Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
File: F4I131NVJtnm1q_2-nrFIpOpLHE.mft (raw, json)
Hash identifier: fSC3omFZxyW2oDMddpxApUHe+EgA2SAD2u3w5VNPYgc=
Subject key identifier: F9:2E:AA:82:B3:73:F9:2F:48:92:7F:3E:64:75:62:11:8E:81:7D:3B
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 019A1A2B9BFE79DC95CEAE7586F19FECEAD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
Manifest number: 16F6
Signing time: Sat 25 Oct 2025 07:00:56 +0000
Manifest this update: Sat 25 Oct 2025 07:00:56 +0000
Manifest next update: Sun 26 Oct 2025 07:00:56 +0000
Files and hashes: 1: F4I131NVJtnm1q_2-nrFIpOpLHE.crl (hash: pTkGgrlMkLN+rXxtBxeo0BnBEoVYGygQKQIWavfPI6M=)
2: NXK16WCoOxiuP5Pdh0Kqs98_6Y4.roa (hash: Y5m51ite4A5LbDxUmGbQiHLBy8E1baqu+BrJUl8RNq4=)
3: VhwEbxUgJOza67qJ4K_i1Uqq3ms.roa (hash: aCXGgi5AYKAi5vfsurTRm09inwo+Mr6Oxc+TCBbgaZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:2b:9b:fe:79:dc:95:ce:ae:75:86:f1:9f:ec:ea:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: Oct 25 07:00:56 2025 GMT
Not After : Oct 26 07:00:56 2025 GMT
Subject: CN=f92eaa82b373f92f48927f3e647562118e817d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:86:12:a4:51:38:e2:01:3f:af:70:c3:40:
82:b9:e7:7c:ce:88:97:41:df:a1:40:8c:be:a0:9d:
c7:fd:16:ab:e8:8a:39:21:f4:c5:47:d1:66:2f:19:
59:02:96:76:48:e0:a9:72:6e:39:18:7d:7a:6b:f0:
cf:ce:97:6d:43:1b:2b:5e:ed:d8:2b:0d:30:88:c9:
2e:c7:64:13:a8:07:aa:a2:7d:be:74:11:53:f7:c0:
b2:3b:21:8e:01:f7:3d:36:7f:70:f5:b9:55:60:93:
bf:17:6d:84:7e:bc:be:07:e4:90:e7:51:f6:82:a3:
11:7c:2d:07:83:c7:ce:35:07:6a:9c:b2:0b:bf:3d:
28:ea:13:e9:e6:0e:3d:97:68:d7:49:d9:31:c1:00:
3a:4d:a9:5d:4d:e0:42:b2:50:4b:fb:8f:49:91:b7:
75:8d:29:98:bb:67:92:a1:6d:fc:d0:95:3f:43:24:
b5:5e:63:d0:83:26:54:4a:29:a0:3d:63:4f:b8:72:
e2:70:d5:9a:04:9f:0f:b2:54:c6:e0:c7:c9:d3:7e:
55:84:fa:32:72:07:bd:98:52:d3:d9:64:ec:c6:f6:
18:d8:aa:e6:56:0b:9b:68:bf:18:68:21:1d:5c:34:
56:b9:e2:bf:4a:ee:78:b5:b6:19:ce:75:a5:f1:31:
d3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2E:AA:82:B3:73:F9:2F:48:92:7F:3E:64:75:62:11:8E:81:7D:3B
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:41:3d:5e:aa:a6:7c:75:03:23:d1:d8:08:19:9f:98:82:d2:
3b:39:bf:3b:9e:b4:9a:f0:fa:6b:22:e5:ad:f1:f1:f9:5f:4c:
82:11:10:63:a3:9d:9e:32:97:ec:a2:54:9d:8e:46:e9:d8:36:
a8:35:d5:8c:07:43:cc:c3:9a:af:4e:f6:b4:06:b5:b2:e3:aa:
73:f5:d8:da:d2:98:75:43:60:e1:4f:e6:84:57:d8:17:cc:90:
95:12:ec:4c:b7:f8:c4:da:0d:75:65:4f:9f:0e:2f:21:43:fe:
27:22:d0:8c:b5:82:de:06:f5:02:0e:63:94:a3:c9:ad:37:c8:
0b:c3:48:7c:fc:45:fa:23:6e:e9:97:37:4a:7a:f4:84:d7:c5:
35:c0:29:55:f8:1e:fa:3b:27:6b:4f:a5:c7:a8:74:a2:6d:c6:
2c:e7:e5:6f:cb:96:7b:ac:6e:1a:2d:aa:eb:7e:f5:58:61:b3:
cc:13:33:b0:85:b1:af:1f:ae:81:27:96:fc:c2:81:d7:38:65:
e1:82:ee:b6:e1:07:9a:a8:58:8e:d8:c0:2a:af:cf:22:80:b3:
44:7f:ea:7e:0d:c0:d1:de:55:a5:f9:d1:a9:5e:8a:36:19:f8:
e5:f0:42:90:7a:86:55:36:8f:70:53:db:34:29:11:8d:2e:d1:
43:e2:70:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:27:21 2025 by rpki-client