Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
File: F4I131NVJtnm1q_2-nrFIpOpLHE.mft (raw, json)
Hash identifier: aGdCMzosUeY46kLka59D7r4Qp2Lepz6pqdDiwUzpAsM=
Subject key identifier: 65:85:EF:3F:BA:95:4B:2B:48:C7:AD:5C:83:BF:66:28:C8:73:5D:4A
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 019922FAB4A7AAC540DE8472A79DCBE5A635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
Manifest number: 1676
Signing time: Sun 07 Sep 2025 07:01:19 +0000
Manifest this update: Sun 07 Sep 2025 07:01:19 +0000
Manifest next update: Mon 08 Sep 2025 07:01:19 +0000
Files and hashes: 1: F4I131NVJtnm1q_2-nrFIpOpLHE.crl (hash: R5lAqRGRAGQ129A+NcnhaiRq6lamj60LmN79eicTESA=)
2: NXK16WCoOxiuP5Pdh0Kqs98_6Y4.roa (hash: Y5m51ite4A5LbDxUmGbQiHLBy8E1baqu+BrJUl8RNq4=)
3: VhwEbxUgJOza67qJ4K_i1Uqq3ms.roa (hash: aCXGgi5AYKAi5vfsurTRm09inwo+Mr6Oxc+TCBbgaZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:b4:a7:aa:c5:40:de:84:72:a7:9d:cb:e5:a6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: Sep 7 07:01:19 2025 GMT
Not After : Sep 8 07:01:19 2025 GMT
Subject: CN=6585ef3fba954b2b48c7ad5c83bf6628c8735d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:98:ce:91:fc:6e:92:d3:35:e7:b0:5f:40:
c6:7b:b0:60:3a:79:5b:d0:8a:7a:95:4e:5b:92:e5:
8b:e9:b6:64:fc:ac:1b:9f:20:f7:e6:2d:44:c1:b1:
74:1b:b9:d3:36:24:55:b7:cc:9f:9a:c5:23:de:e6:
91:9c:a3:7c:13:02:e3:7f:13:9e:93:1f:39:20:8c:
f3:e9:c1:3d:1d:aa:08:c0:f2:be:e1:3b:00:e9:bf:
15:48:8a:5a:cc:07:59:44:be:d5:c3:d0:c1:06:f8:
31:9c:69:0a:f0:db:15:b8:4b:9c:c0:64:b1:8c:ac:
f4:c9:f2:74:1a:c5:d5:2d:ca:db:81:04:05:a1:b7:
13:4b:e9:f4:43:ee:78:d7:ac:e6:6b:39:25:d2:99:
25:6e:fc:0e:86:ec:a0:a6:61:df:07:c5:b6:53:3d:
ec:78:f7:fc:10:f1:cf:23:67:f7:4b:95:6e:61:ca:
d1:a2:8f:06:ff:1a:86:1a:c3:b4:46:a3:3e:c7:9c:
c3:9c:f1:c2:ff:fa:73:70:6c:b5:48:00:de:23:d8:
e4:68:36:17:8c:bb:a0:49:ca:f3:43:87:48:77:9d:
55:9b:ea:83:a9:c5:84:52:e6:5b:1b:d2:a2:1b:3a:
b5:ca:c6:60:06:99:db:fe:76:c6:1e:fc:82:37:ac:
0e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:85:EF:3F:BA:95:4B:2B:48:C7:AD:5C:83:BF:66:28:C8:73:5D:4A
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:55:59:ce:79:02:e5:4d:10:92:80:7e:58:02:01:72:0c:bd:
87:44:aa:87:b7:5d:6d:11:c5:52:08:3b:7e:ad:7c:eb:1b:18:
c8:23:98:a2:a4:5f:52:3a:63:6a:62:68:a4:9c:a4:f3:3e:ae:
e2:1f:e9:10:53:cd:0c:a9:b8:22:40:86:b6:a3:3c:03:db:f0:
61:76:c3:fc:fe:ca:bd:cb:51:26:76:1c:69:f7:04:9e:4c:ce:
73:a8:4a:f9:0c:b6:9f:b7:b0:7e:fb:66:d6:66:fd:8e:b5:6e:
9e:96:09:c1:14:86:e8:1e:8d:ec:45:59:a6:b7:46:a1:8b:3d:
54:a9:a0:bf:ad:f0:30:91:a7:3e:0f:a6:bf:1f:36:a4:17:0e:
fb:8e:65:81:57:02:72:a0:40:56:97:6b:68:64:e7:ec:df:04:
e2:74:d7:a4:30:c9:8f:09:07:21:4e:09:9e:20:6c:aa:43:68:
2c:85:27:ae:f0:77:b6:62:e8:15:7d:c1:6a:b7:63:e2:d7:0f:
61:9d:87:2d:78:dc:a1:16:6e:61:80:9b:70:7a:f8:1f:33:25:
e9:ff:cd:1e:b4:ca:6e:80:fb:4f:d0:99:68:b7:fc:28:83:7e:
a9:0e:2a:d6:55:9e:df:c4:8b:a9:bd:6f:fe:e4:59:30:97:1a:
2f:af:08:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:47 2025 by rpki-client