Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File: 18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier: 31XWVEqYpXCmNzh+r27cqQyfrGwryyO3UyGu2eFts6o=
Subject key identifier: 72:11:FF:FC:D0:21:F3:10:1A:5D:96:10:73:38:DC:8C:6E:E8:F9:15
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer: /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial: 0198A04CF921822A1CDB982C9293AAF506E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number: 162C
Signing time: Tue 12 Aug 2025 22:00:55 +0000
Manifest this update: Tue 12 Aug 2025 22:00:55 +0000
Manifest next update: Wed 13 Aug 2025 22:00:55 +0000
Files and hashes: 1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: pHBeWpl2qobfkK2e7czgug7D+iTVZXhajbo46lY5Rw0=)
2: BLbhril53MDVDeifZO2SL2UKKFM.roa (hash: UsTWzBHrl9dfEtBG/7NjUZNeMJlhyin0Rp6YIFRWYAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4c:f9:21:82:2a:1c:db:98:2c:92:93:aa:f5:06:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
Validity
Not Before: Aug 12 22:00:55 2025 GMT
Not After : Aug 13 22:00:55 2025 GMT
Subject: CN=7211fffcd021f3101a5d96107338dc8c6ee8f915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:a6:5c:44:62:7c:dc:0d:5e:95:26:64:d5:
4a:6b:9f:dc:c7:b7:2d:41:50:85:8a:35:79:02:5e:
26:9b:78:54:e2:ef:76:c0:f1:10:ac:26:75:dc:0a:
8e:7a:6a:5c:65:99:2c:cd:ca:7d:7d:17:a8:11:81:
9a:89:6a:48:49:b9:e1:7b:fc:d3:45:28:e5:c9:30:
e6:b0:a8:a5:d3:72:f7:90:5c:cd:45:12:a6:3a:9d:
69:42:1d:be:f8:1e:57:4b:7e:2f:61:bb:82:a0:8e:
34:14:94:7e:ee:40:e5:b8:3a:df:64:ae:b1:6a:fd:
d2:6c:81:5c:c0:4b:9c:f5:88:4e:26:69:09:97:4b:
d9:77:0d:9d:1a:24:7a:af:b7:5e:42:75:c7:8f:d2:
a4:70:36:81:1e:d0:36:98:3f:67:00:56:1e:d0:de:
ff:93:d2:c1:84:e7:5a:2e:50:40:2d:45:7c:c3:09:
86:5b:0d:c9:26:04:f4:44:4a:b1:3c:36:73:53:60:
a5:c3:d1:41:06:d9:58:56:30:97:2a:2f:46:52:7d:
e3:17:30:95:0a:4c:d3:94:02:c0:13:85:64:6b:62:
e7:b5:85:d0:59:4f:8d:43:1e:3f:70:ed:97:27:6f:
55:79:a3:fa:6e:3c:b0:bb:ab:1f:63:55:6d:fa:71:
1a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:11:FF:FC:D0:21:F3:10:1A:5D:96:10:73:38:DC:8C:6E:E8:F9:15
X509v3 Authority Key Identifier:
keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:12:b8:d4:d4:f6:dd:3e:54:62:d1:6c:69:95:88:19:b0:3c:
41:47:f2:2f:e6:61:75:96:f9:b2:b6:79:03:2a:a3:c0:d0:be:
3d:3d:ee:5e:97:6e:26:eb:09:61:aa:e0:b0:24:92:c5:6c:8c:
0e:c6:50:d3:1a:85:89:45:fa:d5:4a:ea:d0:4f:de:61:e0:60:
62:bd:a6:84:ae:3e:d8:f4:83:ac:03:31:80:05:27:e2:c8:25:
79:e0:ae:ca:61:65:96:e3:94:8b:b5:dc:1c:3c:0f:90:7c:22:
f4:6d:c5:b8:19:45:28:4f:d8:ad:c3:58:7d:72:fd:cb:81:24:
2b:59:2d:55:70:07:d5:39:c5:d4:cd:4c:48:b9:95:09:fd:e8:
b0:9c:5d:c4:ae:15:2d:53:e8:f9:44:a0:30:8d:bb:bf:9a:92:
fe:6c:49:ba:e0:37:ee:3f:f6:fd:f9:40:8b:0b:76:d5:12:99:
eb:0c:84:92:48:0e:4d:5d:dd:c8:ca:91:88:64:2f:f7:90:f8:
5c:1e:b6:01:26:13:cf:11:f6:53:d7:90:3c:e2:9b:bd:7d:de:
dd:44:f2:27:8d:2e:0d:f5:8f:4d:95:2b:79:68:f0:08:5f:e9:
88:7e:c7:39:5d:88:e6:9a:f5:05:fe:61:64:79:6c:60:20:74:
9d:11:d3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:27:41 2025 by rpki-client