Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
File: F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft (raw, json)
Hash identifier: FpHHcJ8HVneKltSPWTBO4bk1hflQ8sjiX3y+FggMoaI=
Subject key identifier: 23:E7:9C:78:12:29:E4:30:55:2C:0B:65:0C:CF:48:D6:FB:96:7D:81
Authority key identifier: 17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA
Certificate issuer: /CN=178825286beec912d1988d08d2e277f518f3e4aa
Certificate serial: 019A4DAA6BCF0ED58F61C0A1D6A0CC692FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 07:00:05 +0000
Manifest this update: Tue 04 Nov 2025 07:00:05 +0000
Manifest next update: Wed 05 Nov 2025 07:00:05 +0000
Files and hashes: 1: F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl (hash: 6qaiSK7o++R3i7KwX4QYOw1RBjlLl0NFK7Bvn+Z/cdA=)
2: JTEomKX4OOyZxOy0baHsaALemoI.roa (hash: JGEo9LSNLQbTCM9QYbM4j5mLQD81VFGImQN07wE3Oxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:6b:cf:0e:d5:8f:61:c0:a1:d6:a0:cc:69:2f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178825286beec912d1988d08d2e277f518f3e4aa
Validity
Not Before: Nov 4 07:00:05 2025 GMT
Not After : Nov 5 07:00:05 2025 GMT
Subject: CN=23e79c781229e430552c0b650ccf48d6fb967d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:aa:f7:da:4b:0a:c2:f3:f8:25:45:66:f3:
43:ff:50:ae:8b:b7:21:d3:d0:09:80:5e:d6:17:37:
c5:95:4e:22:de:f7:62:3e:73:e2:21:d1:db:c3:1d:
60:4f:d8:4d:4e:8d:1d:1a:90:d7:26:d1:e9:c1:9c:
81:3f:07:ac:66:a6:06:ee:34:2c:23:4b:ec:ee:f0:
93:bf:f5:55:64:e1:25:bc:72:64:5b:f5:98:39:3e:
e2:36:a1:55:db:4b:7b:a8:40:0e:94:b8:44:c9:3d:
e1:85:63:ad:1f:7a:26:f8:55:8a:9c:11:96:12:13:
62:31:42:a7:5e:8c:5e:b4:96:ec:56:f9:ba:51:7c:
0f:57:a4:3e:42:8c:25:c0:b6:81:f8:27:d1:8c:a0:
9f:98:b1:24:23:62:87:71:1e:27:5e:1b:7c:fc:ae:
02:7b:42:c3:bc:46:4c:21:6a:86:cc:d9:97:41:26:
c1:d2:a1:5f:a5:b8:a1:c8:c5:72:95:8f:df:a4:4e:
25:33:0a:9d:34:72:72:2c:1b:34:2e:a0:a8:c4:c6:
a4:e7:cb:f3:34:17:af:3b:e2:96:b7:72:5d:d1:ac:
cd:8e:02:5b:2b:c2:fb:9f:37:2c:76:fd:21:c9:40:
54:2b:ae:95:43:f6:2c:5d:5f:07:fc:d2:71:41:d9:
c8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E7:9C:78:12:29:E4:30:55:2C:0B:65:0C:CF:48:D6:FB:96:7D:81
X509v3 Authority Key Identifier:
keyid:17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:90:6b:c9:8a:aa:cf:95:e5:1a:e6:29:f4:a7:b8:05:60:aa:
10:00:1b:ed:40:5c:87:d5:9c:c4:f7:32:15:86:42:f1:79:e2:
62:34:02:ed:96:4b:c0:52:ec:77:7d:82:eb:2a:e0:55:25:fe:
8f:0d:b6:08:22:69:cc:72:b9:2a:89:0b:7f:a6:8b:3b:c1:3c:
c3:f1:46:86:4e:b8:7e:4e:ae:10:89:a8:3e:44:8c:e8:d5:8e:
f1:fe:d2:6d:0e:50:aa:bf:55:41:d9:d1:c0:e0:bb:4a:24:22:
30:b2:cb:67:6b:f9:b0:e6:4b:e2:09:5f:45:ee:51:ed:42:88:
76:0b:90:61:c6:a0:6c:a5:b5:44:26:9f:2f:dd:a8:4f:8e:b5:
a8:44:97:f9:13:17:b6:2d:82:2e:e7:ef:46:5d:68:1c:74:e0:
d8:48:13:bc:be:2b:bb:70:81:19:98:62:6e:80:ac:6b:eb:35:
c9:b8:2e:75:cd:63:7a:04:29:b8:81:26:a1:22:30:d7:c1:79:
5e:98:8a:7d:1a:de:be:46:da:7b:d4:7e:b2:54:6b:06:09:5f:
9a:98:b8:ea:08:25:59:3d:43:6c:97:a9:dd:97:da:d1:8a:a2:
d4:3a:e5:0f:17:e9:5e:62:29:a4:6a:2e:cb:02:57:46:5c:a7:
fc:78:06:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:53 2025 by rpki-client