Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
File: F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json)
Hash identifier: 32KdDXOXsICn8r73Zpues7yiIdVv/GTL/9LNEla/cMQ=
Subject key identifier: 9F:86:DF:47:6C:DD:22:5E:B9:B5:36:87:38:65:25:C3:D9:58:DA:6E
Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
Certificate issuer: /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Certificate serial: 0198744FEAD1272889820AED44AE2E83A2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 09:00:51 +0000
Manifest this update: Mon 04 Aug 2025 09:00:51 +0000
Manifest next update: Tue 05 Aug 2025 09:00:51 +0000
Files and hashes: 1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: sz22Ke1aElo5NPoLqYtg3SZ2EhZNo4NRy97Te8NPUws=)
2: YkiiV0RDHFC-BUQDCVg59T2UUOg.roa (hash: JgGDNNpAIzdyLgpjO8Q07wczCvQGkR61dSx5OtpD+HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:ea:d1:27:28:89:82:0a:ed:44:ae:2e:83:a2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Validity
Not Before: Aug 4 09:00:51 2025 GMT
Not After : Aug 5 09:00:51 2025 GMT
Subject: CN=9f86df476cdd225eb9b53687386525c3d958da6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c7:c9:31:ba:22:8a:01:62:86:0b:3c:c3:82:
82:df:ee:45:67:0d:a3:9d:4e:15:75:21:5c:59:fe:
e9:f9:19:c8:8b:ae:39:c4:a2:95:4b:85:12:fa:a2:
08:1f:8f:31:b2:41:39:75:59:72:1b:44:e1:92:ee:
86:7c:79:9a:80:00:76:7c:63:fa:63:26:dd:ee:05:
03:f9:08:dd:18:cd:26:f2:f9:c4:98:f1:91:13:4b:
d0:c0:48:f7:f3:26:ee:c7:6b:e0:8d:d8:db:3b:75:
c6:4d:9b:87:0b:ed:e0:bb:d6:6f:d6:7b:c2:d8:e7:
a3:6e:ac:84:0d:3b:96:f6:f6:76:e3:97:b3:0e:79:
16:d9:54:ad:de:ef:cb:24:9c:cf:77:2a:c3:27:cc:
f2:62:a5:b3:a7:8b:ae:ad:94:6d:18:6c:73:d0:22:
40:0e:8e:4f:51:b1:17:03:5a:94:71:35:93:6f:65:
83:55:92:6d:7b:62:3a:54:11:70:73:49:0b:52:98:
59:c1:0c:a5:49:e1:43:e7:8e:26:85:6a:78:7d:e4:
9c:b9:2b:bb:b7:36:51:83:5a:23:93:c5:ce:13:fa:
fa:a0:14:9f:fb:80:12:6f:b2:4c:9f:37:92:53:f7:
be:9e:4c:dd:4a:7c:3e:80:8d:9b:fb:f9:4d:b9:05:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:86:DF:47:6C:DD:22:5E:B9:B5:36:87:38:65:25:C3:D9:58:DA:6E
X509v3 Authority Key Identifier:
keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:50:c5:4c:ed:b8:e3:49:66:29:0a:b9:d3:e1:09:6b:35:d0:
1a:22:92:ae:fe:6c:a0:79:ab:e3:65:ab:0b:86:1a:2a:e5:d3:
df:d5:72:e8:40:99:ad:95:ed:e2:1b:53:f1:88:05:b8:6a:31:
d0:a4:45:a2:80:71:a4:79:1f:09:f5:3a:06:bf:27:9a:c8:8c:
d5:09:75:59:d5:f5:4b:af:e9:c5:fe:9b:08:1f:88:95:16:ac:
a2:fa:00:b6:97:c3:f9:fc:92:0d:be:ff:c2:84:ba:5d:31:4c:
23:bd:7e:e9:cd:d3:1f:18:06:b1:8e:6b:64:39:5b:cd:9e:16:
62:14:9e:17:20:f6:0c:9c:ff:bd:73:79:cc:a6:5e:ed:f8:c2:
e6:24:8a:c1:62:00:8f:09:7a:90:e6:ee:3d:47:65:40:b2:c5:
2c:23:dd:02:22:92:94:0a:11:0f:04:5d:5b:3a:8b:62:df:63:
b9:98:0e:34:2e:4f:31:36:70:6c:10:86:93:c6:2a:22:f5:66:
2a:68:a9:72:91:d9:51:a7:a3:7b:77:41:8d:d6:4b:23:a3:28:
c7:0c:c3:13:4b:1e:93:e9:73:41:76:5c:ad:2b:03:1a:f5:e7:
e6:db:06:c6:44:97:2a:41:30:c6:99:f6:ba:8b:a7:4f:6a:55:
78:b9:cb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:02:36 2025 by rpki-client