Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
File: F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft (raw, json)
Hash identifier: xGfOehkuI0zvAMOGMJr6QudhEScZxU9xcD2HIUqyRLk=
Subject key identifier: A1:F2:A9:FE:5E:16:61:64:FD:C4:75:8D:63:94:C7:F7:20:71:6B:C5
Authority key identifier: 17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA
Certificate issuer: /CN=178825286beec912d1988d08d2e277f518f3e4aa
Certificate serial: 0198974A0F9265110347CD7F3900E922A7B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 04:01:09 +0000
Manifest this update: Mon 11 Aug 2025 04:01:09 +0000
Manifest next update: Tue 12 Aug 2025 04:01:09 +0000
Files and hashes: 1: F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl (hash: /Hit+3x50fKK8pkjtyV2/jj8k9rgctaixSr7d1fTMpM=)
2: JTEomKX4OOyZxOy0baHsaALemoI.roa (hash: JGEo9LSNLQbTCM9QYbM4j5mLQD81VFGImQN07wE3Oxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:4a:0f:92:65:11:03:47:cd:7f:39:00:e9:22:a7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178825286beec912d1988d08d2e277f518f3e4aa
Validity
Not Before: Aug 11 04:01:09 2025 GMT
Not After : Aug 12 04:01:09 2025 GMT
Subject: CN=a1f2a9fe5e166164fdc4758d6394c7f720716bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:c1:fb:5b:11:c2:1b:cb:7e:3b:f4:f7:34:
ae:cd:0a:e1:ec:cf:ff:52:e9:2e:2e:83:ae:e9:5d:
cc:f8:31:0f:ae:bf:bc:02:c8:93:d8:73:52:1e:96:
cb:f9:b7:fc:49:5d:fc:52:4a:88:e3:63:22:77:03:
94:81:55:81:ee:b1:d5:be:a2:15:4b:55:c7:b3:6b:
0c:7c:10:6c:65:97:85:0a:ca:da:81:fa:e6:33:01:
15:b6:f3:d0:ca:ff:17:fc:be:28:dc:cd:2d:50:ef:
19:2b:93:8b:ed:44:4c:68:d8:8f:4c:2f:6b:03:49:
27:8d:c6:b2:2c:40:14:af:83:d8:50:57:c2:b0:8d:
a1:42:5d:df:f5:55:0b:08:9c:de:a7:ba:93:58:08:
c0:6d:7f:10:f4:2d:90:ba:94:a8:83:be:c7:36:d2:
f9:a8:fb:f9:2e:09:b7:84:7d:b5:b5:14:f0:30:36:
bb:79:7b:a5:47:65:f4:b0:82:12:68:65:52:6a:32:
31:4c:7d:bf:30:5c:dd:3d:bb:e9:54:7d:57:fb:57:
32:ac:44:bf:8e:92:f6:e9:75:74:4b:30:da:68:ce:
1c:da:fb:19:c1:9b:4d:60:be:82:56:bc:80:c8:eb:
eb:fb:b9:a1:97:b3:be:3e:50:48:13:a3:25:41:c8:
ca:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F2:A9:FE:5E:16:61:64:FD:C4:75:8D:63:94:C7:F7:20:71:6B:C5
X509v3 Authority Key Identifier:
keyid:17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:eb:86:ce:38:26:de:e5:3e:95:92:4d:9b:ec:c5:e6:a3:41:
22:be:57:73:56:9f:fe:bc:97:93:49:20:4b:f1:41:26:9e:7a:
8c:ee:af:b3:7b:78:68:f3:b6:e3:4a:a1:16:d5:19:4f:f9:b4:
c2:3e:43:51:e8:80:9a:41:5b:cf:45:e2:2b:fe:e4:2b:bf:b9:
96:63:f1:da:5a:f8:de:86:d3:9c:bf:f4:b0:30:d3:ef:4e:bd:
53:fe:13:b6:3e:46:d0:ca:13:ad:21:72:2f:69:3e:aa:06:10:
c1:93:8d:b4:cd:f6:07:bf:1a:f5:45:92:a6:ab:bc:4e:65:1c:
88:33:e3:62:9c:21:a3:4f:42:75:a8:45:d8:d9:60:b4:ab:86:
04:20:27:7c:8f:be:82:b7:8b:bf:f6:cf:d2:5f:c6:94:31:a9:
8f:d4:9b:28:89:8e:67:8c:d0:54:fe:8e:95:29:94:04:2d:c4:
7a:9d:05:82:17:39:80:d6:31:d8:44:a3:52:78:8b:fc:40:ea:
d0:aa:49:4b:28:f1:a6:13:37:96:29:35:08:30:40:b0:7c:10:
b0:b3:b8:29:f8:25:ed:58:9d:06:f2:e3:95:43:2e:88:8d:c7:
75:e0:a5:0f:ed:18:cd:98:f4:b3:05:28:d6:1f:9b:cc:8c:5d:
2c:f1:07:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:45:05 2025 by rpki-client