Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
File: F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft (raw, json)
Hash identifier: 6LH3/MLqdNBlipm0ndrPlW1HbSVRdyG7g77VaVujp94=
Subject key identifier: 9D:7F:8B:9E:8E:40:63:FE:73:FE:0C:B9:F3:2F:7C:0C:FE:F4:DF:36
Authority key identifier: 17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
Certificate issuer: /CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Certificate serial: 019A02C7BA62BF11E853BCF56C8897B3EF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
Manifest number: 045D
Signing time: Mon 20 Oct 2025 18:00:35 +0000
Manifest this update: Mon 20 Oct 2025 18:00:35 +0000
Manifest next update: Tue 21 Oct 2025 18:00:35 +0000
Files and hashes: 1: F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl (hash: 0US3W6/40DFKxA5V5OwRHFzq+x7I+Wqzd059DVw3pAc=)
2: zVisEWOE63cgJitrBEvJgl69e3s.roa (hash: XbX4/gD81xbjCKcZpF0h9K2QmjSBOOrAtln50jZvE7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:ba:62:bf:11:e8:53:bc:f5:6c:88:97:b3:ef:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Validity
Not Before: Oct 20 18:00:35 2025 GMT
Not After : Oct 21 18:00:35 2025 GMT
Subject: CN=9d7f8b9e8e4063fe73fe0cb9f32f7c0cfef4df36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:be:bd:d4:78:10:c2:ef:cc:4a:b9:8f:87:
ae:5c:e7:61:20:f4:6a:ad:4f:7f:49:ba:8e:63:99:
10:79:d7:14:e7:05:65:1c:bb:87:70:e6:b3:8c:fa:
09:69:4b:63:c1:eb:5a:75:50:7d:d3:c7:d6:df:15:
7a:7d:59:ae:06:77:23:5c:cd:ed:fb:87:8b:00:03:
d8:c5:7a:d1:74:2b:19:fa:8c:fb:b5:bb:34:fc:8a:
f7:88:4a:22:f9:dc:04:ba:e8:64:be:4c:12:be:a9:
9a:32:a6:6e:3b:5a:36:04:cc:8b:c6:87:97:96:99:
36:92:bd:18:84:be:ea:0f:a1:45:a7:de:28:7b:f9:
03:68:f5:d2:c1:f3:0e:8c:68:16:c0:ab:c3:98:12:
8a:24:a2:4e:2a:22:04:d1:f5:44:62:05:a2:6e:a7:
6b:08:31:3c:58:bf:54:9e:24:4f:52:5c:e2:e0:54:
57:2b:42:94:c2:20:99:6f:80:f3:47:3b:04:68:50:
06:dd:fc:d4:c0:50:8a:f2:75:7e:24:24:77:e4:44:
77:46:86:67:33:d9:31:87:44:94:4e:b0:0d:6d:c7:
98:32:26:ec:27:a3:9b:13:42:e2:c5:9b:f5:e5:04:
4e:5b:23:e8:22:df:4e:1e:c7:6f:bc:8d:ad:08:11:
bb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7F:8B:9E:8E:40:63:FE:73:FE:0C:B9:F3:2F:7C:0C:FE:F4:DF:36
X509v3 Authority Key Identifier:
keyid:17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:08:20:3b:22:11:a2:c5:0f:e8:49:4d:04:b3:d2:b5:58:b2:
75:15:0f:e0:9c:07:87:95:f4:6f:64:f9:a3:ef:2a:2c:9b:f5:
32:da:56:85:e3:4b:e8:cf:1f:4a:75:78:1a:70:5f:fb:9e:a8:
79:18:16:36:6f:8d:9a:a5:92:54:8e:cc:81:fe:33:b8:0c:28:
e4:b9:54:47:fd:cb:25:f8:f2:8a:25:39:4a:1e:d5:82:21:c7:
45:76:c2:26:a1:6a:42:a2:29:07:8e:1d:97:d9:ba:f0:72:39:
c7:b6:b9:c9:eb:3c:98:89:44:19:b8:05:82:a5:3c:11:41:f9:
a7:6f:b2:2c:da:5b:1d:0e:3d:b5:fd:75:54:60:2d:19:20:f6:
a7:99:89:db:d2:9b:f5:8e:cc:e8:a0:20:79:e2:3e:87:80:51:
3e:89:79:e0:eb:3f:27:4a:31:ca:47:9c:e4:82:90:76:9a:da:
f7:ff:64:ca:4f:bd:77:b3:9b:63:ff:61:df:60:2a:a0:d3:07:
58:09:93:2b:08:10:d3:ee:1c:b3:34:ca:39:59:10:f2:c9:74:
7c:5b:6c:0b:1a:8a:ac:42:76:0e:9a:69:a1:ad:be:ec:27:e1:
93:f8:6b:06:d0:33:8b:10:ce:dc:78:6a:6f:20:e2:a5:19:5a:
ce:93:ff:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:18:59 2025 by rpki-client