Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
File: Fwpcah2MIGUdVj4_ELujqD344L0.mft (raw, json)
Hash identifier: BSTS+0KllwWB3dNHzQdzNxLT7CDMrt6EJaYSzJvsfmI=
Subject key identifier: AC:2B:AF:4D:84:91:7A:C0:D2:44:7E:1C:A5:A0:68:D1:83:6E:DC:49
Authority key identifier: 17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD
Certificate issuer: /CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
Certificate serial: 019A71B7929056E2D2645CF47F04314C1AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 07:00:47 +0000
Manifest this update: Tue 11 Nov 2025 07:00:47 +0000
Manifest next update: Wed 12 Nov 2025 07:00:47 +0000
Files and hashes: 1: Fwpcah2MIGUdVj4_ELujqD344L0.crl (hash: JjQZE5fFiX0xCr+nGxdMY/R+q8qjUBTAYz7IS1XcOOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:92:90:56:e2:d2:64:5c:f4:7f:04:31:4c:1a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
Validity
Not Before: Nov 11 07:00:47 2025 GMT
Not After : Nov 12 07:00:47 2025 GMT
Subject: CN=ac2baf4d84917ac0d2447e1ca5a068d1836edc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:d6:aa:92:9d:44:c7:57:d5:7b:5e:ae:44:
67:c6:91:2d:32:4c:b9:00:8d:67:d3:74:65:b5:0e:
4e:b0:fa:52:ff:3c:10:27:04:62:e8:34:5f:c4:0c:
7d:a5:68:6d:00:95:10:c3:60:70:9c:8b:03:29:cc:
4d:21:e5:8e:2d:0d:fb:3f:4d:fb:a4:59:60:e9:0d:
7e:44:15:3a:ea:89:53:61:3f:20:4f:a6:67:77:59:
a3:6e:f7:8d:4f:b6:ef:02:b7:45:d8:d7:23:ec:b5:
a2:0a:09:f6:4d:35:54:70:65:a6:8f:4a:87:8b:08:
19:eb:a5:b5:05:f8:4f:fd:d7:25:57:4b:c6:1d:3e:
be:ec:72:ed:20:34:e0:35:2c:fb:97:14:cb:0c:e4:
ea:f5:af:a4:fb:38:b2:84:e9:56:22:5c:a5:9c:30:
9d:8f:e9:d9:20:0e:7a:cb:ff:fc:20:f8:fe:55:48:
e1:a7:19:51:00:98:94:88:9c:65:b8:a5:bc:57:e0:
28:23:53:1a:60:7d:0a:d0:5f:86:f3:45:4d:e1:e2:
0d:00:f1:14:0e:d4:2f:87:83:a0:c9:eb:ce:05:55:
69:cd:2b:5e:75:c8:6b:c9:75:48:1b:fe:23:bc:9a:
07:33:95:fa:4f:5c:a8:57:0a:5e:44:02:bd:fb:52:
7b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2B:AF:4D:84:91:7A:C0:D2:44:7E:1C:A5:A0:68:D1:83:6E:DC:49
X509v3 Authority Key Identifier:
keyid:17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7b:0b:da:da:37:84:11:46:ad:cf:00:a4:28:cd:17:5b:ef:
2a:ee:d9:be:57:09:d9:10:48:c0:ff:9d:6c:b3:13:90:6f:b8:
53:93:d8:ff:37:28:56:5c:b6:6e:1c:a8:99:d8:72:d8:8c:77:
7a:6d:05:e5:c0:fa:ca:d2:34:8c:e2:43:ef:38:d3:f3:de:81:
55:6e:0e:2a:29:b6:c9:af:a1:c3:fa:02:bf:65:c6:31:b9:eb:
32:59:7d:0c:7c:36:a9:93:e0:8d:ce:74:11:59:62:15:6f:d9:
46:6a:1c:62:96:ce:fd:d5:8a:39:5b:b7:4a:09:93:41:23:5a:
3a:4b:7c:52:b9:21:51:b0:4e:cd:42:81:b6:e8:df:52:73:8e:
a3:b7:ca:2b:61:27:e8:2a:28:bc:61:90:33:da:94:ce:ea:40:
ca:95:97:0c:8f:52:2a:03:ad:ba:cb:54:39:87:84:0e:b5:d5:
29:cd:c9:0e:39:83:61:bb:a3:37:43:57:18:fc:11:e4:f3:e1:
ef:b3:14:22:0f:7b:34:38:59:db:76:db:59:d7:b6:8e:9a:1a:
16:42:d2:9e:f6:8f:8f:41:4e:f7:69:6e:5d:25:17:77:81:5c:
b6:92:a1:d9:1c:e8:b5:ce:99:44:26:03:91:31:5a:b5:33:86:
3a:ff:28:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:36 2025 by rpki-client