
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
File: F1EkoXuHIV95IFzRSG9hg5z55vg.mft (raw, json)
Hash identifier: NsGKkD6sGHVk4D9vYn/nwGObUnwDpTHT3LwRofE2osQ=
Subject key identifier: C8:3F:9A:6D:79:67:64:99:ED:99:23:07:AF:5E:EF:2F:8E:0C:71:9B
Authority key identifier: 17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8
Certificate issuer: /CN=175124a17b87215f79205cd1486f61839cf9e6f8
Certificate serial: 01989335AD8989DC39103662687EDA4AE92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
Manifest number: 1234
Signing time: Sun 10 Aug 2025 09:00:25 +0000
Manifest this update: Sun 10 Aug 2025 09:00:25 +0000
Manifest next update: Mon 11 Aug 2025 09:00:25 +0000
Files and hashes: 1: DMobrwEvAlt4_akaIi-0Lc6dPts.roa (hash: eRMFGBbat7fpcfp5RVndmvhD7W3VWXwnUQLezxfywoU=)
2: F1EkoXuHIV95IFzRSG9hg5z55vg.crl (hash: 2G6U9ZXvjpO+Qe9eacGQZQ2a3sLY8BzuXxgDvW+G5hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:35:ad:89:89:dc:39:10:36:62:68:7e:da:4a:e9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175124a17b87215f79205cd1486f61839cf9e6f8
Validity
Not Before: Aug 10 09:00:25 2025 GMT
Not After : Aug 11 09:00:25 2025 GMT
Subject: CN=c83f9a6d79676499ed992307af5eef2f8e0c719b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:8a:8a:a1:6a:3d:a4:c3:58:75:b0:d6:33:
3f:0b:df:b3:35:73:9b:69:09:10:9f:c5:52:ec:22:
ab:d4:ad:f7:a7:45:98:56:a6:88:a4:bb:52:29:b7:
6e:07:76:05:37:da:b7:62:77:47:c9:12:71:fc:37:
55:73:38:69:f5:40:fc:9f:08:81:35:c9:f0:49:da:
a4:c0:de:6b:04:d6:19:df:3c:27:50:57:b4:bb:35:
57:99:19:70:ea:ef:73:67:32:d3:47:f1:b9:cd:37:
cf:eb:4f:6d:66:07:99:66:4d:f7:89:aa:11:65:5a:
b1:6c:61:84:97:ae:b8:a6:d0:b4:fe:40:94:57:db:
f5:45:5e:ef:c7:74:a9:31:fa:90:95:2d:09:09:bc:
27:6d:3c:cb:ee:67:95:34:35:87:72:df:74:10:09:
30:40:dc:14:b6:58:79:eb:63:97:e7:d6:ea:f4:6a:
2e:dc:6b:6c:a9:09:7d:ad:73:1b:60:ef:27:ac:ed:
8b:97:d8:98:10:75:b4:bb:16:30:5e:de:26:1b:91:
31:53:3a:f5:c7:82:10:00:bb:35:cf:6a:54:7d:8a:
87:46:01:6c:b2:89:07:03:7a:9e:c1:91:6d:f9:ac:
9d:1c:55:6b:cd:c5:5f:b7:3e:51:df:90:6a:f8:68:
72:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3F:9A:6D:79:67:64:99:ED:99:23:07:AF:5E:EF:2F:8E:0C:71:9B
X509v3 Authority Key Identifier:
keyid:17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7b:2e:fa:ff:a1:e6:3e:6a:9e:97:ab:b5:fc:b3:8c:f2:da:
97:6b:51:17:c2:fa:50:78:27:6f:09:f1:6e:d6:cf:f9:ee:79:
b5:78:51:27:e7:ef:71:12:a1:ea:38:2b:7f:82:be:07:04:21:
5a:47:de:72:85:ba:ee:7b:b0:c8:ab:97:56:d6:50:cd:bd:48:
1b:1d:36:04:04:0a:1a:86:5f:f8:5a:ae:6d:cd:37:b3:73:fb:
59:1d:b5:7f:b8:47:a3:9a:c8:53:ea:de:1b:e5:7e:9e:95:04:
18:c4:eb:9f:a6:9b:19:b1:58:c0:ea:6e:76:6e:a2:1c:14:6b:
2d:26:91:cb:10:3e:15:37:77:81:5e:db:5b:84:5f:99:f6:e5:
88:54:82:aa:81:00:4a:ef:36:48:ae:34:99:2b:e5:77:8c:c9:
65:5c:12:a1:cb:75:19:d2:3a:e1:62:45:9b:58:ed:b6:93:97:
bd:b1:70:95:28:38:eb:94:4d:97:63:9f:2a:7b:24:48:bf:8c:
ae:f6:4f:e0:a1:9f:d1:dd:d1:ff:c6:cb:46:d5:e3:58:f9:e4:
07:37:a3:1c:69:b4:c1:56:d5:19:30:69:41:85:2a:2e:f8:93:
7f:e5:75:e2:88:8d:a0:6b:34:f0:f5:fd:38:f5:0b:46:a5:f3:
98:98:db:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:50 2025 by rpki-client