Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
File: F1ogYIrOEedRHIZpVgY2cwqeKr8.mft (raw, json)
Hash identifier: Ksx+MvqU4w+IwMR+pVcXojdTw5jqv/yeweMEaB8gYPA=
Subject key identifier: 1E:CA:79:97:15:07:1C:BC:AA:96:AE:D5:E6:2B:2B:51:40:5A:1F:B6
Authority key identifier: 17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF
Certificate issuer: /CN=175a20608ace11e7511c8669560636730a9e2abf
Certificate serial: 019922C3439DB22F959EDAAEF2CEAE96158D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
Manifest number: 052D
Signing time: Sun 07 Sep 2025 06:00:46 +0000
Manifest this update: Sun 07 Sep 2025 06:00:46 +0000
Manifest next update: Mon 08 Sep 2025 06:00:46 +0000
Files and hashes: 1: 2U-2Eym6KYW6qLxuFsjcorsxKnc.roa (hash: KrlvkjS9SKD/PHB33xX+CX5Zyn9t48T8ugGL2ErULzA=)
2: F1ogYIrOEedRHIZpVgY2cwqeKr8.crl (hash: OkMUI20B7MIpakgLOFq5ICM5QqmQQqBOpBDXwOJncxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:43:9d:b2:2f:95:9e:da:ae:f2:ce:ae:96:15:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a20608ace11e7511c8669560636730a9e2abf
Validity
Not Before: Sep 7 06:00:46 2025 GMT
Not After : Sep 8 06:00:46 2025 GMT
Subject: CN=1eca799715071cbcaa96aed5e62b2b51405a1fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f6:7e:01:3b:3c:0f:a6:21:89:f8:8a:dc:24:
99:90:7b:2a:f5:95:ef:9a:16:39:45:68:d2:31:d4:
4c:37:b9:af:2c:a9:ca:05:f2:e6:c5:e6:d0:84:44:
e4:69:6c:4f:93:58:df:01:08:41:26:3f:71:41:50:
c2:54:bb:be:ca:6d:0a:16:05:6a:4f:56:87:06:9a:
d0:eb:57:0e:41:a5:4c:98:25:66:62:36:d8:c7:d1:
37:29:70:7f:db:69:4a:81:30:89:d6:f3:77:22:a8:
ee:9c:67:22:2e:ab:45:2c:e2:09:92:65:a2:26:09:
64:47:56:f5:f0:82:07:12:1e:42:fd:84:55:a5:ef:
2e:1d:9c:39:4d:3b:d1:7c:7d:66:23:09:64:b6:db:
a9:3e:01:65:eb:78:12:87:9c:cb:33:5d:ba:5f:4d:
94:44:34:5e:36:02:4b:28:d0:50:b4:e1:d4:74:6d:
50:18:53:f5:40:80:1f:fe:56:d7:c9:eb:3a:f0:70:
14:85:ca:d4:bb:fe:87:a1:61:80:01:a2:9f:8e:7c:
c9:5b:57:be:19:0c:a0:27:57:53:84:e2:dd:bf:d7:
0a:dc:fe:54:d0:33:ae:cf:2a:a5:ae:fd:62:cb:15:
26:bd:52:ed:b4:ce:aa:fb:58:4a:c6:ca:73:2c:9d:
fd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CA:79:97:15:07:1C:BC:AA:96:AE:D5:E6:2B:2B:51:40:5A:1F:B6
X509v3 Authority Key Identifier:
keyid:17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:12:c0:84:bb:6c:26:be:92:83:f7:0c:ad:e6:31:11:59:a3:
46:5c:e5:6d:3e:6c:6e:2e:3a:76:c8:31:77:06:43:5a:a1:a9:
34:d1:77:25:89:2b:58:31:79:5b:65:3b:01:04:67:d1:3e:19:
f9:dd:f4:ba:1f:5b:9b:6d:e6:3b:23:b1:a7:3a:5b:45:25:6a:
c0:0b:d6:2a:e8:b1:97:55:eb:56:13:45:79:d6:26:87:3c:3a:
f9:a0:a1:1d:36:4c:60:14:2e:e8:8f:a3:27:54:1e:97:f2:80:
dd:49:f8:e6:c1:7b:e5:5e:16:63:de:a4:56:3c:de:77:d9:34:
1e:19:f7:f6:97:69:16:72:fe:0c:b0:a9:a3:aa:3f:ea:72:ef:
6a:a8:d8:ce:4c:bf:ec:22:51:a3:5c:ac:f0:8f:c3:d2:34:bf:
a8:2d:2d:1f:29:2c:14:7f:21:00:d7:0d:b9:4a:96:9e:df:94:
4b:7c:5a:08:77:eb:69:44:f3:67:c6:c6:76:52:2a:b5:1a:25:
20:7d:a9:71:e2:69:48:3b:dc:38:69:4f:d2:c3:a4:c8:02:ec:
14:75:5a:b1:e3:f6:56:9d:10:43:12:42:ae:b4:09:b4:92:24:
12:c8:2c:f8:32:fc:d1:03:76:a6:81:d5:fc:98:0f:cb:11:2c:
01:5d:cd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:25 2025 by rpki-client