Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
File: F88SpliemYyb7BOa-PznCsR1rXI.mft (raw, json)
Hash identifier: Oy9mtLHEQhpr4zHyRDNK8E5LhlKHSDgW+RZOdnsBIiM=
Subject key identifier: EA:78:39:24:28:BC:2C:7A:47:33:C1:8B:A9:9A:ED:C1:E9:A5:41:A0
Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Certificate serial: 019A4F997C2070447D374E5DC40C7EB84735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:50 +0000
Manifest this update: Tue 04 Nov 2025 16:00:50 +0000
Manifest next update: Wed 05 Nov 2025 16:00:50 +0000
Files and hashes: 1: F88SpliemYyb7BOa-PznCsR1rXI.crl (hash: QkndFvGnf2WFqI0szl/dXgRW72GA68WyqTdPxSWY/N8=)
2: dAIhcdZ8fwYvVo-M_emgqHoK7ZU.roa (hash: SjeXAqHoVFgHw2EHHXptMICe3kneOtC1TL1zW8otQdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:7c:20:70:44:7d:37:4e:5d:c4:0c:7e:b8:47:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Validity
Not Before: Nov 4 16:00:50 2025 GMT
Not After : Nov 5 16:00:50 2025 GMT
Subject: CN=ea78392428bc2c7a4733c18ba99aedc1e9a541a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:1b:c0:6d:88:d6:53:ca:2e:68:97:4b:ad:
49:cd:73:3e:b5:29:33:72:70:2f:50:ff:88:0b:dd:
96:67:8b:84:69:7f:09:07:eb:cb:95:77:37:67:15:
11:9d:d8:53:1e:c4:75:90:06:8d:21:1d:6a:0d:ef:
0d:08:ed:2b:4e:4f:7d:76:2c:29:2f:3c:ae:e6:7d:
1e:99:b3:ae:8f:7c:bb:e5:24:2c:36:4e:fc:fa:cd:
a1:ba:f1:b9:c6:9a:57:af:70:60:36:68:9a:9f:5a:
81:d8:98:ad:79:25:e3:90:10:fa:55:12:fb:a4:c3:
4c:25:b8:09:50:89:3b:45:7d:fe:fe:ba:18:f6:8a:
f8:50:f0:34:ab:0b:ea:54:3c:f3:48:7e:09:5f:d1:
f5:0b:c2:4f:a7:4f:38:df:a5:d4:32:4e:68:1e:4f:
d0:b7:d8:1d:75:05:1a:40:bc:25:a9:c5:ab:ec:c1:
6c:c8:42:c1:5a:ee:5c:4a:bb:c6:8d:99:cc:30:cb:
e9:11:f5:82:3e:7a:95:6d:64:0d:77:d6:1b:f2:bd:
ba:76:91:ed:b8:60:37:18:84:f4:bc:f6:31:a0:66:
41:2f:b7:ff:6b:18:32:fa:2b:ac:51:19:99:1f:40:
a7:fc:53:dd:b6:a5:f4:74:bb:6c:5c:72:9f:81:d0:
65:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:78:39:24:28:BC:2C:7A:47:33:C1:8B:A9:9A:ED:C1:E9:A5:41:A0
X509v3 Authority Key Identifier:
keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2a:73:89:18:c2:a0:12:90:e3:54:19:eb:17:4c:37:9b:8f:
dd:3f:d2:cb:a7:78:85:1c:93:6c:8c:31:9a:24:59:a1:12:ee:
51:56:6f:3e:d1:b9:c5:9c:d9:4e:37:de:e3:4a:57:46:83:80:
56:37:9c:6c:79:33:2e:05:9b:3e:28:f1:74:c5:19:cf:8d:dd:
4b:16:4d:e8:f1:2b:ee:81:97:3e:f6:d9:cf:f2:8c:e4:d3:93:
a2:fe:9d:3f:17:9e:0c:ec:3d:1f:44:f4:c0:a0:a2:bd:49:bb:
31:09:39:1b:28:b5:cc:5e:f7:f2:e1:23:95:fc:df:63:c2:d9:
44:0c:bc:69:d1:90:c0:9b:b3:21:bb:a3:7b:29:3e:0a:04:d5:
d5:18:dd:f8:cb:d6:d8:3f:72:0a:87:26:20:a2:28:cf:78:33:
eb:f9:d9:33:8b:6c:f5:6d:a0:80:97:aa:cd:04:94:16:5c:0f:
83:b4:0c:e9:ae:a6:d9:84:d0:d3:f5:70:3d:0c:1a:d7:39:08:
91:6a:05:86:15:6b:c1:86:57:e7:ec:90:99:53:a6:64:37:81:
58:2e:66:d5:f0:aa:e9:d8:7b:a9:bd:54:06:7e:56:dd:b9:cf:
5d:8c:0e:3f:78:1c:06:82:52:ee:ae:46:34:80:8b:60:f2:60:
77:3f:31:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:43 2025 by rpki-client