Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
File: F4I131NVJtnm1q_2-nrFIpOpLHE.mft (raw, json)
Hash identifier: aqfuxP0cKvRXwNpEATYKtxAWeOIMQcFabel3vSW1bC4=
Subject key identifier: 8A:C6:19:CC:E9:91:3C:82:09:94:4D:86:B2:CA:46:B8:67:A8:BD:36
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 0198D5BC16A1B1D3E47E9ACDBD7183199B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 07:02:10 +0000
Manifest this update: Sat 23 Aug 2025 07:02:10 +0000
Manifest next update: Sun 24 Aug 2025 07:02:10 +0000
Files and hashes: 1: F4I131NVJtnm1q_2-nrFIpOpLHE.crl (hash: mhtkZ6XkeLNz1uyIlYgjSrXEZcBCykWJRRTvrsY1PDU=)
2: NXK16WCoOxiuP5Pdh0Kqs98_6Y4.roa (hash: Y5m51ite4A5LbDxUmGbQiHLBy8E1baqu+BrJUl8RNq4=)
3: VhwEbxUgJOza67qJ4K_i1Uqq3ms.roa (hash: aCXGgi5AYKAi5vfsurTRm09inwo+Mr6Oxc+TCBbgaZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:16:a1:b1:d3:e4:7e:9a:cd:bd:71:83:19:9b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: Aug 23 07:02:10 2025 GMT
Not After : Aug 24 07:02:10 2025 GMT
Subject: CN=8ac619cce9913c8209944d86b2ca46b867a8bd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:a8:88:eb:4e:4f:d4:cc:b5:6c:fe:84:07:
46:66:04:71:aa:bc:d9:b7:1b:2e:46:c0:7c:3b:9a:
33:cd:75:79:6a:e2:cc:3e:96:33:47:19:a0:a1:34:
1d:91:ee:48:5f:c8:16:d5:16:20:32:1f:f6:e0:de:
87:6b:83:e3:1a:23:d6:69:f6:e3:4f:92:32:43:32:
77:77:03:54:f6:f4:e8:95:0f:ba:37:43:42:ba:be:
70:dd:46:d2:89:3b:a2:30:6c:bd:56:82:6b:82:71:
77:b3:df:d6:59:1a:fc:f2:72:10:2a:11:e3:21:06:
09:67:2e:07:f5:ce:33:0b:1a:32:79:2b:8d:76:e2:
26:dc:4d:ee:f0:c2:e5:81:5a:0d:0a:b3:b7:6b:11:
3c:cb:34:ae:a6:26:cf:e9:6d:5e:4c:5d:05:15:6a:
f1:83:83:52:d6:a0:e4:27:16:22:70:b2:c6:3e:86:
71:dc:f7:e7:7c:a7:01:4e:ea:eb:8b:ce:47:68:96:
b1:34:eb:c5:9e:0c:03:66:a2:fd:54:b7:7a:b6:38:
da:e9:a5:56:cf:47:12:54:de:e2:a0:3f:45:75:84:
1f:7e:15:b1:89:7e:70:e4:48:f0:18:65:a7:ac:5d:
b2:e1:94:fb:57:2a:8f:3a:5e:db:7a:2c:8d:6a:6c:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C6:19:CC:E9:91:3C:82:09:94:4D:86:B2:CA:46:B8:67:A8:BD:36
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:df:24:6c:f1:5a:a6:9f:27:3f:66:e1:95:18:57:d5:e9:c3:
a7:e2:8f:a4:f3:95:f0:3e:cb:eb:37:bc:0d:70:01:c5:28:66:
a9:13:18:69:2f:fb:3a:39:3c:40:04:a4:3d:02:2f:15:bd:8b:
69:9d:c8:ad:f4:9c:c4:b8:ab:61:fd:4a:bc:36:6d:27:1a:47:
34:2d:c5:c6:1a:58:de:31:a0:4f:bd:34:14:07:32:1b:63:ee:
9f:8f:42:fc:f7:fb:d2:10:38:b2:00:9a:59:a0:2e:c0:7d:d6:
d3:e5:3a:c5:ef:8b:35:12:06:4f:6a:77:f3:ac:29:29:ec:dc:
9a:c5:2d:36:a9:9a:0f:81:52:8e:16:26:80:4d:c9:f6:8a:bb:
7f:36:7c:24:34:64:be:dc:f3:1c:78:3d:08:ba:27:a3:4e:ed:
b7:fd:ef:7f:07:4c:36:28:04:c0:d4:f7:1f:6b:93:cd:c9:0f:
a4:87:62:de:4f:c6:7e:a8:d9:72:a2:cc:87:a6:90:11:6d:6d:
8e:7c:31:90:d1:73:7f:e7:66:b1:8e:22:06:44:af:b1:c2:53:
9d:5c:e1:1a:f8:c5:18:8a:dc:59:e3:57:d5:b7:7d:fa:8b:0a:
a3:15:c0:09:20:28:32:db:f4:a1:a1:fd:a7:56:c4:1f:dd:87:
87:05:38:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:07 2025 by rpki-client