Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
File: F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json)
Hash identifier: o0Gbv0ExPrpgVBzqVbVwrhtPpwK0l1QSGXOq8Ua/vvc=
Subject key identifier: 10:F3:45:47:39:AF:31:B8:2B:B8:38:7D:19:56:93:3E:CA:3D:67:26
Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
Certificate issuer: /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Certificate serial: 019A22F6FD941E8BEB307526D9FC9752840C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 00:00:03 +0000
Manifest this update: Mon 27 Oct 2025 00:00:03 +0000
Manifest next update: Tue 28 Oct 2025 00:00:03 +0000
Files and hashes: 1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: GrI3t9nHHufBmqcu7fCO9zYMaeVnKvbfZpaoL5/cHKE=)
2: YkiiV0RDHFC-BUQDCVg59T2UUOg.roa (hash: JgGDNNpAIzdyLgpjO8Q07wczCvQGkR61dSx5OtpD+HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f6:fd:94:1e:8b:eb:30:75:26:d9:fc:97:52:84:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Validity
Not Before: Oct 27 00:00:03 2025 GMT
Not After : Oct 28 00:00:03 2025 GMT
Subject: CN=10f3454739af31b82bb8387d1956933eca3d6726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:26:29:5b:c8:b4:97:07:b2:3b:80:1b:2f:eb:
a6:ce:11:d2:84:2c:a8:67:7f:c7:b6:90:34:f4:36:
99:8d:e3:91:fe:92:a9:17:c8:1d:36:52:ba:55:f8:
ef:07:3f:7c:2e:6e:70:30:a5:1e:be:6b:b9:f9:db:
fd:67:f1:4f:65:37:6e:30:48:c2:ae:52:6d:da:f8:
59:28:0a:e9:4d:ee:01:d8:9d:22:84:49:e6:49:1f:
27:66:ad:c5:29:63:ed:d7:70:74:30:8c:ce:26:93:
38:aa:98:d2:ea:62:72:fb:a0:38:04:c6:37:23:7d:
b8:29:59:1a:4d:2a:03:da:3d:e3:3b:1d:1c:66:7a:
2c:8a:fa:e5:02:98:cc:08:4a:2f:25:9d:b3:65:92:
cf:3d:f6:46:ec:ee:14:57:b6:e4:24:a4:95:9b:6b:
60:9b:07:ea:d2:e3:fe:c9:d6:ea:b5:5a:56:1b:47:
78:1c:78:53:05:9d:dc:60:b2:cc:40:dc:7e:52:df:
4a:32:ff:f4:3f:06:fd:19:72:9a:41:cd:ec:16:47:
65:1a:10:bb:62:99:e2:03:c1:1a:9c:06:51:73:2b:
22:46:24:f9:4d:19:3b:53:9b:03:73:dc:d6:ca:e9:
69:e5:a0:2a:86:ab:ab:e0:10:ad:6d:82:66:6d:3b:
76:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F3:45:47:39:AF:31:B8:2B:B8:38:7D:19:56:93:3E:CA:3D:67:26
X509v3 Authority Key Identifier:
keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ef:1b:7c:c0:0a:ff:6d:3b:e2:fb:26:78:ac:ca:ff:b7:66:
c1:4f:ff:d1:1d:d1:7d:c4:05:10:2d:5f:b9:d3:af:81:de:bc:
8c:f2:18:9a:bd:59:db:35:eb:1e:92:6b:a7:5e:43:b3:f6:e7:
06:e2:f2:ee:80:53:22:f2:0e:6b:4d:ec:2b:ba:e0:1c:65:2e:
7a:fb:e2:21:45:8b:81:2a:e4:f3:25:9d:e3:59:2d:80:fe:35:
c9:e9:9b:bf:fb:ef:6a:b4:4b:54:35:5f:5f:0e:19:d1:c9:8c:
52:83:86:f7:9d:71:93:06:d4:cc:6b:cb:d4:4e:7c:ff:16:9c:
2d:66:60:48:7a:8d:58:5c:5c:b1:42:f8:10:44:39:6a:69:0b:
94:54:e1:3d:b3:38:9b:66:b4:c4:fb:79:5a:09:bc:b7:ee:9e:
71:de:5f:a1:65:1a:dd:77:9d:b5:30:5b:ff:24:a1:f9:44:e9:
53:b3:fd:e5:29:ba:46:da:63:95:c9:0e:06:d8:66:95:d4:40:
8d:07:3d:6c:ba:bb:00:49:61:0e:18:59:47:2c:80:e7:fd:6a:
99:60:ed:5f:46:6e:67:6f:97:9c:0b:79:78:bf:a1:62:ae:86:
38:6b:2c:64:ab:4d:5b:48:e6:43:7e:c3:11:94:51:12:ca:2d:
d1:c1:3e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:58:25 2025 by rpki-client