Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft
File: F1rTPU9qTQU5wncOK0-7qU_PHx0.mft (raw, json)
Hash identifier: LLewZNw1S697KI2wQ4lb104bIuApktxeN979RNus9SQ=
Subject key identifier: D4:ED:B6:33:51:DC:5C:6E:CD:D3:C9:A6:1B:50:7A:20:0D:41:40:5D
Authority key identifier: 17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D
Certificate issuer: /CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d
Certificate serial: 0198D4E06D46992BB853293A3BBF9DD4F775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft
Manifest number: 0CE2
Signing time: Sat 23 Aug 2025 03:02:14 +0000
Manifest this update: Sat 23 Aug 2025 03:02:14 +0000
Manifest next update: Sun 24 Aug 2025 03:02:14 +0000
Files and hashes: 1: F1rTPU9qTQU5wncOK0-7qU_PHx0.crl (hash: nbiujUnkC7hrA6qI/ZUfYi9XfJM3NqUMK3bVYUhVQ/M=)
2: zei6YjhBpdjVqL63TukdVgynd-Y.roa (hash: T4fQda7C6XsjIP/sCnd8L2esALMeo+oGlKzEL3Px+0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6d:46:99:2b:b8:53:29:3a:3b:bf:9d:d4:f7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d
Validity
Not Before: Aug 23 03:02:14 2025 GMT
Not After : Aug 24 03:02:14 2025 GMT
Subject: CN=d4edb63351dc5c6ecdd3c9a61b507a200d41405d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:32:71:fd:b7:f6:8f:f2:d3:80:1b:d7:dc:
c6:3c:4e:cf:67:11:3a:9f:cc:ed:e1:79:b1:53:6e:
6a:53:bd:11:28:e5:16:ac:83:e5:f3:70:60:9f:77:
c1:0c:55:16:b0:38:d9:82:46:9e:b0:9c:bf:76:ea:
08:47:ad:77:26:2f:76:6c:ba:8e:a0:27:39:f2:23:
91:07:a7:9b:71:82:f6:5b:55:4c:05:c7:ae:54:df:
b5:12:dc:93:6a:85:32:0b:ac:90:16:21:44:00:43:
94:e8:8b:42:3b:2f:6a:bd:60:e3:29:80:a1:77:bd:
60:77:de:f8:f6:c7:a3:e4:55:de:21:46:fe:a7:8d:
df:2f:15:61:2d:6c:5b:8b:02:c6:bd:b7:a7:d9:5c:
f6:a0:69:75:33:e0:67:76:62:1e:11:7e:3f:97:50:
f0:99:dc:d4:db:45:a5:ff:3b:a1:ae:c6:e5:be:95:
c5:1a:b5:d2:b4:b1:77:9f:5e:27:5e:1a:ed:34:33:
ae:f2:ec:1b:93:34:c0:f3:29:63:90:e4:09:cd:71:
bb:1a:f3:2d:5a:d0:c6:36:33:4e:2a:b9:eb:67:f7:
81:79:da:04:92:3e:e6:f8:51:d9:0f:b0:58:17:db:
0d:db:38:df:a6:83:33:c8:22:eb:ad:ba:db:d8:b8:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:ED:B6:33:51:DC:5C:6E:CD:D3:C9:A6:1B:50:7A:20:0D:41:40:5D
X509v3 Authority Key Identifier:
keyid:17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f6:db:77:a6:52:51:7e:28:67:07:91:ae:25:0d:01:25:b1:
7b:31:e6:3b:53:aa:5b:df:23:74:8f:48:f5:ba:26:00:25:b3:
b0:8f:f2:4e:e7:a4:7e:b8:f6:57:5e:2e:81:73:a9:9d:b2:8e:
4d:76:fd:a8:fb:07:d5:aa:4b:8d:b6:ad:f7:3c:11:fe:11:ca:
93:70:58:b7:d3:85:fe:6c:0c:ca:72:7d:b9:fd:8a:6e:21:ec:
a2:f0:03:03:4b:71:b9:18:78:4a:84:6e:36:e7:ce:58:e4:1d:
d2:52:d9:16:1c:cf:13:0f:2c:25:c5:76:e9:c9:99:43:31:f7:
7e:68:2d:88:7c:66:1e:96:ab:3f:77:bf:db:6d:29:8b:f0:12:
95:cc:43:a8:44:b4:41:3c:9c:97:14:12:65:55:af:43:3b:b0:
22:d6:89:8b:54:d9:14:cf:e8:82:58:ce:05:98:f6:41:b5:b8:
c9:b8:d8:cd:4c:46:2e:29:89:8c:41:86:7e:39:ba:b6:be:2d:
90:ef:86:82:a4:54:95:1f:0f:38:84:df:b1:f7:38:db:8c:7d:
e7:4a:49:bd:d1:c5:6e:3e:9c:dc:aa:86:ac:8a:9e:00:07:b3:
3d:7f:b5:f0:c1:7c:48:e3:df:a1:82:05:38:e4:90:2c:2e:9f:
04:84:e4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:29 2025 by rpki-client