Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: 8JfXYuELAFiLKYg+ajeAUOi1pmr0x2tZZ9ueo2LyDTc=
Subject key identifier: 2D:3E:0E:B0:39:FB:DF:38:70:55:CE:2E:FA:DF:7E:0E:25:C3:1B:67
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 0199FB45EF0979278311225120CC9370E50D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 07:01:28 +0000
Manifest this update: Sun 19 Oct 2025 07:01:28 +0000
Manifest next update: Mon 20 Oct 2025 07:01:28 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: 08FAemJADY95Di1c+HQeQnZYRV1OUlAu7Pvgz+70AUo=)
2: ghOgZScInzU-k80H-uXo6Z44fh4.roa (hash: lvvfvqGDTHXluMikuB2xTzxX/lcqRvi6zFraBkTfrlc=)
3: y-KKayWDkSAQJ7WHnrYBMGYeW7s.roa (hash: eQq4AAV0PFKKGDw6XQHABkksm4Mts0DM9GmL48be7Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ef:09:79:27:83:11:22:51:20:cc:93:70:e5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Oct 19 07:01:28 2025 GMT
Not After : Oct 20 07:01:28 2025 GMT
Subject: CN=2d3e0eb039fbdf387055ce2efadf7e0e25c31b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:3c:d4:ac:f0:5a:85:d2:f2:d9:cb:6b:49:
95:a4:dc:f0:c8:da:25:16:76:d8:3d:39:cc:e5:9e:
7e:14:43:ea:92:be:42:51:75:21:89:84:6c:40:dc:
a8:75:0b:40:f0:f5:8b:7f:15:a9:fd:3b:76:57:af:
4b:71:4c:05:0f:bd:fe:65:8b:89:04:0e:1b:62:b6:
ca:68:3d:6c:ff:13:b2:0d:37:48:6d:06:fd:f5:ca:
ed:70:fa:96:c3:19:b1:fc:9c:33:2c:bf:12:ff:05:
ed:38:0d:21:61:86:ce:84:c2:b0:e5:ec:35:43:a4:
86:08:4b:b2:97:a0:27:63:08:5c:46:c6:67:75:d8:
26:a9:e4:dd:b7:03:0c:d6:45:cc:70:7f:77:09:15:
37:9c:24:63:53:47:7f:26:75:7b:92:78:1d:66:38:
37:73:28:ee:55:3b:8a:fa:3f:7e:b3:00:c2:a0:f5:
e0:38:5d:87:0e:00:c2:67:9d:9c:d2:26:1f:0b:65:
d0:65:2c:1e:64:72:5a:a1:b2:ce:01:c3:5b:f0:ea:
a0:91:06:54:4d:81:d6:c9:bd:f7:f5:58:7c:31:88:
86:0c:2d:a7:33:7e:5d:5d:83:19:48:23:a2:9e:b0:
31:a5:df:98:96:68:0a:eb:cb:a6:93:f1:62:e8:75:
06:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3E:0E:B0:39:FB:DF:38:70:55:CE:2E:FA:DF:7E:0E:25:C3:1B:67
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d4:58:ac:ea:b9:30:eb:42:8f:06:f3:bd:fb:c3:1e:af:98:
8e:27:1b:0d:67:60:7b:87:cb:c2:7b:a4:1d:6a:c9:43:cb:53:
e0:6a:a9:56:eb:73:c3:d7:89:8e:41:12:de:fb:19:61:eb:e4:
8e:1a:a6:b7:ed:db:09:c3:c7:a5:1c:b5:91:6f:c6:61:06:2e:
51:d5:15:03:5a:48:82:5e:e3:53:3a:c1:2c:27:04:28:c3:19:
c7:5a:37:5f:5b:0f:2a:8d:ca:1a:fb:7a:16:24:ce:ba:91:40:
d1:b6:5e:cf:f4:9d:6a:c5:54:70:aa:21:0b:d2:f2:60:26:0e:
11:72:5e:72:74:10:bb:82:01:a0:4f:fa:80:87:22:04:6c:bb:
8f:5b:3a:60:5b:66:48:e8:b4:bc:6a:c5:45:98:df:f7:fd:aa:
20:ba:53:a1:33:e9:bf:1f:30:97:50:79:1d:15:f4:53:0b:fa:
78:72:79:5b:f6:f3:19:bd:e2:0c:66:9d:5f:a0:76:3e:9f:84:
3d:25:de:7f:e1:dc:59:68:fd:31:04:21:99:b9:61:63:23:cc:
15:d3:66:41:0d:44:df:3c:f3:83:ab:72:dd:60:77:b4:f7:d3:
55:83:1f:c5:be:f8:51:0c:98:ce:cf:66:5d:57:e8:89:d5:1e:
24:44:54:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:16 2025 by rpki-client