Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
File: F2clVphEFbeOnRVGF4TIxOaR0BA.mft (raw, json)
Hash identifier: PAaaLGglHtRM/d2BsNetv4uyDj1B6ga60QGcMhXbt30=
Subject key identifier: 5A:6F:E6:A0:F8:22:5C:8B:EB:55:DA:4B:3A:CB:20:73:FC:4C:9A:91
Authority key identifier: 17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
Certificate issuer: /CN=17672556984415b78e9d15461784c8c4e691d010
Certificate serial: 019A4DE23902CFE883A17D995C8493859187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
Manifest number: 15A4
Signing time: Tue 04 Nov 2025 08:01:02 +0000
Manifest this update: Tue 04 Nov 2025 08:01:02 +0000
Manifest next update: Wed 05 Nov 2025 08:01:02 +0000
Files and hashes: 1: F2clVphEFbeOnRVGF4TIxOaR0BA.crl (hash: U55AK8FJKO8bt17gwQsRFoz5xLK6KBWaRTuuihnu3d4=)
2: uO9dPxlx5kbryFMIrW1wZfHfrqc.roa (hash: NrkTIYE8RmX0UUZREQe1a/gFtR2Be/h3baezRNBfbZg=)
3: vMfYAVSQ4CaJ9hqOmmUhZmVM_Xc.roa (hash: HKXHwGN9LbH+lPLcsRDtqfOhE6nZDez5q/T7yrcmTHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:39:02:cf:e8:83:a1:7d:99:5c:84:93:85:91:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17672556984415b78e9d15461784c8c4e691d010
Validity
Not Before: Nov 4 08:01:02 2025 GMT
Not After : Nov 5 08:01:02 2025 GMT
Subject: CN=5a6fe6a0f8225c8beb55da4b3acb2073fc4c9a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:c1:81:da:a7:64:4b:9f:9b:76:07:e9:ca:
b3:4b:25:76:bb:89:ec:10:a2:2c:3c:8d:b4:2b:7f:
f5:ab:fc:fa:74:b1:9d:d5:76:86:5f:66:09:45:f8:
af:23:6e:32:1b:d5:a2:b2:0a:4f:e4:d7:1e:e1:28:
b4:2a:11:4b:77:cf:3b:8d:0a:76:55:9d:42:b1:7e:
6e:8a:33:a3:d1:a9:79:a2:76:8d:19:88:64:78:d4:
8b:96:f4:38:cd:08:cb:e0:46:87:fb:a4:d3:db:a0:
d4:ee:72:54:b9:f6:33:f4:85:8e:74:e8:cd:03:f3:
37:be:15:d8:01:97:8f:a8:1e:74:87:75:50:15:1e:
64:f5:32:36:60:8c:b4:26:43:5c:34:6b:28:d2:cc:
8c:ee:cb:79:75:ae:40:78:07:17:a3:4f:bb:12:39:
12:d3:a0:e4:ac:77:ed:57:12:03:07:53:6d:f5:a2:
05:1b:66:e3:6e:ec:70:b5:01:53:3a:12:ae:8f:59:
cf:83:56:59:6b:82:a4:ea:50:e1:53:6c:f8:ca:d4:
0a:3c:03:12:57:2a:09:21:a8:a2:d7:83:af:fb:d3:
b8:91:f1:ee:f9:a3:f2:5f:ab:5b:82:21:a5:2c:a9:
c7:bb:f6:04:ea:95:c4:cb:5d:d7:75:83:34:8c:74:
ed:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6F:E6:A0:F8:22:5C:8B:EB:55:DA:4B:3A:CB:20:73:FC:4C:9A:91
X509v3 Authority Key Identifier:
keyid:17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2f:33:d3:b0:6d:bb:0a:db:8a:e3:b5:0d:fa:f4:57:34:39:
96:66:d7:70:2c:fe:6b:fe:93:c4:72:95:03:ef:8a:8d:d1:ee:
32:3d:c5:3d:2f:1f:0a:93:ca:25:41:16:65:d6:95:c7:c6:5c:
7d:de:88:6a:9a:dd:d1:5e:51:e8:1a:d9:d6:0a:b8:31:9f:28:
da:5e:5f:13:04:59:2c:0a:7d:d7:6b:7b:e5:51:74:9a:72:77:
71:9f:39:08:d4:a4:c6:c9:38:be:00:3f:a5:56:ec:67:6b:9a:
bf:f9:3a:6b:c1:bc:e8:56:5f:f8:e2:d7:42:b8:c1:d6:48:2f:
ab:1c:f7:43:0d:3a:39:3a:45:91:39:6f:af:c1:f2:81:0b:49:
d3:f8:6a:81:60:74:2c:b0:ac:46:2e:83:19:fa:81:e0:e4:fa:
cd:45:61:91:1f:cb:c5:b5:40:36:52:77:67:db:0b:67:1f:03:
ba:48:a1:82:11:0c:8e:e4:af:e6:5c:17:33:e7:1a:c3:8c:64:
9c:fa:0a:88:89:1b:f7:21:ea:c0:ce:85:2b:f6:1a:10:22:50:
f4:45:5d:3e:6d:da:45:fe:ef:4b:4e:51:e4:04:f1:05:57:1a:
6c:18:4c:f9:11:6c:f8:96:49:a6:65:2b:1e:53:78:c0:d5:e8:
b3:e0:23:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:21 2025 by rpki-client