Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
File: F5meIRkUpo24Pq8_f9OExT50dFU.mft (raw, json)
Hash identifier: /aFOdpOubAf8eqS070TF02in6nTFjHsVViiEnJR7H+0=
Subject key identifier: 7C:4D:53:FC:2F:F6:0B:77:62:A6:E8:96:8E:89:07:A9:D8:60:02:27
Authority key identifier: 17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55
Certificate issuer: /CN=17999e211914a68db83eaf3f7fd384c53e747455
Certificate serial: 0199FAD7F3CFA4E59CAC771803F95180D2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
Manifest number: 152A
Signing time: Sun 19 Oct 2025 05:01:20 +0000
Manifest this update: Sun 19 Oct 2025 05:01:20 +0000
Manifest next update: Mon 20 Oct 2025 05:01:20 +0000
Files and hashes: 1: F5meIRkUpo24Pq8_f9OExT50dFU.crl (hash: zDVkedfr9RxIGwMRjw91yVCQuGT8mKqZ9tjt629ycFY=)
2: jdjC0ww4NA_4Jmou2NIqk7PauVQ.roa (hash: DpdKiPWViVyeUlQa6RYjsV7wbTabm/grnxVTUMHIZOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:f3:cf:a4:e5:9c:ac:77:18:03:f9:51:80:d2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17999e211914a68db83eaf3f7fd384c53e747455
Validity
Not Before: Oct 19 05:01:20 2025 GMT
Not After : Oct 20 05:01:20 2025 GMT
Subject: CN=7c4d53fc2ff60b7762a6e8968e8907a9d8600227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:0b:80:ff:32:69:4f:46:a3:26:cb:c9:7a:
60:52:f7:86:b2:46:57:b4:08:07:af:e6:06:ee:47:
cd:db:d6:21:ce:3b:66:24:09:fd:7c:a9:80:4a:92:
25:26:f7:b5:6e:e8:85:ce:b3:95:4a:59:62:9b:d2:
b0:1b:1e:9e:4e:fa:47:f6:78:30:5a:91:e8:75:08:
19:ad:e6:fe:9a:fe:4e:4a:4d:05:21:a9:52:f5:03:
46:9c:ac:75:ce:e4:b7:30:9b:c2:b8:41:09:ca:86:
65:49:04:5b:97:38:6f:dd:3b:b0:43:49:c4:4f:1d:
4a:ec:c1:39:df:fa:ce:0c:81:ee:4a:d6:f2:9e:f5:
de:3d:f9:94:5a:c0:f8:90:5f:11:46:c1:dd:52:3f:
36:cf:6f:a2:d5:cc:3b:20:94:b5:81:49:d1:15:71:
2a:74:13:8e:cd:f9:0e:84:ae:43:02:74:d3:c7:b5:
ea:94:89:ed:71:af:78:b8:68:ea:31:b7:e1:3e:c3:
70:ed:2a:c7:33:57:e6:6f:e0:a6:c8:2b:ee:d3:0d:
97:32:c6:0c:64:26:df:bc:48:bf:8a:00:97:c7:db:
ac:61:d1:f9:b4:50:d9:fd:68:c0:96:1b:a5:7d:16:
86:b3:75:de:0d:d2:8f:68:20:16:87:37:b8:ce:d3:
75:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4D:53:FC:2F:F6:0B:77:62:A6:E8:96:8E:89:07:A9:D8:60:02:27
X509v3 Authority Key Identifier:
keyid:17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5d:f2:24:6f:03:9c:aa:a0:e1:c1:8e:be:94:fd:ef:be:44:
05:59:34:68:1a:0d:55:a7:82:bf:d4:47:4a:59:c2:ab:ed:44:
2f:6b:bc:30:7a:00:91:86:89:29:5b:f8:0d:51:41:11:2e:b6:
03:08:8d:bb:d8:07:63:44:44:f1:2c:fb:ad:07:0e:fa:e4:44:
ed:35:31:13:b4:72:79:00:21:49:40:35:e9:63:10:2c:de:5e:
a8:65:f8:51:a7:7a:15:7c:6c:5f:8c:00:95:ee:81:a3:dc:25:
fc:6d:ed:a4:6e:25:b5:23:60:cf:fa:7e:38:45:65:9d:36:26:
28:2d:fd:42:0f:43:3c:0f:17:f9:29:66:06:93:be:2a:e7:a4:
34:36:96:28:c5:bf:2c:ef:2d:09:28:87:72:7e:8b:c1:d9:2c:
e7:bc:14:8a:3a:38:7a:ea:dd:c4:48:49:09:08:38:f6:f9:c2:
3f:f3:d7:39:00:ba:a3:ef:be:a6:74:9c:b2:af:54:65:2d:71:
59:0d:7d:60:08:4d:30:0f:d3:49:13:56:4d:06:0c:5b:0f:b4:
b3:ce:20:75:81:3a:60:c9:21:99:dc:f6:ae:53:62:d9:d7:48:
70:68:42:4e:2f:d4:d3:29:ea:69:99:bc:a2:ef:91:40:e6:20:
86:b7:f6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:50 2025 by rpki-client