Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
File: 20bM9fil_kT0v9m6ZrpRJG2osYQ.mft (raw, json)
Hash identifier: 5KK4VwRF+cYZA5o/n8qKMI51Z+RsLQgtFUbXLsjSYe8=
Subject key identifier: 17:7F:17:18:C3:D0:CD:6E:E6:81:40:F8:8B:A5:90:CF:66:E5:71:6A
Authority key identifier: DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
Certificate issuer: /CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Certificate serial: 0199FC8F9656005772DB54415F07BB013A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
Manifest number: 14A7
Signing time: Sun 19 Oct 2025 13:01:32 +0000
Manifest this update: Sun 19 Oct 2025 13:01:32 +0000
Manifest next update: Mon 20 Oct 2025 13:01:32 +0000
Files and hashes: 1: 20bM9fil_kT0v9m6ZrpRJG2osYQ.crl (hash: IsPVUr3VUPMEQl9UgyV2XjRSSajZhy5mp6zlo+tZXrE=)
2: tE13-Z8TEXFI2N_Q3eslEjXwYJ4.roa (hash: 7axnrMAdFOe7EcvPvTZA4mgDnvv0sfD7w1s1AvMo3bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:96:56:00:57:72:db:54:41:5f:07:bb:01:3a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Validity
Not Before: Oct 19 13:01:32 2025 GMT
Not After : Oct 20 13:01:32 2025 GMT
Subject: CN=177f1718c3d0cd6ee68140f88ba590cf66e5716a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8f:e2:23:b2:36:87:68:2d:78:15:c3:53:ca:
29:60:53:23:7a:e4:b9:ed:36:4d:d4:c5:f0:38:8f:
98:ac:a7:7a:87:71:1b:e8:e7:35:f3:a0:73:d2:ec:
57:09:a8:82:af:76:67:ea:0b:7d:2c:d8:c6:ec:a5:
08:73:6f:a9:b6:d2:b8:ad:7a:7e:fa:fe:a1:f5:27:
5c:d4:0e:09:b6:e9:f5:aa:72:60:41:d7:3d:72:86:
b7:fb:41:cf:e7:23:4f:9d:5c:ed:08:21:31:64:a3:
8e:f6:b4:b2:7a:5b:46:54:97:b3:b5:dc:e7:ff:bb:
28:a5:35:22:b5:03:9d:19:09:f4:79:aa:85:a5:02:
9a:c8:3b:00:c3:ba:5f:87:74:cd:a7:0c:6b:3b:b4:
98:ae:51:82:f2:15:e8:25:30:28:ef:b2:bf:b4:01:
fa:ac:88:6d:d3:eb:23:cf:c0:f3:87:72:bb:9f:dd:
70:2b:4f:75:6c:08:d1:39:69:1e:94:8e:3f:95:93:
2f:e0:50:b3:fd:3d:02:43:b5:0d:36:c2:15:7a:0c:
9d:72:02:dd:f9:32:ab:d6:b1:97:37:f8:32:1e:0e:
89:d6:7f:a8:11:12:58:08:c9:9c:74:a4:d6:5f:d9:
bf:70:56:c6:57:ba:99:87:c8:37:52:6b:a3:74:a7:
29:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7F:17:18:C3:D0:CD:6E:E6:81:40:F8:8B:A5:90:CF:66:E5:71:6A
X509v3 Authority Key Identifier:
keyid:DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:55:24:e4:28:4a:6d:53:82:eb:24:36:69:63:cb:6f:0d:18:
2b:18:96:27:07:49:fc:a6:a4:4b:59:c5:4d:b6:0d:f7:fc:4b:
1f:c7:db:de:f5:69:9d:95:a4:63:98:33:3f:af:7e:c7:3b:57:
98:f5:a8:02:25:0f:e2:bc:04:81:37:c1:93:ca:ae:a6:cd:ed:
ec:c4:ce:51:e9:6b:64:d1:3c:c4:64:fd:d1:d2:6f:46:15:b5:
bf:65:10:61:39:e8:1c:bf:56:83:72:3f:a3:6e:a9:68:ac:a6:
88:f6:33:1c:d4:f9:05:d6:d0:6c:8f:1a:5c:70:e2:2d:4b:d4:
b9:cd:70:47:fe:76:b8:b4:29:44:0c:80:f8:cd:ba:49:e0:b4:
9d:9c:41:c7:c6:51:75:06:97:96:7d:ae:2e:0f:f3:13:7a:50:
42:95:0f:99:2a:0e:03:bd:8d:34:4c:34:24:77:da:2f:fd:e6:
e6:85:29:49:61:b1:3f:26:51:a2:77:08:1e:e4:aa:81:f5:29:
70:75:b5:01:ac:ea:b9:2d:02:51:96:73:97:0b:02:10:68:37:
69:f1:a9:d1:0e:89:92:20:56:3b:d0:89:ba:a7:69:82:ce:df:
2a:21:b6:c8:54:06:5c:07:9d:56:a7:63:90:a8:82:e0:00:d0:
fe:fa:f3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:24 2025 by rpki-client