Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
File: F19uHruDGTXIQiyXK8qy5W0dnjY.mft (raw, json)
Hash identifier: Rjyhe5QZUlI/lQPnMaJoBUGGf8u8X6bj+TmX2d85GOY=
Subject key identifier: 58:7B:74:81:05:42:D7:28:4E:11:DD:C9:87:20:D9:97:A9:AF:91:78
Authority key identifier: 17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36
Certificate issuer: /CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36
Certificate serial: 019A0035DE87C1E0DBBBE4C0BD9C3696504A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 06:02:01 +0000
Manifest this update: Mon 20 Oct 2025 06:02:01 +0000
Manifest next update: Tue 21 Oct 2025 06:02:01 +0000
Files and hashes: 1: F19uHruDGTXIQiyXK8qy5W0dnjY.crl (hash: yrR1NrI5nxKDNE7TveHtBAP9hDYzDE6Wq44ufkGwCr4=)
2: _66GUATo4F62e-zSRdrY5Scw7vI.roa (hash: fGRThmRK99/VwtLpaDe06S96FPLhmaswQib9OqrGAEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:de:87:c1:e0:db:bb:e4:c0:bd:9c:36:96:50:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36
Validity
Not Before: Oct 20 06:02:01 2025 GMT
Not After : Oct 21 06:02:01 2025 GMT
Subject: CN=587b74810542d7284e11ddc98720d997a9af9178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bb:2d:ec:b2:d1:30:7d:dd:95:3f:73:3d:c8:
e1:54:14:9f:0c:c0:50:e4:4f:a3:e9:b0:27:e4:e8:
5b:31:92:fd:f4:fc:40:6f:fa:69:8f:1b:8f:4f:f5:
83:a8:ec:08:ff:a5:fd:7c:4c:b9:c9:80:5e:6e:b5:
1b:e9:d7:bd:a5:8b:cf:f4:8d:8b:12:a5:d5:e6:e9:
1f:87:e2:48:f2:36:e0:2a:0b:be:39:af:61:ab:c0:
e7:88:03:04:70:75:64:ea:4e:57:e5:5c:e6:ae:98:
31:90:b4:ff:c5:14:43:6a:e1:a4:33:bc:85:25:d9:
40:d9:e3:96:48:55:75:aa:7d:ab:40:0b:c8:d7:1f:
15:25:23:0e:0d:2f:ef:0b:0e:ed:47:23:83:91:e7:
e3:e6:3a:70:f0:d2:cc:fe:0a:25:6f:61:d4:43:db:
a6:f2:4e:21:c6:f1:72:c7:b4:88:7d:1b:1f:01:36:
9a:49:97:75:72:c9:ca:5f:c4:df:6d:d1:10:44:4c:
5b:1a:a9:4f:94:3c:c0:f9:2c:d4:77:84:ed:5c:fb:
0c:ed:a2:0c:d7:94:8b:4a:f4:bf:8d:8a:9d:09:6d:
5d:c2:3a:58:39:1b:fc:43:92:5d:8f:bc:aa:19:9f:
cd:aa:2b:32:f7:d1:a8:20:5e:3c:45:21:0e:40:f3:
c3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7B:74:81:05:42:D7:28:4E:11:DD:C9:87:20:D9:97:A9:AF:91:78
X509v3 Authority Key Identifier:
keyid:17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:20:1e:e0:28:1a:c9:f8:f9:75:8d:1a:46:43:33:92:66:3e:
d8:c5:ed:b5:c9:ed:10:3e:fc:5f:db:b3:ac:e8:4d:3d:6c:0d:
21:40:52:f3:91:8c:b5:be:86:12:bc:36:9c:0c:b9:61:17:29:
d3:a5:07:42:a0:97:58:5c:6e:80:b5:0b:02:85:53:51:c0:6f:
39:47:10:ab:79:36:a7:dd:be:47:22:7e:68:4d:b1:23:44:a4:
25:a5:70:3f:42:c1:c1:c8:cf:0a:51:49:8c:07:e5:a9:c9:a3:
60:58:2c:af:3e:3c:33:01:04:d9:c7:25:da:0c:10:9d:99:3e:
85:60:79:73:7f:a2:73:da:17:d6:df:9a:fe:9c:16:30:86:f0:
e5:8d:7f:81:3c:ab:c5:87:8c:1d:f9:35:d8:05:36:5a:af:64:
db:b6:81:56:46:f3:cb:b5:85:64:23:16:16:44:c7:ea:f6:e3:
44:41:98:ab:c2:3d:37:65:48:aa:b4:fa:82:61:f3:37:9d:aa:
1f:7f:47:93:11:d9:f1:0d:4e:61:12:b3:d5:6a:6c:82:8a:4a:
ad:78:45:84:b3:97:55:3f:74:d9:cb:88:4c:33:1d:52:07:35:
76:22:a2:82:f2:ab:3f:13:a3:15:21:87:86:5c:7f:d7:02:15:
b4:6e:a2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:04:51 2025 by rpki-client