2025 04:01:18 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: rY+T/zFuuP+6VovNzwW0LrJ15xL8/IA/N6e+Um74Ws0=)
2: ghOgZScInzU-k80H-uXo6Z44fh4.roa (hash: lvvfvqGDTHXluMikuB2xTzxX/lcqRvi6zFraBkTfrlc=)
3: y-KKayWDkSAQJ7WHnrYBMGYeW7s.roa (hash: eQq4AAV0PFKKGDw6XQHABkksm4Mts0DM9GmL48be7Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:42:c9:75:f3:6c:37:e6:c2:70:30:f4:22:2e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Nov 11 04:01:18 2025 GMT
Not After : Nov 12 04:01:18 2025 GMT
Subject: CN=26309e208a2cd09bd095ff2b17ba52217a288583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:64:32:fe:96:56:c3:bb:a4:21:77:44:5b:
f2:62:40:20:f0:05:51:44:3f:eb:09:ac:d0:68:82:
27:68:c7:43:5f:ff:16:11:40:8c:32:c3:60:73:be:
dd:6d:ca:d9:05:ec:88:38:a3:8a:e0:08:84:09:d2:
a8:60:0e:29:4a:42:97:e9:43:8c:ad:ea:f9:b8:e5:
c4:54:e1:04:93:10:12:a6:af:2b:28:60:a3:ce:e6:
80:47:93:8d:da:01:c5:7e:6b:a5:3c:ee:75:05:7f:
fc:ab:c6:78:2a:41:c1:e8:8c:9b:9d:07:d4:e1:bc:
f5:6e:30:31:ed:b0:8f:3c:7f:8a:02:f2:8f:1c:8e:
96:c3:51:ab:de:f6:b8:c6:42:fc:91:9c:7a:d8:8b:
71:29:a0:15:4b:07:ec:92:24:ef:88:29:95:94:6d:
12:ef:96:9b:b8:9b:e1:84:bf:8d:aa:b8:ec:86:d1:
f9:ef:c6:12:f3:a2:07:44:38:5c:44:6f:5f:80:1a:
41:01:21:32:de:c6:08:63:69:c1:32:5a:8e:b4:44:
50:b6:7f:c2:64:68:53:f3:aa:e5:79:dd:72:ff:d8:
77:40:10:3d:ac:9c:6f:91:c0:8a:eb:82:2c:14:62:
90:63:9f:d0:af:40:1f:35:a3:86:36:f7:58:51:39:
56:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:30:9E:20:8A:2C:D0:9B:D0:95:FF:2B:17:BA:52:21:7A:28:85:83
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ec:c4:d2:a0:01:6a:6e:bb:a4:53:68:0c:1c:95:39:fe:08:
3b:10:2f:18:55:86:7e:4f:b1:98:7d:59:60:7c:94:a0:f7:aa:
91:7a:75:fc:2b:db:01:2f:a2:f4:04:17:f8:a0:f0:10:d9:1e:
1d:b1:91:6a:08:a1:a9:4e:db:cb:47:27:96:55:a2:95:5d:ce:
c3:65:27:91:96:6a:0d:f9:72:f9:fd:20:46:1b:3c:aa:4a:34:
16:44:d0:2e:f7:4d:4f:36:27:4c:e4:f2:37:2f:51:ac:f3:1a:
58:f9:4d:4d:fe:de:f8:c3:bf:b1:b8:3e:c9:d2:f6:04:15:49:
61:5f:03:72:29:02:c0:57:5a:ce:98:af:1b:42:1e:b4:2c:ea:
b4:78:95:c7:f7:59:89:96:6a:91:ac:05:c2:a2:af:65:35:45:
29:2a:89:83:ea:43:23:ca:d8:95:db:1a:45:61:dd:7e:30:65:
8c:cf:77:99:1a:99:0f:15:48:73:23:cc:e0:3c:e8:8f:e0:c3:
3c:82:c3:a9:41:c2:6f:44:16:2a:1c:c2:c6:a2:18:35:06:6e:
41:e6:c2:88:fb:f8:fb:65:67:f4:2c:41:2f:67:ab:41:48:89:
e7:8c:26:27:52:1f:fe:39:3c:84:e6:8c:f7:83:62:59:0f:b1:
98:8e:21:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:05 2025 by rpki-client