Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
File: F2clVphEFbeOnRVGF4TIxOaR0BA.mft (raw, json)
Hash identifier: kEvcjE/H6/z3bBTsxxdOPAgzNW6WKj8Rj1ZMcthWqmc=
Subject key identifier: 65:8B:1D:49:82:4F:56:E7:34:D4:63:32:17:9E:77:BA:BD:8A:D4:40
Authority key identifier: 17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
Certificate issuer: /CN=17672556984415b78e9d15461784c8c4e691d010
Certificate serial: 0198D54E559C24CCB602E98576EBB2009616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
Manifest number: 14E1
Signing time: Sat 23 Aug 2025 05:02:17 +0000
Manifest this update: Sat 23 Aug 2025 05:02:17 +0000
Manifest next update: Sun 24 Aug 2025 05:02:17 +0000
Files and hashes: 1: F2clVphEFbeOnRVGF4TIxOaR0BA.crl (hash: 012jVxG/NbojqbB1vyRFeGb3pMFMFnmYtQ6uiNTD5Wk=)
2: uO9dPxlx5kbryFMIrW1wZfHfrqc.roa (hash: NrkTIYE8RmX0UUZREQe1a/gFtR2Be/h3baezRNBfbZg=)
3: vMfYAVSQ4CaJ9hqOmmUhZmVM_Xc.roa (hash: HKXHwGN9LbH+lPLcsRDtqfOhE6nZDez5q/T7yrcmTHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:55:9c:24:cc:b6:02:e9:85:76:eb:b2:00:96:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17672556984415b78e9d15461784c8c4e691d010
Validity
Not Before: Aug 23 05:02:17 2025 GMT
Not After : Aug 24 05:02:17 2025 GMT
Subject: CN=658b1d49824f56e734d46332179e77babd8ad440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:74:f5:c0:3d:27:f4:83:dc:d2:24:fd:d1:6e:
4d:84:13:04:7d:4d:d5:de:67:29:54:b2:45:ab:6b:
61:6c:df:b5:99:e9:3e:5c:ab:e6:71:32:0c:bb:28:
f4:d2:cf:ad:4a:d7:14:b5:c5:00:3b:7b:1b:5c:b1:
1c:f2:7a:31:0c:47:29:35:58:47:7e:34:d6:c9:1a:
07:0c:5c:41:26:bf:37:dc:59:38:3a:b6:2f:49:87:
52:33:3a:55:27:5d:4b:a4:af:65:81:38:3c:23:e8:
b4:69:14:09:67:a3:cd:65:27:25:93:33:f6:ff:16:
61:51:50:82:4f:8f:cd:04:e4:7a:15:99:2f:a4:9a:
ea:d4:45:f6:b0:12:31:03:8d:c4:05:2b:a5:1d:ea:
5b:ff:f3:c9:c4:94:22:4d:f2:7b:44:b7:ed:f2:f5:
d9:e5:b4:ce:08:57:43:8c:e4:58:e7:40:61:31:73:
16:9c:43:19:40:d2:c8:03:8e:b0:aa:ef:dc:03:2a:
bf:81:a0:d5:87:79:35:b1:91:01:ec:ab:44:1b:65:
85:bd:e8:36:25:ee:5e:24:83:db:95:0a:4e:27:24:
12:6d:80:3e:ed:f8:00:5d:3e:7e:e5:bd:ce:51:f6:
31:c1:4e:54:98:10:a4:97:47:15:09:e3:a0:7c:d6:
67:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8B:1D:49:82:4F:56:E7:34:D4:63:32:17:9E:77:BA:BD:8A:D4:40
X509v3 Authority Key Identifier:
keyid:17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:62:8c:b3:6f:73:04:30:66:16:4c:27:b7:90:b2:7d:c4:02:
7f:12:5a:e2:d2:f7:7a:cf:c0:74:06:d2:14:18:99:a9:51:7e:
0b:02:65:75:52:48:57:51:6f:64:66:8e:c1:13:20:43:e5:cb:
b2:61:c9:1b:5c:8b:63:e4:f0:a8:13:70:8b:56:a3:e5:a1:78:
64:e0:b9:35:15:b4:cc:22:f0:df:81:3c:1a:4e:1b:b7:59:13:
4e:56:ed:e2:82:78:97:d8:35:f0:56:eb:62:3a:48:b0:8f:c5:
03:e6:98:2b:76:92:d8:90:3f:cb:0f:ac:0c:3c:ac:64:ec:b8:
e9:55:f4:20:d0:c5:d9:48:70:ec:6e:bb:be:41:21:e6:6a:9d:
ce:aa:a6:27:d0:df:68:9a:aa:2b:d8:17:90:fa:37:70:30:a9:
85:70:a3:78:8c:57:c3:fe:1e:eb:be:17:0d:bd:f3:a2:5c:35:
66:f1:29:ef:8a:26:42:40:d3:32:93:c1:9f:23:15:a8:1e:52:
77:ab:e7:43:54:70:47:45:2c:66:da:3a:b2:ec:66:3d:2f:13:
a2:61:71:69:bd:b5:d5:13:4a:cf:2f:2c:33:cd:7a:47:c9:65:
44:dc:dc:77:5d:e9:21:72:43:7c:76:5f:fc:49:74:fa:8c:f6:
7a:db:19:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:45 2025 by rpki-client