Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
File: F-s-AEUBmMitRev4PhMCGbk2Q6U.mft (raw, json)
Hash identifier: uML6a1AJxiOmD1KlVApvamllWq5B+ThOe3QsKxK4Mj4=
Subject key identifier: 0A:97:41:2D:E1:C3:D8:03:DE:16:04:04:3F:3E:6E:A6:5F:8D:0C:44
Authority key identifier: 17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5
Certificate issuer: /CN=17eb3e00450198c8ad45ebf83e130219b93643a5
Certificate serial: 0198D66120CEA188AA93D0CD60E3EC936D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
Manifest number: 0ACA
Signing time: Sat 23 Aug 2025 10:02:26 +0000
Manifest this update: Sat 23 Aug 2025 10:02:26 +0000
Manifest next update: Sun 24 Aug 2025 10:02:26 +0000
Files and hashes: 1: 1-NglftYb2V7rgWaj06UP-4Fbxaw.roa (hash: zvrixR1OfM7l+BuV+ILz2uoXSyiF2KQB8j15busAZgQ=)
2: F-s-AEUBmMitRev4PhMCGbk2Q6U.crl (hash: dtYs3IB6iVean+GE762udANCXavuyCaw0ZS6Mf/OMko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:20:ce:a1:88:aa:93:d0:cd:60:e3:ec:93:6d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17eb3e00450198c8ad45ebf83e130219b93643a5
Validity
Not Before: Aug 23 10:02:26 2025 GMT
Not After : Aug 24 10:02:26 2025 GMT
Subject: CN=0a97412de1c3d803de1604043f3e6ea65f8d0c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:2f:cf:4c:d8:e5:bc:c4:0f:5b:be:e5:5d:
33:ba:c3:c5:23:83:4b:b9:8b:c9:46:4a:7d:80:86:
d4:a7:06:a1:c5:57:d9:c4:cf:e6:c7:ee:ae:84:b2:
26:52:43:d9:85:05:7b:24:be:f5:bb:ed:f0:25:20:
58:ae:5f:49:31:62:f9:64:2e:0f:24:6a:c5:5a:70:
9b:29:a2:14:b1:1a:33:83:ec:16:dd:24:cf:c3:38:
1b:ad:73:dd:d0:88:4d:56:83:92:71:f5:a8:de:e3:
e0:fe:e3:5f:a9:1b:4b:d7:aa:81:67:92:fa:a8:f8:
24:24:91:f0:14:37:5f:eb:cb:60:a9:d3:9c:1c:05:
f9:6f:da:17:c0:52:29:38:f4:d5:42:7f:31:74:2c:
51:e3:54:f7:77:b8:93:78:48:df:57:b7:b9:76:05:
17:83:9f:ad:b1:05:5b:a7:b6:8e:8d:60:09:e0:67:
af:02:6c:d6:8c:05:67:77:c5:2a:9f:26:f8:bc:ee:
63:2a:8c:fd:75:45:b9:ec:2e:ed:4b:83:9a:be:c4:
85:cc:6c:0f:56:ca:8a:da:89:1a:32:71:68:7c:2c:
da:dc:b6:0f:df:f6:c6:60:3f:fc:2a:e4:03:f4:e2:
f7:20:28:ac:4e:57:a1:8a:6e:d6:f3:d1:14:ba:40:
0c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:97:41:2D:E1:C3:D8:03:DE:16:04:04:3F:3E:6E:A6:5F:8D:0C:44
X509v3 Authority Key Identifier:
keyid:17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5a:4e:02:02:41:a6:83:91:5b:d8:de:b0:27:5d:76:51:bb:
e2:83:bd:44:13:37:17:9c:63:90:c7:1f:5f:e1:d2:8d:e3:f1:
40:4f:6d:d0:89:91:dc:7c:d5:9d:5c:c0:3d:17:72:a6:57:4e:
02:8f:1a:ec:cd:68:7f:9c:82:57:f7:8d:fc:4b:85:a1:89:54:
4b:73:bf:88:10:ed:43:2c:0d:3f:01:98:4c:32:d8:5b:fb:4b:
5e:8d:69:26:ea:f1:29:46:56:c0:71:d0:01:ef:0e:bb:0c:d9:
89:c6:a1:b2:95:81:e5:d9:b4:57:5a:0a:a6:91:0c:90:81:c0:
84:7e:cc:8a:02:f5:ef:77:5a:5b:b2:9b:0b:18:37:ea:1e:41:
93:7a:ee:20:a2:05:aa:8a:f4:20:99:38:b8:d5:a4:82:5a:6a:
0a:ba:e5:82:56:62:11:66:f5:77:7e:f1:a8:a4:ab:f9:dc:cd:
76:bd:df:73:cf:88:2a:ea:42:80:21:5d:93:29:f1:4c:9e:c5:
e9:cd:eb:cf:ec:41:ee:8b:9f:a0:d2:c9:75:ac:09:cc:ba:85:
be:5c:58:13:7a:eb:28:ae:9b:73:88:67:5d:64:26:3f:d5:51:
b7:9e:dc:d9:42:a2:5c:3b:61:64:65:bf:58:b2:6f:1c:40:87:
9f:0c:2b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:18:43 2025 by rpki-client