Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
File: F42BIe9wTXqXcMPs4eIFYUeQrDk.mft (raw, json)
Hash identifier: wlqVFh+538VkoFQrRZubGhZdKl1gtW+0Db98yFCTY60=
Subject key identifier: 9E:CD:48:5C:53:98:83:33:53:4D:9F:10:9D:05:CD:99:9A:8C:BB:95
Authority key identifier: 17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
Certificate issuer: /CN=178d8121ef704d7a9770c3ece1e205614790ac39
Certificate serial: 0198D4E06671BF8C99ACE67E9EEDF68B1DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
Manifest number: 05A1
Signing time: Sat 23 Aug 2025 03:02:12 +0000
Manifest this update: Sat 23 Aug 2025 03:02:12 +0000
Manifest next update: Sun 24 Aug 2025 03:02:12 +0000
Files and hashes: 1: F42BIe9wTXqXcMPs4eIFYUeQrDk.crl (hash: C3cfEdSkVYreZjGIZ9l+br2WCQftzptF04QKcUz0ghg=)
2: tQhQQED_2rbtgmsDxQqfycOcoj4.roa (hash: 7QkytynjV9fTl5bHPu2TPRokrjL3zXWtRN7glg7QEBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:66:71:bf:8c:99:ac:e6:7e:9e:ed:f6:8b:1d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178d8121ef704d7a9770c3ece1e205614790ac39
Validity
Not Before: Aug 23 03:02:12 2025 GMT
Not After : Aug 24 03:02:12 2025 GMT
Subject: CN=9ecd485c53988333534d9f109d05cd999a8cbb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5d:cd:65:97:14:96:ac:b1:5b:cd:2a:22:85:
ec:c0:3e:a1:74:09:79:bf:5e:ec:b5:2c:e3:e2:59:
c7:11:e5:2b:9e:7b:5d:00:e4:23:f3:ea:1d:98:20:
22:6d:c1:7b:97:69:2e:c2:d9:2a:2e:39:89:57:d7:
1a:81:4d:b4:a1:c8:65:14:fa:9e:84:14:8c:04:32:
42:10:88:60:4b:26:5e:a5:52:7f:03:e2:a7:70:0d:
2d:ad:12:d1:4a:1f:25:c6:31:30:85:91:d1:b3:89:
ad:f1:5d:6c:60:81:d8:d3:e5:75:ce:08:ed:85:2a:
38:1c:ee:54:41:68:c7:b7:19:24:49:32:c7:2d:ad:
c4:9f:14:52:08:af:28:5f:7e:8b:09:56:c5:cd:4c:
a5:57:26:11:eb:6a:ec:23:b1:80:cc:89:67:8e:12:
c6:3a:87:de:22:c6:19:7c:f0:33:57:51:cd:fe:8f:
92:02:8d:59:ba:c8:ab:83:6a:1e:13:dc:1a:bd:4a:
69:95:0a:1a:91:c5:54:50:4d:90:cb:05:e3:4b:94:
d9:83:ed:30:94:38:5a:18:02:48:7f:6b:59:c5:be:
66:d6:f8:07:36:90:07:93:76:01:7a:12:5d:1d:2f:
31:b6:c0:41:4f:94:f0:42:71:e4:e6:85:48:3a:56:
f7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CD:48:5C:53:98:83:33:53:4D:9F:10:9D:05:CD:99:9A:8C:BB:95
X509v3 Authority Key Identifier:
keyid:17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:29:54:7c:19:22:15:57:78:a7:57:f7:af:f9:0f:79:9b:cc:
2e:69:8a:65:02:c8:68:43:e2:68:69:d9:20:88:e8:77:58:1a:
f7:89:de:f9:c2:ac:46:4f:bc:ba:c9:59:bf:84:80:c2:d7:d1:
ab:f7:47:bb:30:b5:0a:3e:3e:e7:7f:b3:f1:c5:14:22:7b:a4:
3d:40:1e:86:39:4b:5c:92:bf:39:3c:bc:4e:d8:da:44:64:86:
17:9d:43:d6:1e:1e:f8:3c:59:a0:0c:a3:ab:1c:2e:13:19:aa:
ad:77:b4:c3:8e:cd:c0:c1:c1:6d:6f:9f:94:d1:2e:4d:ee:19:
cc:52:de:d4:f3:30:29:62:2a:57:87:65:53:ad:d6:0b:88:6a:
13:9e:38:25:ef:59:55:fa:4c:9c:0b:86:81:dd:3e:f7:be:34:
88:84:e6:c9:52:fa:a5:02:60:65:7c:99:98:62:55:ea:77:55:
95:ae:91:3f:65:58:2a:9b:32:05:4c:2c:7d:e0:bf:f7:f2:59:
4a:2b:10:2f:9c:2c:c9:b6:28:ce:70:31:39:d0:98:a3:cc:28:
90:0e:d4:7c:c5:bd:52:7e:46:22:f9:f4:93:6b:e2:ae:d9:19:
e1:c0:61:8b:9f:4c:d3:17:dd:cd:2f:92:4d:d5:2e:5b:a3:17:
51:a5:4d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:59 2025 by rpki-client