Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: Lnbqmu8NXGpWNOyzm7QDftIY4MtsCtrHgaueIsXSuuA=
Subject key identifier: 15:F5:82:F4:6E:81:2A:17:59:83:55:2D:57:BD:01:80:7F:57:B9:AD
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 019A503E238D33CBC9A9E10BACAD58CFA243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:40 +0000
Manifest this update: Tue 04 Nov 2025 19:00:40 +0000
Manifest next update: Wed 05 Nov 2025 19:00:40 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: rYXL77OAMYlUYUszagxXHhctzIhnap8j3PH0hjMjeTY=)
2: ghOgZScInzU-k80H-uXo6Z44fh4.roa (hash: lvvfvqGDTHXluMikuB2xTzxX/lcqRvi6zFraBkTfrlc=)
3: y-KKayWDkSAQJ7WHnrYBMGYeW7s.roa (hash: eQq4AAV0PFKKGDw6XQHABkksm4Mts0DM9GmL48be7Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:23:8d:33:cb:c9:a9:e1:0b:ac:ad:58:cf:a2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Nov 4 19:00:40 2025 GMT
Not After : Nov 5 19:00:40 2025 GMT
Subject: CN=15f582f46e812a175983552d57bd01807f57b9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e5:3d:fd:e1:04:68:ec:c6:10:09:65:30:6a:
32:7b:3d:d2:ae:d8:83:0e:b7:ac:c4:46:f5:f9:48:
ad:7b:df:63:ed:19:21:19:68:b9:90:cc:ad:f8:15:
79:f6:9b:d5:eb:54:70:03:65:db:40:b2:6b:ff:8a:
ba:b3:3f:14:8b:20:d7:79:4e:23:f5:dc:23:39:4c:
e2:be:75:3e:30:9b:7c:85:fc:17:bb:24:03:1e:7c:
03:38:69:bc:4a:01:61:73:8f:b8:ce:15:ee:bd:ac:
d0:7f:f7:bb:d9:aa:75:ad:79:02:e9:50:57:33:14:
43:05:9c:d5:f0:c6:63:c1:08:1e:fc:99:47:a6:dd:
ed:e9:d6:7e:15:d5:ac:5f:60:3b:b4:24:2c:d7:34:
74:6a:11:88:b9:bd:a8:4d:eb:b1:75:8e:18:1b:d5:
fc:15:80:74:b4:4b:5a:72:46:c4:5c:08:e3:39:29:
24:f8:28:d8:18:6a:5f:f9:52:bc:56:ee:da:b5:be:
d2:38:54:2a:e4:a4:9b:78:18:28:fb:19:55:3e:6a:
ec:52:3a:a4:e8:27:7a:f8:a1:30:25:64:d3:b2:ac:
e2:8c:98:6c:83:f1:44:c3:13:12:e1:37:b2:de:44:
5b:b6:1b:6f:41:18:8e:01:4c:a3:84:35:7c:61:d2:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F5:82:F4:6E:81:2A:17:59:83:55:2D:57:BD:01:80:7F:57:B9:AD
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e9:39:e4:85:bc:7a:96:80:38:7c:a0:ab:d0:9e:a2:40:82:
1a:d9:8c:18:a3:3e:e7:63:a5:1b:37:b3:62:d0:57:56:9b:cb:
d2:ee:20:cc:14:3f:4b:ae:e1:32:64:dd:fb:6b:7d:89:56:4b:
56:13:58:44:29:e4:c2:6f:70:34:0f:7e:a7:31:d3:f6:f2:46:
58:3c:dc:37:ea:ce:64:4f:f4:06:15:db:0b:8c:e9:c9:bd:73:
1f:31:5e:e5:90:2b:2e:62:08:84:60:2c:2b:96:1f:a6:37:58:
f3:45:0b:75:5e:b7:26:65:21:db:62:05:d3:6e:1c:4e:3d:cc:
64:be:87:ee:b0:d3:fe:be:c3:2c:24:3c:48:cc:5e:6c:53:5b:
77:ac:24:2a:57:83:ed:d6:d6:24:d4:bc:93:96:b9:2d:5d:a1:
b7:80:3d:b6:c8:59:5b:6b:66:25:9b:13:3a:c1:0a:91:c7:f3:
47:71:3b:5a:a3:45:25:27:3e:4d:8f:e2:f8:fb:04:5d:c9:ef:
fd:d0:44:2b:e3:07:b1:50:0b:42:a4:fd:94:92:8b:b4:3e:1d:
3f:7c:99:80:f2:ba:99:5f:d9:2e:3f:63:42:34:db:4e:e0:3b:
b2:66:4d:28:26:bc:9d:e1:a4:fe:a1:42:34:71:d5:17:e6:bb:
ab:a5:14:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:54 2025 by rpki-client