Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
File: _iFRDnSlthGog2amTtL7jmAVQpM.mft (raw, json)
Hash identifier: JIEecqznyunF12JNaJAb8BCS7fpt75Kk9t0m4czafWA=
Subject key identifier: 17:4D:D8:FC:E6:D4:D5:A3:48:E0:1C:B2:46:D0:1E:28:36:43:4F:96
Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
Certificate issuer: /CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Certificate serial: 019A0110B8B6C656B23DC17664D3BC961E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 10:01:04 +0000
Manifest this update: Mon 20 Oct 2025 10:01:04 +0000
Manifest next update: Tue 21 Oct 2025 10:01:04 +0000
Files and hashes: 1: _iFRDnSlthGog2amTtL7jmAVQpM.crl (hash: 6SDMZxaa2OysM9FQzCJ7NQkhXWxAMG/jflDA8/pGwtA=)
2: pA-X0SaB0DP88NQK6S16CRpbIws.roa (hash: /lnCuMiAMJ5HoCTByF87eDA744xmzbWJMwOSkdeAHzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:b8:b6:c6:56:b2:3d:c1:76:64:d3:bc:96:1e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Validity
Not Before: Oct 20 10:01:04 2025 GMT
Not After : Oct 21 10:01:04 2025 GMT
Subject: CN=174dd8fce6d4d5a348e01cb246d01e2836434f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:8f:82:ef:4c:4e:52:bd:30:0c:1c:22:b6:
a7:48:87:ce:02:ca:5f:ca:c0:be:9b:c4:18:91:46:
f3:c7:4b:aa:31:51:3d:bc:ef:5f:f6:f0:be:22:29:
f9:98:b3:f6:3a:f3:21:ce:82:4a:a9:11:65:18:26:
eb:f2:ec:38:e5:95:0e:dc:31:1d:29:3a:9d:7b:38:
d8:33:11:4a:7e:29:fd:89:9f:d4:6a:d3:75:7c:19:
af:3e:d1:e8:02:0b:e2:57:9f:23:b2:a0:20:1b:5d:
db:15:51:99:f6:04:bb:8e:5d:ec:a5:71:0c:2a:1b:
3f:fe:0a:95:c7:2e:fc:4c:e2:83:31:b2:b6:89:ac:
99:e7:c9:32:7e:15:c5:ba:50:88:94:e3:bb:d1:ad:
4b:8f:6c:d6:06:88:8e:97:d5:53:a2:eb:12:75:58:
3c:aa:d2:f2:fc:3f:f2:2d:a2:65:e8:3d:8d:51:08:
67:44:3e:82:2f:24:11:ad:bf:08:81:c8:78:69:34:
ef:4e:1d:17:b0:83:4b:ec:f2:7c:f8:ce:35:72:48:
66:2e:21:43:f1:bf:b0:47:93:9a:e8:2c:cd:31:b0:
64:b3:a4:35:45:f3:3d:c7:e6:db:61:48:4d:a5:11:
61:b5:57:0b:74:0f:3e:16:7f:d7:fc:c8:ca:5f:af:
b4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4D:D8:FC:E6:D4:D5:A3:48:E0:1C:B2:46:D0:1E:28:36:43:4F:96
X509v3 Authority Key Identifier:
keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ba:0a:27:f3:20:8f:02:4d:02:83:27:fb:aa:a5:81:ea:e9:
35:d1:34:eb:14:65:65:b7:a3:a4:5f:e4:48:03:aa:56:4c:0c:
0a:4d:71:3b:2d:6f:18:2a:19:3f:cd:a9:77:6d:cf:91:9c:a9:
57:01:09:25:ec:c1:2a:8f:a4:f0:de:5e:57:79:7a:50:31:06:
fe:41:8a:3e:35:7d:ea:53:e6:5c:98:db:be:20:ac:92:96:0d:
40:29:eb:69:9d:5e:b0:d0:83:77:8e:7c:b9:f9:9f:ab:da:41:
9e:a5:87:c3:93:e1:fc:4e:34:83:c8:7f:31:02:c7:76:f6:85:
01:66:9a:67:44:fe:0b:8e:b3:a3:54:bf:e7:b7:85:03:8e:ed:
35:4f:dd:99:20:34:94:7c:ae:b5:20:33:e4:b8:b5:f0:d3:3e:
7b:2b:43:ae:18:e6:ff:d3:48:6b:6d:53:b4:5c:38:f3:3b:08:
1f:9f:79:b9:76:a7:23:f9:0d:68:f0:4f:5b:11:06:e5:bb:3e:
ab:8d:b8:62:39:8f:88:87:03:52:d5:13:7b:3d:d5:5b:42:74:
f3:16:5e:82:7c:d9:26:e1:fc:5f:41:80:a0:e9:67:cf:65:c7:
f0:67:b2:fc:c7:75:57:d1:fe:39:b2:42:73:5b:70:53:de:c3:
a7:0c:a2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:53:16 2025 by rpki-client