
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
File: F2clVphEFbeOnRVGF4TIxOaR0BA.mft (raw, json)
Hash identifier: Mm6DUDUoUjEe+7ElG+Bydl+Dv30RiOv4v6gN9ekQ39Q=
Subject key identifier: 8D:10:4F:C0:E9:30:08:F3:A5:10:33:17:D5:8F:15:1E:24:9E:67:E2
Authority key identifier: 17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
Certificate issuer: /CN=17672556984415b78e9d15461784c8c4e691d010
Certificate serial: 01987E6627F425418B3F2F78E4835ED62C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
Manifest number: 14B4
Signing time: Wed 06 Aug 2025 08:01:20 +0000
Manifest this update: Wed 06 Aug 2025 08:01:20 +0000
Manifest next update: Thu 07 Aug 2025 08:01:20 +0000
Files and hashes: 1: F2clVphEFbeOnRVGF4TIxOaR0BA.crl (hash: bw3o/DrX6VC+NlASY5Cv2GlHA/yWXyMdfRQvieqx1yc=)
2: uO9dPxlx5kbryFMIrW1wZfHfrqc.roa (hash: NrkTIYE8RmX0UUZREQe1a/gFtR2Be/h3baezRNBfbZg=)
3: vMfYAVSQ4CaJ9hqOmmUhZmVM_Xc.roa (hash: HKXHwGN9LbH+lPLcsRDtqfOhE6nZDez5q/T7yrcmTHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:27:f4:25:41:8b:3f:2f:78:e4:83:5e:d6:2c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17672556984415b78e9d15461784c8c4e691d010
Validity
Not Before: Aug 6 08:01:20 2025 GMT
Not After : Aug 7 08:01:20 2025 GMT
Subject: CN=8d104fc0e93008f3a5103317d58f151e249e67e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:95:47:1c:bc:42:58:d9:4f:6b:6f:47:e4:
a1:d2:3e:19:90:6c:8c:27:c0:10:b2:ec:fa:e9:99:
8b:f1:dc:47:c7:ba:6e:2b:10:b6:4f:fb:58:ab:53:
c4:66:20:15:36:fe:e4:22:bb:1d:fa:22:4c:8f:10:
8a:c7:93:02:d5:36:f5:88:6a:f6:5e:2d:47:8c:3d:
0b:8d:e7:a2:f3:84:94:73:a1:e4:ff:c9:12:e8:43:
f6:d5:38:da:0c:47:29:37:d3:f8:d1:ce:a2:f3:72:
cf:55:4d:04:c4:35:0c:39:29:90:af:64:cf:55:53:
47:04:25:d4:93:2a:55:30:f8:bf:91:db:da:b8:4f:
51:ea:f5:74:94:c4:b8:dd:a7:c2:7c:b5:32:47:71:
87:19:84:4a:b8:19:38:cc:b7:db:b8:44:2e:c7:78:
b4:3a:a4:70:85:08:0e:31:e5:e0:40:7d:7c:a7:41:
ec:94:c2:a0:ac:21:a8:18:c1:ed:a4:89:a9:e9:41:
9a:72:4b:37:d1:e4:e6:be:08:b4:65:26:04:19:56:
36:15:51:bd:4a:01:82:13:68:15:23:c5:d4:0f:cb:
24:93:0b:88:b6:38:35:2b:37:73:d0:d8:9a:16:9c:
29:6d:95:c9:bc:bf:0f:8c:b4:ca:91:84:03:42:80:
f8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:10:4F:C0:E9:30:08:F3:A5:10:33:17:D5:8F:15:1E:24:9E:67:E2
X509v3 Authority Key Identifier:
keyid:17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:95:c0:e9:68:ef:c1:56:73:6f:4c:f2:74:6f:b1:81:90:2b:
a6:6b:09:e0:f2:38:77:e5:19:d5:e1:55:69:c0:bc:aa:eb:ac:
0b:08:2a:89:71:ed:92:5d:35:13:59:2f:18:8a:2b:47:de:cf:
9d:0f:1d:12:c6:60:2c:21:83:b0:a4:fe:4a:80:23:31:fe:e9:
fc:2a:45:ed:3a:e6:15:44:cf:ae:ee:41:91:bb:76:00:30:3c:
77:fe:a2:2d:ca:e7:1a:13:93:7f:f2:7d:fd:f2:93:f8:b9:b1:
ef:51:d7:96:f2:bd:2d:d2:a1:96:a4:6d:1a:cd:c7:b3:84:80:
46:7f:44:74:9c:f8:c1:0d:22:be:8c:8e:94:95:7f:90:b2:f4:
e5:0f:bd:1b:fb:aa:f3:0f:55:e9:bb:d3:9e:35:62:47:fb:26:
c5:05:a7:e9:72:db:d2:69:39:d8:01:54:57:5f:9c:39:8a:f3:
da:08:17:6a:77:78:c9:7a:aa:39:f9:54:b8:45:99:04:f8:48:
3e:a1:3a:6a:aa:02:02:f2:6a:28:ec:d7:5a:b3:e7:e2:c4:fa:
b1:9a:4e:f5:9c:3f:06:c1:20:b6:b0:21:e6:2c:1f:a1:5a:65:
20:b8:67:2b:8b:b7:37:a1:f4:4d:3a:4e:2a:dc:25:08:24:24:
20:5c:1c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:28:06 2025 by rpki-client