Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
File: F-s-AEUBmMitRev4PhMCGbk2Q6U.mft (raw, json)
Hash identifier: p8XZNNlYxOEmJb1fWp/jZoIBhvZ6vQ6UegeLRCsBlDE=
Subject key identifier: 38:2B:C8:5E:38:E2:01:DA:CF:BF:B7:8E:7A:60:90:48:02:45:2E:17
Authority key identifier: 17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5
Certificate issuer: /CN=17eb3e00450198c8ad45ebf83e130219b93643a5
Certificate serial: 019A71B7EE782E6C2E2891075B62BD18D561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
Manifest number: 0B9F
Signing time: Tue 11 Nov 2025 07:01:10 +0000
Manifest this update: Tue 11 Nov 2025 07:01:10 +0000
Manifest next update: Wed 12 Nov 2025 07:01:10 +0000
Files and hashes: 1: 1-NglftYb2V7rgWaj06UP-4Fbxaw.roa (hash: zvrixR1OfM7l+BuV+ILz2uoXSyiF2KQB8j15busAZgQ=)
2: F-s-AEUBmMitRev4PhMCGbk2Q6U.crl (hash: YZJ8cbu7uHf9e+jD7fBGshwVSBOUg0L46+iPl26Fi8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ee:78:2e:6c:2e:28:91:07:5b:62:bd:18:d5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17eb3e00450198c8ad45ebf83e130219b93643a5
Validity
Not Before: Nov 11 07:01:10 2025 GMT
Not After : Nov 12 07:01:10 2025 GMT
Subject: CN=382bc85e38e201dacfbfb78e7a60904802452e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:31:1a:f1:ac:9e:dd:52:f5:91:12:7e:36:
10:88:a6:17:d3:c0:54:70:89:6b:c8:f7:c8:96:4b:
51:03:a0:fa:8f:fc:23:55:cf:0b:73:cd:39:9d:32:
05:0d:f4:39:7a:f4:db:03:c2:14:8e:4b:0e:47:82:
c7:d8:6e:b9:8e:cf:f7:d1:68:e6:15:9b:60:54:6d:
d8:e2:1a:dc:e7:f6:ae:98:0e:b4:10:19:90:90:4d:
1e:83:cf:b0:e5:38:30:55:d1:b6:7f:f4:88:fa:91:
64:b5:08:30:82:37:1c:2f:ba:b5:fb:d6:7a:e3:33:
08:86:26:c5:b8:ad:c2:f7:66:49:6e:db:2a:b3:1a:
b5:93:db:f7:39:20:9c:47:a0:68:bf:f1:19:ad:b9:
20:06:4b:d9:7d:44:3d:33:1b:3e:dc:74:3f:e0:3f:
7d:01:6b:f8:4c:84:7e:4f:0e:73:e1:57:94:ce:a6:
91:2a:df:22:ac:de:4e:d4:87:3c:a1:f3:0e:05:3a:
8e:6a:c2:96:5a:a3:2a:6a:62:86:3f:ef:1e:84:75:
cd:79:71:f3:e2:79:bb:32:12:20:34:8b:44:e6:80:
5c:e6:c5:12:c3:8f:8f:39:89:e0:bb:fe:dc:6d:c6:
6b:ac:c0:a8:74:7c:64:3f:52:91:05:9b:8c:31:6b:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2B:C8:5E:38:E2:01:DA:CF:BF:B7:8E:7A:60:90:48:02:45:2E:17
X509v3 Authority Key Identifier:
keyid:17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1b:0e:b6:f9:5b:04:47:e5:b8:2e:63:15:c4:47:e5:5b:eb:
fa:35:75:7f:53:0d:2e:8d:c7:34:36:bb:da:31:c2:cd:ca:b5:
58:64:f4:27:10:2a:fa:5c:7a:aa:0f:1f:96:2e:2b:ee:7b:48:
63:45:f4:a5:75:f3:ac:03:fd:47:e3:15:be:15:fd:71:fe:76:
d7:38:6d:4a:d9:64:3a:58:23:cf:c3:dd:2e:a9:00:2b:14:c4:
3a:10:6e:71:93:93:bc:06:cf:e7:77:5c:ba:a8:03:a1:0e:f9:
53:3d:74:13:6c:0d:32:ff:e8:d5:da:5c:fe:aa:5c:c6:d1:8f:
cc:a7:5a:e4:35:4e:d0:5d:13:1b:5f:2f:18:6a:01:44:57:4e:
b1:ae:a0:00:fa:1f:dc:39:24:e2:b8:69:03:85:db:ce:4e:1a:
0c:0f:af:ca:90:3d:da:a7:88:7a:73:f3:75:33:19:45:7c:a5:
44:61:9d:e2:22:ab:45:12:41:ce:87:2c:39:70:54:e0:62:e1:
7c:4f:20:42:70:77:3b:74:da:77:2a:de:da:5f:31:16:34:f4:
7d:e7:76:71:8d:d6:8f:80:ec:0a:60:62:2c:71:a2:1f:22:e3:
f0:f2:f1:c8:9c:29:bc:66:3b:84:3b:3a:9f:d4:a0:25:4c:cb:
a9:ab:60:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:48:43 2025 by rpki-client