Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
File: _iFRDnSlthGog2amTtL7jmAVQpM.mft (raw, json)
Hash identifier: NpHFgfHw8SRYABArN/EN+ojTykvVFeQSJ6JzV25aWD8=
Subject key identifier: 88:15:BE:F7:F5:DB:23:0C:2C:9F:34:80:8E:F0:39:EC:7F:26:35:B0
Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
Certificate issuer: /CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Certificate serial: 019A4E4F651E271538E9C00A344554740918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 10:00:17 +0000
Manifest this update: Tue 04 Nov 2025 10:00:17 +0000
Manifest next update: Wed 05 Nov 2025 10:00:17 +0000
Files and hashes: 1: _iFRDnSlthGog2amTtL7jmAVQpM.crl (hash: zIbpWlC28d/oMGydWlAXBt7SFazJJJ2ISK+i8eEFhkE=)
2: pA-X0SaB0DP88NQK6S16CRpbIws.roa (hash: /lnCuMiAMJ5HoCTByF87eDA744xmzbWJMwOSkdeAHzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:65:1e:27:15:38:e9:c0:0a:34:45:54:74:09:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Validity
Not Before: Nov 4 10:00:17 2025 GMT
Not After : Nov 5 10:00:17 2025 GMT
Subject: CN=8815bef7f5db230c2c9f34808ef039ec7f2635b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:74:fc:e7:58:3f:d0:4f:f0:df:dd:13:ea:
2f:8d:70:f6:f3:86:4f:f4:a8:a9:a5:98:cd:27:92:
d5:9a:9c:b9:7f:91:5a:a1:64:ff:6d:27:30:e6:78:
94:d0:33:ef:7d:e0:76:a4:88:c9:ee:44:56:04:6b:
30:36:5d:29:76:dd:ab:0f:1b:2f:40:4f:1a:7a:bc:
50:8b:62:cc:ab:36:8e:14:2d:7b:ec:21:5a:c6:0d:
81:14:b2:4c:fa:a0:c3:03:e5:78:d7:47:08:66:99:
e1:0f:06:5d:3f:7d:a1:73:e3:ce:43:01:ce:3d:80:
0d:1e:f3:f5:d9:c0:05:92:b9:79:11:f0:10:90:dc:
21:4a:04:e6:fb:54:76:e4:16:56:35:b1:ea:14:d9:
90:a4:42:4b:ef:17:bf:5b:6b:03:41:d0:6f:9d:7d:
86:e0:ae:62:6b:e9:1b:4f:da:3c:0d:d8:6f:0a:15:
59:0b:f1:17:39:a2:5f:8d:43:ac:64:3d:5d:1d:b0:
b3:d2:0c:ae:81:46:bf:b6:8a:9e:e2:0a:e7:93:41:
16:c6:ac:a9:60:ea:c1:43:ea:fb:94:5b:55:fa:96:
6a:d1:b1:61:b8:60:e0:a6:d2:ea:d1:d6:7f:d9:bf:
dc:30:82:18:12:81:63:c3:d6:d5:7c:c4:49:ff:dc:
ec:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:15:BE:F7:F5:DB:23:0C:2C:9F:34:80:8E:F0:39:EC:7F:26:35:B0
X509v3 Authority Key Identifier:
keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:06:64:03:04:0f:c8:66:04:e9:99:c7:11:82:91:cd:d3:23:
34:00:06:cf:2b:91:10:8c:91:b6:01:cf:22:7e:67:a9:96:59:
9e:0c:56:ae:56:db:2e:23:11:bf:24:24:b8:5a:57:df:2c:72:
5e:20:b8:05:3a:7f:31:28:cb:b7:a6:f3:f1:0d:3f:ef:2a:cf:
a4:20:88:75:b2:5f:07:bc:5d:2c:2a:d9:e2:05:5d:de:b0:c6:
8f:b2:9e:37:02:4d:cb:38:97:9b:0c:5a:3f:f2:9c:a7:e6:30:
c5:61:bc:bb:ae:43:8d:93:a0:07:81:11:44:c3:6c:ef:84:ab:
40:aa:fc:39:ff:c7:41:cc:6b:cb:ad:d2:f2:8d:56:44:97:26:
d5:3b:5a:0b:7b:aa:10:35:dd:80:fb:c1:cb:4b:b6:d3:52:c8:
79:64:3f:2a:56:b0:cd:c9:93:66:73:84:c6:6d:55:9c:a0:5c:
a1:d7:fe:3d:8a:ef:2a:a6:ad:d4:6b:9e:42:0d:6b:6f:12:cc:
20:6e:9d:93:41:ca:2c:40:de:fa:39:6b:21:52:a9:a5:c5:1a:
30:01:c8:e1:48:7d:08:5e:c5:90:90:e5:82:ac:1d:35:fc:36:
d0:9e:9f:ef:73:25:be:58:5d:35:db:36:08:63:b6:9b:df:2d:
d3:39:9d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:18 2025 by rpki-client