Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
File: F9uL3_IuGjew9KaVNCS2UWmwNCk.mft (raw, json)
Hash identifier: HphnLiV9ZreRaOqvX7Ve5CzYOehQZHqBe4PieBtOM28=
Subject key identifier: C0:89:F2:50:07:14:95:45:4D:77:B4:C3:1C:E9:1D:D4:C4:60:B1:2C
Authority key identifier: 17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
Certificate issuer: /CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Certificate serial: 01987298A63DBF723B695C93D397EA494814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
Manifest number: 0D23
Signing time: Mon 04 Aug 2025 01:01:03 +0000
Manifest this update: Mon 04 Aug 2025 01:01:03 +0000
Manifest next update: Tue 05 Aug 2025 01:01:03 +0000
Files and hashes: 1: F9uL3_IuGjew9KaVNCS2UWmwNCk.crl (hash: uxYuFFR6cWLO6xSWBNzt8s+FzVM4Spdeuzohj1k88g0=)
2: KNcCODBaDX2MFgjxBHddnmeDs1w.roa (hash: v5RHpNNKwnL8+b9d7xhZwKkWy+NYX2Itp+tps9r7KV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:a6:3d:bf:72:3b:69:5c:93:d3:97:ea:49:48:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Validity
Not Before: Aug 4 01:01:03 2025 GMT
Not After : Aug 5 01:01:03 2025 GMT
Subject: CN=c089f250071495454d77b4c31ce91dd4c460b12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:a0:6c:bc:d7:6a:5c:01:0f:ff:77:4d:25:
e4:9a:22:a5:23:f6:fe:df:07:d5:20:c1:69:47:c8:
2e:02:9c:c7:19:53:65:0f:c0:26:b3:b4:10:42:60:
c3:46:1b:9c:01:60:76:22:7c:3a:c8:b4:44:8f:50:
f9:87:29:d5:43:06:94:81:a4:86:ff:60:eb:0d:5a:
19:9a:3d:e9:8b:5f:90:c1:93:af:69:66:df:4b:c3:
9e:e4:7b:95:66:40:2c:6e:b3:bf:63:dc:17:2a:8a:
7b:33:cd:08:ee:9e:4f:8b:6b:87:ec:a2:12:ab:59:
2a:ad:36:18:be:24:0e:12:96:88:70:b4:bf:ef:5b:
ec:95:b7:92:93:27:b5:33:20:28:e6:fe:32:e9:4c:
d5:79:78:7a:29:57:3f:f7:33:c7:6f:8e:14:9b:28:
1c:98:74:a1:ad:3f:84:80:dd:22:49:96:98:97:ac:
74:20:44:5f:e7:98:45:dc:d5:77:36:b3:d9:7b:fc:
73:f6:1b:a1:83:1b:ea:93:c9:8e:90:55:ce:bc:d9:
ff:06:96:b5:54:41:49:53:91:14:ac:d0:35:72:9f:
c3:41:a7:99:2d:f2:18:63:a5:05:d4:10:55:e7:37:
81:be:5b:e1:37:d0:66:c4:27:41:dd:a3:74:78:76:
64:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:89:F2:50:07:14:95:45:4D:77:B4:C3:1C:E9:1D:D4:C4:60:B1:2C
X509v3 Authority Key Identifier:
keyid:17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:81:79:60:aa:35:06:42:4a:b4:22:b1:b8:27:26:6c:ba:ee:
48:ed:e4:99:43:16:2a:37:05:c3:3b:41:71:90:25:b0:d4:19:
4e:33:da:26:01:ef:7f:34:00:95:72:9c:2d:c9:1d:8d:8f:7b:
98:d0:4e:d4:75:20:04:13:14:a7:ff:cb:b2:b5:17:27:b9:8e:
47:a4:f7:40:89:b6:29:e0:d6:b3:7f:1b:e9:63:88:42:f7:7a:
01:ea:3e:81:92:48:13:31:36:3d:d5:83:04:8b:d9:35:36:11:
d9:57:47:a9:03:a9:e9:a7:f0:92:cd:02:5a:32:d9:d9:0e:dd:
dc:07:e2:e4:4f:ff:1e:ac:14:97:30:45:6c:96:65:b9:9f:da:
59:88:77:76:6c:22:62:59:b9:b3:ce:7c:4b:49:f3:b6:c0:dc:
1d:76:73:f9:a1:69:3f:62:ef:ea:85:ed:3c:ce:5d:3d:22:df:
fe:9c:78:d1:9a:0e:e2:e7:28:81:82:68:64:57:6b:e8:79:e0:
6f:2a:c7:a0:d8:fd:74:b9:34:72:8b:64:cf:68:7e:8d:c4:3b:
e8:77:f6:1d:1c:a0:5d:e0:7c:a2:48:e0:7c:77:63:4f:df:52:
a6:17:bb:11:2b:28:1c:34:50:04:92:38:39:34:cb:23:65:a1:
ff:dd:42:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:06 2025 by rpki-client