Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
File: F2wVCakW_qd6H9QIipnQ5iLWTD8.mft (raw, json)
Hash identifier: 0+CCWp/Znc//0W/ItN76YI8JrA3cnO8m7bbDkPuOS+o=
Subject key identifier: E9:89:8F:BA:04:77:61:10:5A:AD:7D:0A:47:24:3A:3D:35:5C:58:AA
Authority key identifier: 17:6C:15:09:A9:16:FE:A7:7A:1F:D4:08:8A:99:D0:E6:22:D6:4C:3F
Certificate issuer: /CN=176c1509a916fea77a1fd4088a99d0e622d64c3f
Certificate serial: 019A7112A81F1FCCE7662077950F86570423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2wVCakW_qd6H9QIipnQ5iLWTD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
Manifest number: 0137
Signing time: Tue 11 Nov 2025 04:00:39 +0000
Manifest this update: Tue 11 Nov 2025 04:00:39 +0000
Manifest next update: Wed 12 Nov 2025 04:00:39 +0000
Files and hashes: 1: F2wVCakW_qd6H9QIipnQ5iLWTD8.crl (hash: KmUpWCIcoWzSXk5i0cPFx+tykpPZBusZMRbmH/Vk5bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2wVCakW_qd6H9QIipnQ5iLWTD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a8:1f:1f:cc:e7:66:20:77:95:0f:86:57:04:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=176c1509a916fea77a1fd4088a99d0e622d64c3f
Validity
Not Before: Nov 11 04:00:39 2025 GMT
Not After : Nov 12 04:00:39 2025 GMT
Subject: CN=e9898fba047761105aad7d0a47243a3d355c58aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:5f:a1:6d:e1:5c:15:e7:f0:02:a4:a8:fb:
6a:5f:a4:4f:37:11:86:6c:2c:be:e4:c4:06:17:0c:
17:a6:48:56:f5:a8:0e:28:98:b9:f6:3a:dc:e9:4f:
f8:15:b5:23:78:65:c0:db:c9:dd:d4:54:04:36:1c:
cb:28:e9:b9:6b:33:f7:f4:38:17:38:e1:2e:c9:2f:
76:55:71:1a:9b:b7:8b:32:79:f4:7d:07:e4:56:41:
61:fa:92:ba:1e:b3:d5:ac:b8:6e:38:bd:c4:85:bb:
fd:08:70:4f:a6:dc:00:9a:d4:56:e6:f0:51:58:06:
ec:f1:74:8e:80:6c:c2:3f:44:62:24:92:29:c6:4f:
68:ca:f6:f5:ad:13:bf:5d:8b:97:71:f5:13:45:2a:
e6:20:03:f1:f7:5c:bd:29:46:b7:b4:c5:58:26:8d:
d8:7a:3c:f5:1d:32:b8:a2:e2:e1:ea:fe:78:3a:cd:
d6:9f:37:ff:07:69:76:97:fd:38:67:8f:e5:6e:c9:
43:27:26:c0:24:8e:1a:3e:e7:5c:5b:f9:20:80:fd:
01:b9:1c:96:5d:3e:8e:e0:43:e8:3e:30:14:44:5b:
e4:5a:69:1a:44:26:64:f4:50:ac:31:2f:f1:e6:6c:
61:50:65:f3:6a:db:84:f7:9c:06:f9:dd:d4:31:5f:
15:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:89:8F:BA:04:77:61:10:5A:AD:7D:0A:47:24:3A:3D:35:5C:58:AA
X509v3 Authority Key Identifier:
keyid:17:6C:15:09:A9:16:FE:A7:7A:1F:D4:08:8A:99:D0:E6:22:D6:4C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2wVCakW_qd6H9QIipnQ5iLWTD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:19:8d:71:0d:22:cd:f3:e2:aa:02:98:df:55:3d:97:8e:cf:
86:fa:db:71:aa:e9:d0:db:19:ae:bf:38:d4:1c:bc:7f:10:07:
9f:12:a0:fc:de:3c:82:d9:50:01:4d:95:86:c3:aa:4f:6c:2a:
9d:71:3e:33:59:e6:4a:8d:b4:1f:a3:fa:1b:58:62:6e:cf:7a:
0b:de:12:6f:60:ad:1c:f0:4a:5f:a8:3d:c6:f2:4d:3e:2c:88:
25:40:0e:22:95:18:26:60:cd:8e:ed:54:20:19:9b:1c:f8:5d:
5e:e6:68:ad:44:ca:8f:2e:29:f1:6b:df:0f:d3:5b:72:00:75:
56:eb:b4:75:4d:1b:ad:78:38:54:e8:ba:92:df:ea:7a:52:a9:
65:62:74:77:35:f6:9f:cf:7a:c3:0c:48:5d:6e:68:12:3e:6d:
e1:90:50:4c:fa:d0:14:30:b2:4e:1e:5e:2c:08:60:94:e6:bd:
34:3b:17:a2:5b:4b:8f:1e:2e:8d:0c:4c:e1:b6:33:3b:50:80:
07:39:e7:6f:6e:11:44:ed:ee:fc:bd:2d:bc:e3:f6:50:97:a1:
63:6c:ec:d2:d5:31:01:c4:8f:85:81:a4:f5:00:40:6a:81:f0:
f5:25:2d:d2:2b:f5:f6:70:df:ea:d6:8e:d8:15:c9:b7:0f:26:
e0:30:90:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:36 2025 by rpki-client