Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: PVkI14SR9dcfwT4hyHAV3ht3N0c5y/pA0SNNzU8vNg0=
Subject key identifier: AE:BA:89:95:D5:42:20:64:1F:B4:9F:F8:80:C8:AE:62:9C:BF:80:24
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 0198903526DB87A99B5ADC99D01A52478564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 19:00:59 +0000
Manifest this update: Sat 09 Aug 2025 19:00:59 +0000
Manifest next update: Sun 10 Aug 2025 19:00:59 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: /vu6+tgZ1gk42O0F6hNTjOd0oG2aCacd7fl/56yWA+Y=)
2: ghOgZScInzU-k80H-uXo6Z44fh4.roa (hash: lvvfvqGDTHXluMikuB2xTzxX/lcqRvi6zFraBkTfrlc=)
3: y-KKayWDkSAQJ7WHnrYBMGYeW7s.roa (hash: eQq4AAV0PFKKGDw6XQHABkksm4Mts0DM9GmL48be7Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:35:26:db:87:a9:9b:5a:dc:99:d0:1a:52:47:85:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Aug 9 19:00:59 2025 GMT
Not After : Aug 10 19:00:59 2025 GMT
Subject: CN=aeba8995d54220641fb49ff880c8ae629cbf8024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:54:b9:5e:62:58:1b:bd:55:b7:5c:69:cb:e9:
fc:ea:d2:41:cf:c4:81:66:ff:f0:c5:28:8c:fa:f4:
3a:da:73:96:3e:f2:8f:c4:47:b1:74:c1:70:68:5d:
ee:e0:6d:27:cf:5d:ae:10:73:6d:5f:3d:20:fd:41:
9d:7c:dc:2e:a2:2c:1a:ca:e1:ee:ab:4f:b1:2e:2f:
82:cc:46:c8:d7:13:16:06:ff:5b:cd:08:dc:2b:bb:
59:fd:5e:9b:02:4b:85:54:63:87:82:1b:a8:bb:6a:
54:67:51:09:90:12:cd:71:e8:37:4a:e6:db:ff:72:
a2:7d:65:83:7d:92:c9:fd:cc:95:6f:31:f7:13:3e:
64:1a:95:09:e1:1c:7c:60:0d:bb:72:3d:4f:ea:0d:
a2:e0:16:32:d9:e8:c0:5f:87:c8:ff:07:39:a0:30:
8d:bb:43:b3:1e:be:32:c7:13:9d:bc:8d:17:6d:47:
c7:b4:40:f2:95:db:42:44:01:7c:68:b1:73:7f:d9:
86:6c:83:4e:8e:02:17:ea:dc:8a:bb:e0:93:ba:ed:
22:84:9b:1a:96:b7:0e:77:a1:63:01:de:ef:92:e7:
fd:a9:9d:01:f9:29:e6:0d:a8:34:4c:32:f4:4d:8d:
23:f1:a7:cf:68:1a:fa:f2:d1:1c:3e:30:f6:5f:4a:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BA:89:95:D5:42:20:64:1F:B4:9F:F8:80:C8:AE:62:9C:BF:80:24
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8d:39:0e:c1:8f:d4:f5:d5:fc:ba:fd:b2:b1:82:d6:f9:ca:
4b:73:90:a9:3b:e5:6d:c6:93:51:27:78:04:a9:64:1f:95:98:
8e:ab:34:3e:6b:92:2d:ba:90:19:ff:e3:10:d4:91:de:79:54:
c3:a7:b8:70:3b:ab:98:81:85:ff:d6:fb:41:e8:ee:1a:14:da:
80:66:e1:0b:d3:f3:58:3e:e4:80:bf:bc:0d:02:98:bb:70:08:
62:a6:da:f2:54:43:0c:66:df:51:e3:4c:a1:ec:ea:0f:33:b7:
7e:6b:b5:2a:21:fb:0f:ff:b5:c3:ac:d1:90:6f:2c:70:30:26:
23:44:44:3e:bb:9d:a7:cf:f5:2e:a0:3b:30:93:37:be:31:48:
6b:d1:1b:e8:c2:b2:9d:a9:70:99:a9:49:08:87:3c:94:24:c1:
2f:47:1f:ee:b4:ba:0c:d2:23:4b:8c:b2:de:6e:1d:43:47:46:
90:dd:93:be:14:ae:e7:41:a7:57:47:ac:cc:e5:41:15:83:59:
e0:b0:ed:e4:e4:e5:f5:10:36:d1:b5:af:ff:44:dc:44:33:4d:
00:a6:9c:37:a4:70:67:13:49:3b:4f:a8:d9:6a:1d:c2:b9:e1:
c4:ff:89:05:58:59:72:dc:1a:7e:1d:ed:33:13:4c:28:8b:00:
f8:cb:41:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:48:00 2025 by rpki-client