Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
File: _S0VJ2B9EYjp24DPFkmKQTggDNw.mft (raw, json)
Hash identifier: 7f3zlT3X9Fq7xLsYW3w4qyOKGC/5ahmEUGnIEQqf+9s=
Subject key identifier: 97:6F:57:1C:7E:2C:A4:13:5C:0F:8C:15:D5:C2:F0:E4:6C:B7:DA:52
Authority key identifier: FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
Certificate issuer: /CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Certificate serial: 019A4FD026489DB2570CCB1496987DDABDF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 17:00:32 +0000
Manifest this update: Tue 04 Nov 2025 17:00:32 +0000
Manifest next update: Wed 05 Nov 2025 17:00:32 +0000
Files and hashes: 1: _S0VJ2B9EYjp24DPFkmKQTggDNw.crl (hash: hlrV56UaL1KjJMB/OO+NJLkMrcCpOMmCYeZyZAkYE2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:26:48:9d:b2:57:0c:cb:14:96:98:7d:da:bd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Validity
Not Before: Nov 4 17:00:32 2025 GMT
Not After : Nov 5 17:00:32 2025 GMT
Subject: CN=976f571c7e2ca4135c0f8c15d5c2f0e46cb7da52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9a:ca:1e:ed:84:ab:be:cf:f7:2d:30:f6:22:
7a:6a:ff:7b:b9:96:72:c3:f5:e3:21:df:3c:cd:29:
13:60:d6:b2:2a:c7:da:94:c2:d3:75:d3:e1:2d:fd:
55:4b:b0:c2:a1:7f:ad:62:b4:a4:26:ce:a0:2a:e6:
b1:b2:f4:d9:d2:fa:05:24:30:31:e6:86:ad:78:e9:
80:59:f3:c6:95:c6:33:8d:9d:1b:c7:c3:b9:90:29:
b0:77:aa:18:9d:6c:d0:81:49:2d:d9:73:42:27:9b:
fd:54:ad:29:cd:5f:a8:44:a0:8f:05:6f:16:26:8f:
bb:61:52:32:20:03:9f:a2:52:26:cb:4f:8f:71:cb:
db:fd:4f:e2:a8:ce:88:d3:ec:77:21:d7:fd:a9:e4:
d0:66:32:04:b2:69:60:2d:2f:ec:33:22:c2:46:4e:
f9:2e:8f:04:ee:bf:85:85:c9:ab:26:30:cb:d1:02:
d5:62:53:b5:33:7d:72:e8:1b:3f:39:03:55:e7:75:
7a:28:11:72:71:07:90:a2:66:8e:a0:06:39:3f:01:
40:d7:8a:45:e1:de:a4:84:45:33:c9:98:3e:96:68:
42:27:47:cb:27:04:97:3e:23:24:ee:a7:a5:90:18:
80:57:0b:d4:fd:b5:52:19:d7:78:77:26:4e:4e:e6:
c4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6F:57:1C:7E:2C:A4:13:5C:0F:8C:15:D5:C2:F0:E4:6C:B7:DA:52
X509v3 Authority Key Identifier:
keyid:FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d6:b5:4c:be:70:06:1d:3c:18:72:2b:2c:c2:c7:4e:e5:ad:
eb:c9:4c:03:91:eb:3e:7d:b8:a2:ff:99:8c:07:5e:d2:c0:c6:
8a:f0:85:b6:35:0a:e1:82:7f:7a:68:d8:e5:e2:f2:e2:3e:85:
a6:57:25:f6:08:a1:83:1e:3e:b2:97:13:05:71:02:dc:81:bb:
a4:1f:c4:4b:fe:89:9a:5f:eb:4a:b8:f8:b3:0f:c7:b2:5d:b1:
54:71:6d:b9:29:e2:2a:85:d6:a7:15:a2:33:42:e9:ef:1e:97:
fb:f0:ef:f9:cd:da:39:ef:eb:d1:38:13:ab:d1:d2:cd:26:9b:
76:d7:95:45:5d:84:61:20:4c:0d:e2:61:f9:94:33:48:2e:2c:
95:69:0e:fe:ed:a8:ea:b8:51:4e:fe:3b:b5:1f:09:ce:a8:1f:
63:76:45:90:f8:8b:6b:49:74:be:85:0b:7a:88:19:9e:a7:e1:
0f:de:df:85:13:1c:39:bf:b6:24:f2:cb:75:24:f4:8d:1a:fc:
c4:6a:5e:af:b0:f0:d2:a2:9c:4e:12:0e:f0:23:de:35:92:09:
9d:16:15:8c:27:a8:fa:9d:66:e8:c1:1b:36:8b:a7:c9:f2:21:
8f:ed:1f:03:8d:f9:ff:d8:2c:7b:b2:cb:33:bd:2e:63:b6:d5:
e1:ed:f2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:16:43 2025 by rpki-client