Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
File: F88SpliemYyb7BOa-PznCsR1rXI.mft (raw, json)
Hash identifier: VJ9jFVsBww+kQ9DgkfSPiLjTIx7vg2FfsKFI6Vq6KLs=
Subject key identifier: 44:49:EC:97:FE:A2:BC:78:8B:8B:30:94:F7:FC:DB:15:A1:68:EB:18
Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Certificate serial: 0198D515D77DE74F55A22180F7497B33AE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 04:00:35 +0000
Manifest this update: Sat 23 Aug 2025 04:00:35 +0000
Manifest next update: Sun 24 Aug 2025 04:00:35 +0000
Files and hashes: 1: F88SpliemYyb7BOa-PznCsR1rXI.crl (hash: VsrkeOyCVN2Z/ypk7N2jVhQg1l87iWv6PEaWhVc8rHU=)
2: dAIhcdZ8fwYvVo-M_emgqHoK7ZU.roa (hash: SjeXAqHoVFgHw2EHHXptMICe3kneOtC1TL1zW8otQdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d7:7d:e7:4f:55:a2:21:80:f7:49:7b:33:ae:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Validity
Not Before: Aug 23 04:00:35 2025 GMT
Not After : Aug 24 04:00:35 2025 GMT
Subject: CN=4449ec97fea2bc788b8b3094f7fcdb15a168eb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dc:d6:c9:1f:90:d0:22:75:17:32:91:54:7f:
a6:2c:90:08:68:84:06:60:35:54:a5:bd:92:ed:c5:
9a:42:fb:df:3c:6a:fe:bb:ef:cc:a9:07:18:ff:2b:
49:be:fc:0d:96:3e:4f:4e:56:d4:55:a0:be:55:5c:
3d:00:41:b2:29:35:3a:46:74:66:8c:84:a6:22:e4:
b9:13:86:f6:28:d6:b6:41:0d:cf:5e:bf:91:3a:e7:
2c:03:65:fe:18:62:8c:20:bc:60:4f:2b:d9:73:d4:
16:b8:e7:c4:98:0f:14:a8:1b:d8:74:ea:94:7f:82:
db:c4:a6:89:ec:dc:d8:48:e1:87:a4:e3:d6:8f:d2:
58:ab:d7:75:7e:a3:80:5f:77:68:be:39:c8:de:de:
83:b1:b4:9a:3a:38:9b:8b:11:8a:61:c7:8a:28:ff:
9c:47:4d:92:c7:63:d8:d4:81:72:a5:81:5c:58:b5:
b3:e8:4c:4b:c1:7b:5f:92:c5:75:77:ba:d4:55:98:
36:21:71:a2:b3:a2:6e:49:b5:3d:67:3e:8b:01:72:
f0:f9:b9:ca:de:15:0a:8a:81:fe:4e:93:04:be:5e:
e0:aa:67:a8:2c:1f:cf:5c:34:bb:59:17:8e:27:3f:
db:d8:14:eb:a0:f7:92:df:ec:c1:03:dd:bf:e3:94:
8d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:49:EC:97:FE:A2:BC:78:8B:8B:30:94:F7:FC:DB:15:A1:68:EB:18
X509v3 Authority Key Identifier:
keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1a:5a:e4:e5:b1:f6:ff:f1:72:cd:cc:60:84:4f:8c:ce:3c:
c7:aa:7d:86:4f:2d:6f:d0:61:91:d2:7b:f0:26:f6:7c:ab:e6:
67:e5:33:01:85:19:37:e5:1f:e7:b0:fd:7b:96:64:89:74:4e:
b8:93:f0:e0:03:a6:5e:d7:23:a3:c7:70:89:d3:57:b1:62:18:
d2:8d:a6:d1:5b:cb:6b:ca:38:28:39:fa:ac:69:35:fd:43:aa:
91:65:00:76:1e:3c:8c:50:33:a9:2a:b5:ce:39:b6:6d:5f:df:
10:45:50:8e:84:c1:06:66:f1:c9:6c:2b:8a:38:b0:82:bf:3d:
52:cf:4f:58:17:bd:c8:eb:83:5f:21:08:47:46:36:35:c1:6e:
e1:fa:3f:bc:b2:fc:48:6c:f4:77:e4:9c:ee:35:7c:a4:e2:68:
de:9c:c2:e9:6d:56:1f:79:2b:be:3b:83:38:95:62:90:2c:6b:
1c:18:0c:57:96:80:e4:93:64:0d:de:de:a1:b4:43:0c:17:0b:
aa:85:dc:47:c3:8d:ff:66:3f:90:cd:f7:a9:73:3e:25:41:7f:
be:26:f5:0f:d9:3b:d5:ae:fe:56:4b:84:43:a5:a4:ff:07:ea:
c4:0b:26:c5:b2:d1:47:e6:b2:95:f1:3c:85:21:9d:9d:b9:b9:
1d:bb:34:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:55 2025 by rpki-client