Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File: 18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier: X7lhIBphcYrnnpesDPAPcbyLejTLPo+sYpaXAKLlXWI=
Subject key identifier: 7B:85:A4:F5:A3:DC:16:7D:F6:13:21:CC:45:68:32:3B:A9:4C:50:DF
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer: /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial: 019A4EF5E4DA18970C922B226215D024E367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:02:08 +0000
Manifest this update: Tue 04 Nov 2025 13:02:08 +0000
Manifest next update: Wed 05 Nov 2025 13:02:08 +0000
Files and hashes: 1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: GiKu3bXFHvagQULwxReC7aW9cVeHA+afu5AcEFVCDho=)
2: BLbhril53MDVDeifZO2SL2UKKFM.roa (hash: UsTWzBHrl9dfEtBG/7NjUZNeMJlhyin0Rp6YIFRWYAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e4:da:18:97:0c:92:2b:22:62:15:d0:24:e3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
Validity
Not Before: Nov 4 13:02:08 2025 GMT
Not After : Nov 5 13:02:08 2025 GMT
Subject: CN=7b85a4f5a3dc167df61321cc4568323ba94c50df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:09:c1:8f:60:67:70:42:a7:cb:da:05:80:45:
a7:49:c6:a8:e9:35:37:40:a0:b7:a5:8a:e5:c6:3a:
70:b2:4b:05:58:a0:23:64:d1:71:85:da:1f:20:1e:
40:c6:74:5b:d3:fa:f4:8c:d6:e6:ea:26:1c:df:dc:
74:11:8e:29:be:60:51:ef:27:bd:97:88:22:95:14:
34:b3:0c:22:81:12:b7:28:f0:1d:a0:cf:aa:0a:1e:
9d:7e:44:e9:c9:8b:17:c4:3d:30:09:86:ec:3a:5b:
74:c2:46:02:a6:18:3e:3a:0e:6c:f7:75:38:f0:ef:
8c:6f:af:a6:82:c2:aa:b9:2a:ac:88:86:14:08:17:
3e:6e:17:ac:fa:5d:d8:a7:69:91:56:f3:b4:62:d2:
b8:6f:fe:68:2c:c7:bc:43:ed:f8:f7:5f:fa:60:8d:
63:ed:9d:17:fb:64:1d:72:b3:fd:f6:55:c6:bc:98:
e5:67:db:f5:d7:17:c0:79:b4:d6:48:95:2c:c5:5a:
33:50:a6:ef:d8:c1:ec:6d:81:f8:df:f9:ad:14:29:
2a:1d:f1:74:28:be:0b:40:cd:47:b7:ac:7b:9d:4e:
83:71:27:0a:9a:fe:e9:00:74:00:cf:52:55:2e:66:
32:73:63:b4:16:95:73:f8:0a:8b:ae:ce:b8:c6:8e:
c5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:85:A4:F5:A3:DC:16:7D:F6:13:21:CC:45:68:32:3B:A9:4C:50:DF
X509v3 Authority Key Identifier:
keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ba:92:15:e9:3c:f8:66:1b:85:9d:fa:92:a2:18:4d:67:b0:
d0:f9:14:f2:74:54:0d:b5:14:91:f3:14:40:66:f3:9c:41:4c:
e4:39:31:a5:ed:49:d4:9f:82:23:4e:35:ec:6b:9f:60:f3:14:
34:68:e2:f4:c3:2d:4a:0a:de:95:c3:74:b6:8c:bb:77:56:a4:
5e:25:a0:3e:97:1a:a2:e1:2a:85:74:46:fb:8e:e7:01:6e:9c:
ba:83:e8:fe:77:a8:7b:f3:01:e5:67:3c:61:b4:fe:12:dd:c4:
ec:7d:c7:6b:fe:9f:b9:4a:74:56:3e:e7:ec:46:c7:7b:23:1c:
54:94:d3:a1:b3:21:38:ab:f1:96:66:b6:8f:cb:ac:e9:ee:fc:
c0:bf:a5:4e:79:23:a4:91:dc:3d:d3:4d:2c:91:73:a4:ec:10:
70:c4:e4:cf:07:3f:11:7e:4a:ee:34:14:7f:6b:3c:cf:05:14:
56:a6:2f:61:31:99:a4:4c:78:04:8e:dd:49:01:d0:1f:9a:0f:
a7:64:3f:a5:11:b1:bb:80:b2:b3:24:d2:a6:5f:e6:a8:58:24:
8a:d4:68:ff:92:5c:ea:fc:2b:03:95:8c:df:1c:a2:6e:af:9e:
ff:40:91:66:ff:74:f1:97:c8:c4:dc:cd:c6:fe:34:04:cc:3b:
d6:11:33:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:24 2025 by rpki-client