Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
File: F__x54w3SZ1y0Qi6co7wKbfw5_M.mft (raw, json)
Hash identifier: OjJZd5RPW1vBZhMortOm3RFkpM3nWqc2e29SVId6JTw=
Subject key identifier: D5:44:62:0D:E8:F7:5B:4B:CE:3F:9D:5C:22:CE:A0:44:24:AA:53:AB
Authority key identifier: 17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3
Certificate issuer: /CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
Certificate serial: 019A4DAA766A4881ED6A8249D71C48F194AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 07:00:08 +0000
Manifest this update: Tue 04 Nov 2025 07:00:08 +0000
Manifest next update: Wed 05 Nov 2025 07:00:08 +0000
Files and hashes: 1: F__x54w3SZ1y0Qi6co7wKbfw5_M.crl (hash: OLI5LYwomz0avASuzF0Tz6ztfRFbBTXtoQ19g8WlkUU=)
2: IY_YnCkvvSHp9GfIvU2RPaUcTbw.roa (hash: DyBmKVyEULzTcgLEO9H1ApnqiTxiBMTx1NS1xEQhss8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:76:6a:48:81:ed:6a:82:49:d7:1c:48:f1:94:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
Validity
Not Before: Nov 4 07:00:08 2025 GMT
Not After : Nov 5 07:00:08 2025 GMT
Subject: CN=d544620de8f75b4bce3f9d5c22cea04424aa53ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1f:e0:aa:64:d6:64:4a:82:34:89:8f:d5:73:
e9:69:a2:09:9c:c2:00:ff:f4:6f:6f:81:1c:14:d8:
6c:bd:92:82:06:2f:02:bb:7a:6c:ef:66:92:b2:8e:
19:21:5c:fa:e0:a0:79:d6:33:44:4c:2d:f2:78:a4:
d9:ed:95:ad:d1:8b:aa:c5:3d:66:18:c3:52:d2:3b:
2a:70:4f:a2:f0:27:74:2d:29:b5:22:00:4e:3f:6e:
4e:58:26:12:83:a3:9d:8c:39:3b:04:2e:d9:40:f2:
cc:4a:d2:ef:78:7d:be:cb:6a:cb:1b:9e:08:93:48:
5d:bf:61:a5:bc:02:0c:75:27:7b:4b:c7:54:68:6b:
1f:54:7b:7e:0f:39:2a:3d:da:01:f1:ae:6b:74:88:
f3:6f:cf:6d:04:fc:39:a0:2f:bd:81:d1:7f:12:86:
45:86:aa:ba:aa:cf:ad:0c:37:ed:a8:b1:02:1e:a0:
68:56:3e:e4:c0:14:a5:e9:59:cf:df:58:05:59:0e:
63:a1:25:d4:1e:9e:18:1d:df:4b:be:dd:e9:b1:04:
79:36:36:5b:fc:d4:90:e5:0d:a3:4d:db:7f:65:4d:
df:f4:bf:1d:e3:91:cd:b5:1e:bc:3b:bd:48:c5:02:
fc:68:06:66:25:fa:50:a2:91:1c:46:64:86:a3:9c:
d0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:44:62:0D:E8:F7:5B:4B:CE:3F:9D:5C:22:CE:A0:44:24:AA:53:AB
X509v3 Authority Key Identifier:
keyid:17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:91:ad:5e:d7:a9:94:60:89:6b:1e:b0:65:39:87:1d:70:dc:
8d:80:e0:44:08:a1:e2:55:cf:f3:ac:a6:ea:c2:e6:2b:fd:4b:
1a:7d:49:cf:18:ce:28:77:33:30:b6:8a:ef:b5:d6:fd:86:9e:
b4:a2:a4:32:64:c3:a3:76:91:2b:54:21:50:5c:e3:cc:ff:4e:
33:7c:e2:5f:71:5e:cb:36:61:82:b6:89:7e:de:57:cd:c8:b5:
c8:53:08:5b:01:b0:a7:fa:5b:13:74:8e:4e:7a:af:f3:10:e0:
03:29:ef:64:4a:43:1b:ae:ab:60:bb:1d:2f:ad:f9:57:4d:f5:
67:c3:74:ed:51:87:b3:86:8d:f7:3e:34:bc:28:e9:c2:b2:17:
4a:44:c5:a3:0f:f1:cd:c2:e6:2f:1d:8b:f7:fc:6c:46:ae:dd:
e9:8e:ff:9b:4c:36:fb:9f:38:18:3d:37:82:09:2f:ad:c0:51:
b6:e9:c2:5f:a7:a4:d4:cd:cb:31:cc:42:91:05:cf:1b:d3:67:
f0:bd:39:86:1e:50:44:73:c1:45:f4:20:c1:82:db:9c:f5:bf:
1e:52:70:ab:17:ea:f8:68:aa:a5:d8:c2:2a:7d:b6:0c:57:b0:
b7:c0:97:0a:b0:cb:51:27:3b:f0:f8:d5:32:10:86:4e:57:71:
cd:83:2c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:00 2025 by rpki-client