Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
File: F4I131NVJtnm1q_2-nrFIpOpLHE.mft (raw, json)
Hash identifier: YGad2UIZnQEh7thVPHFNn7zsh4nvCuOSgn9d95mFvIg=
Subject key identifier: 7D:37:35:EA:56:19:E0:A7:7C:36:E6:6F:B3:6F:4E:BD:60:7E:B8:38
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 0198868CEE35DF01BBB826DB512D7C11B269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
Manifest number: 1625
Signing time: Thu 07 Aug 2025 22:00:39 +0000
Manifest this update: Thu 07 Aug 2025 22:00:39 +0000
Manifest next update: Fri 08 Aug 2025 22:00:39 +0000
Files and hashes: 1: F4I131NVJtnm1q_2-nrFIpOpLHE.crl (hash: Bl22dWIGyaTUsZlhq4NxmjpVMvrwRozeHojr7JSa6lc=)
2: NXK16WCoOxiuP5Pdh0Kqs98_6Y4.roa (hash: Y5m51ite4A5LbDxUmGbQiHLBy8E1baqu+BrJUl8RNq4=)
3: VhwEbxUgJOza67qJ4K_i1Uqq3ms.roa (hash: aCXGgi5AYKAi5vfsurTRm09inwo+Mr6Oxc+TCBbgaZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:8c:ee:35:df:01:bb:b8:26:db:51:2d:7c:11:b2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: Aug 7 22:00:39 2025 GMT
Not After : Aug 8 22:00:39 2025 GMT
Subject: CN=7d3735ea5619e0a77c36e66fb36f4ebd607eb838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f0:ed:1c:f2:9e:b9:e1:b1:68:ec:d3:a3:b3:
47:6d:95:a0:f1:51:d6:66:e5:4e:dd:fb:3d:dc:cf:
87:8e:64:1e:e4:11:69:31:79:5d:98:73:82:ac:1a:
9d:78:75:33:a3:34:8b:ad:51:d8:df:c9:01:70:f2:
75:cb:ee:d2:a3:d4:a4:44:23:a1:ee:b7:0f:3a:e1:
0e:44:47:e2:4e:4d:7d:10:43:26:b9:d5:80:ae:52:
77:90:0b:8c:5e:7e:71:d6:bd:b7:5a:58:f7:6a:29:
b9:13:54:56:db:ce:60:ad:48:96:d3:d4:bb:19:46:
2f:e7:4d:3e:6f:68:41:71:bc:fe:1d:69:d8:ef:3f:
64:ea:94:01:37:01:03:bd:b9:d3:d1:9e:b3:48:b3:
19:06:55:7a:77:e4:ac:20:a1:b8:05:a7:a5:13:86:
08:25:92:82:a5:c6:8c:2e:6f:bc:81:d0:1c:12:c2:
20:b3:72:b0:09:12:03:91:d4:66:97:90:d1:63:52:
23:86:ee:54:a6:d6:1e:b3:8b:fc:79:11:5e:9d:ea:
b9:27:f9:37:22:31:34:40:bf:a1:2b:a5:c6:96:9e:
f3:41:a4:71:29:54:f1:18:57:e2:c2:ee:1d:61:2c:
06:a3:34:76:8e:7a:83:8f:95:ee:8f:e6:5f:ba:de:
6b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:37:35:EA:56:19:E0:A7:7C:36:E6:6F:B3:6F:4E:BD:60:7E:B8:38
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7f:8c:5f:0e:e8:8a:e6:b2:3f:d8:38:7a:a7:90:99:93:00:
55:c9:e9:e1:06:60:26:c1:9c:dd:bf:71:dd:dd:c9:0d:d0:92:
6a:bf:f3:e3:6b:3e:bf:81:fd:9f:e5:8a:37:bf:f4:c1:58:26:
b0:66:8d:4c:48:fb:07:7f:18:01:7a:0f:91:40:96:d0:bf:8d:
08:b6:62:01:7f:89:ef:19:3c:4c:b7:d7:c5:50:de:cc:1f:37:
65:97:6a:9e:ef:ed:09:d8:75:7d:d2:57:35:27:3a:c8:c8:3f:
94:45:e9:2e:ac:1d:55:a3:88:77:14:99:3d:4c:d3:cc:3e:b5:
0f:54:60:31:7b:55:51:1d:51:fe:22:38:c7:e7:32:d2:1b:39:
aa:c4:42:5c:3e:af:57:85:09:b3:33:a4:5b:3e:49:b0:f3:3d:
17:a7:54:06:ac:cb:3d:64:d8:46:04:aa:62:d0:6b:ec:ad:bc:
05:6d:0a:50:59:88:67:91:67:71:f2:10:77:52:ae:5f:27:fd:
42:a5:0f:a1:d7:ec:5d:da:60:94:80:8b:00:eb:17:ad:00:4f:
54:f7:de:64:ee:84:fd:df:6c:76:5a:65:0d:e8:ad:b6:63:85:
88:7e:b3:e6:0c:e2:2b:5c:22:45:6a:ed:dd:fe:f0:94:8c:d2:
51:dc:74:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:13:51 2025 by rpki-client