Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
File: _iFRDnSlthGog2amTtL7jmAVQpM.mft (raw, json)
Hash identifier: vWz02Kk7flW5dPpMPe7XgTxVTiTINUiGV3ABe+Ht8Zw=
Subject key identifier: 7A:69:9E:1B:B6:1F:2D:2C:51:0B:DD:12:44:F7:20:55:C3:EB:DE:32
Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
Certificate issuer: /CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Certificate serial: 019A23D2F53D79DAAF54DAF9D46159ACE54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
Manifest number: 16F5
Signing time: Mon 27 Oct 2025 04:00:18 +0000
Manifest this update: Mon 27 Oct 2025 04:00:18 +0000
Manifest next update: Tue 28 Oct 2025 04:00:18 +0000
Files and hashes: 1: _iFRDnSlthGog2amTtL7jmAVQpM.crl (hash: W3FEpEyYiQ8YubLWjVHbw9gIx7uE7bcUypK6Lqx0LIM=)
2: pA-X0SaB0DP88NQK6S16CRpbIws.roa (hash: /lnCuMiAMJ5HoCTByF87eDA744xmzbWJMwOSkdeAHzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d2:f5:3d:79:da:af:54:da:f9:d4:61:59:ac:e5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Validity
Not Before: Oct 27 04:00:18 2025 GMT
Not After : Oct 28 04:00:18 2025 GMT
Subject: CN=7a699e1bb61f2d2c510bdd1244f72055c3ebde32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:a8:f7:81:80:ae:6c:59:12:0e:d2:aa:e8:
1e:92:c6:2e:9b:d1:54:c1:c6:1f:e5:bc:2f:b9:8e:
6d:60:d1:c7:65:47:79:ed:19:01:bd:76:2d:7c:39:
74:d9:d9:27:d3:cd:34:a9:51:a9:3f:f1:8a:be:fb:
1e:ab:11:43:e9:f2:96:e5:a6:c9:42:af:f3:75:61:
ec:e1:78:c3:e0:ab:b5:f4:34:46:16:04:5a:8b:2a:
f7:e2:f0:27:1a:d3:7d:30:ff:a4:7f:68:2d:e1:50:
90:7f:15:26:b2:1d:5e:32:5c:f2:29:64:17:d6:71:
76:2c:12:64:9d:0c:1d:1d:33:e4:9f:1a:da:8a:55:
6d:0e:5d:36:f7:e6:58:2f:38:89:1e:66:a9:f0:99:
b5:99:c7:a8:1a:2c:db:2f:6b:7c:b4:5e:e4:82:61:
5d:c9:b2:0b:2e:eb:5a:c0:73:23:af:63:48:99:4c:
b4:67:be:1b:78:c9:d0:02:11:c5:01:4e:b7:b8:c7:
b6:45:23:eb:06:32:a1:c7:ea:ad:5b:98:a1:e0:94:
08:75:a5:e7:21:1d:32:eb:42:c8:eb:fd:c1:35:f2:
d4:0f:bf:73:36:48:02:a1:3d:21:59:f9:f0:41:46:
1b:2c:f7:f6:80:97:66:9c:8c:ec:75:c9:b0:a8:c7:
69:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:69:9E:1B:B6:1F:2D:2C:51:0B:DD:12:44:F7:20:55:C3:EB:DE:32
X509v3 Authority Key Identifier:
keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:82:4d:03:b0:27:10:15:d4:f4:af:8a:31:8e:3e:98:5f:20:
10:30:ac:52:46:10:89:94:e4:b1:ed:dc:e4:52:18:4e:88:8f:
80:95:ec:52:3d:48:0d:82:6e:24:5b:97:22:ed:02:c1:a9:01:
18:79:a2:22:0c:0f:93:d5:b8:a3:99:50:97:d0:6d:89:91:e1:
6a:02:de:4a:58:ec:98:97:fb:94:ba:16:35:47:33:b6:56:72:
49:17:bc:e6:27:38:e6:93:8a:a2:7c:cc:66:b0:73:0f:49:0e:
38:aa:2c:34:85:bb:83:bf:b3:70:8a:ef:ed:1a:70:61:98:d7:
30:05:b2:5d:ab:32:89:cc:1a:6b:40:bf:72:0a:f0:42:9f:13:
92:bf:1d:dd:26:5e:29:3c:94:b8:2a:d2:fa:7e:b3:b3:1d:87:
43:a7:c3:f4:33:d8:f0:64:bb:51:71:37:37:71:56:63:b3:10:
96:e6:85:9f:02:0c:58:59:6d:f8:e6:99:1b:12:a7:97:f6:1e:
1d:38:69:27:8a:aa:f3:3b:d6:de:c9:88:d4:bd:c7:6e:7f:ce:
74:1e:a1:65:d8:10:22:4d:3a:68:65:b5:97:a7:ae:4e:05:88:
5f:47:a4:dc:34:7e:e0:16:13:85:60:43:a4:92:5f:bb:4f:6f:
ed:80:f1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:19:35 2025 by rpki-client