Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
File: F2w05a5wFsNgXTJpVkrpaFRDWV0.mft (raw, json)
Hash identifier: +iRJ52wOoCj62MoJk700uZh2mDiHuPcnACQLAJn0CUg=
Subject key identifier: A5:8D:56:71:BC:7F:8B:42:34:6B:DF:35:7D:A4:6F:8B:08:4E:5D:C8
Authority key identifier: 17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
Certificate issuer: /CN=176c34e5ae7016c3605d3269564ae9685443595d
Certificate serial: 0199FCFD81C5E721D2D39612896C504A191B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
Manifest number: 0949
Signing time: Sun 19 Oct 2025 15:01:36 +0000
Manifest this update: Sun 19 Oct 2025 15:01:36 +0000
Manifest next update: Mon 20 Oct 2025 15:01:36 +0000
Files and hashes: 1: F2w05a5wFsNgXTJpVkrpaFRDWV0.crl (hash: iezBq/IVVNEUQEHsBmYRgFoI4PbYJv/bGzvUGFR2DKc=)
2: wlY-QtAkBrD3gjKIpeQoXPyzFOM.roa (hash: zJBXQ4JCSb3Ylp4EVKprUMeUDS30W25c/gEiCbzENgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:81:c5:e7:21:d2:d3:96:12:89:6c:50:4a:19:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=176c34e5ae7016c3605d3269564ae9685443595d
Validity
Not Before: Oct 19 15:01:36 2025 GMT
Not After : Oct 20 15:01:36 2025 GMT
Subject: CN=a58d5671bc7f8b42346bdf357da46f8b084e5dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d2:9e:ab:ce:16:3c:95:16:79:c7:27:b1:a3:
6b:2f:97:a1:b3:de:7e:83:49:77:81:d3:12:d2:fa:
13:07:25:d4:9e:0b:fa:7e:9c:7f:bf:45:e9:f1:a6:
05:55:3a:d6:ef:79:9e:cb:4d:11:78:ea:e4:f9:f1:
fb:17:44:df:62:d1:32:f1:95:20:ed:66:42:cf:70:
67:e3:b6:fc:09:93:dc:04:1b:1b:2c:76:8e:73:20:
e2:4a:28:c7:ad:b7:fa:f4:a5:31:65:93:bd:52:a9:
9a:61:95:62:f6:94:0c:c0:b2:84:8a:70:8c:9b:f2:
1e:c5:6d:6f:e7:68:e5:61:1c:34:d1:1f:0c:d2:fa:
be:5f:67:1c:de:9b:bd:20:fe:98:ad:8c:b7:86:29:
ae:25:b1:96:79:2c:37:65:5c:a6:29:1f:0a:34:19:
41:fa:44:64:a0:82:8e:b9:09:c9:4e:5c:88:9d:2f:
91:db:10:f5:4d:00:ed:41:8f:88:cd:58:2a:ae:6a:
20:a8:8b:58:1b:16:e9:b6:f0:5b:a4:9f:88:40:5e:
6a:fc:a4:d4:55:77:6c:ad:f1:e1:ff:36:f6:f4:82:
94:06:c6:f1:dd:1b:af:63:d3:c8:04:d5:11:07:2d:
c5:c6:75:72:7c:e8:1f:e8:02:f9:03:0b:17:c7:d4:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8D:56:71:BC:7F:8B:42:34:6B:DF:35:7D:A4:6F:8B:08:4E:5D:C8
X509v3 Authority Key Identifier:
keyid:17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:1d:56:b0:e6:7e:7f:ff:f1:08:06:df:c0:2f:c9:c2:98:fe:
1a:10:69:0e:c3:69:95:39:f0:e1:05:14:73:64:a4:9d:d6:57:
1f:03:6e:05:7d:24:27:19:67:e0:26:05:b2:0d:f5:4c:7e:19:
f5:a5:59:80:9e:e0:f0:b4:79:72:e1:50:21:86:ee:cc:66:5b:
88:d7:54:b6:d3:64:1a:4a:36:f2:16:f9:5e:fc:af:fd:5f:ab:
e9:f4:11:50:7a:fc:4f:86:f4:56:cb:31:6c:7c:0f:40:b0:f5:
25:e6:b5:2a:68:9f:9e:57:62:b8:3d:7d:7f:12:e9:16:ce:5f:
96:80:96:6c:51:11:c8:e4:2b:86:cc:f6:76:24:8f:74:5c:e4:
89:b4:4c:2c:95:2c:23:78:ac:50:96:42:43:30:3a:78:ae:d2:
fc:fd:96:fa:df:42:74:81:9d:ff:1b:53:5f:ec:77:bb:74:04:
69:5f:b6:9c:d9:57:49:8f:5d:ef:89:44:bc:fa:37:50:e4:c1:
f9:e2:03:0e:64:1f:6f:26:44:aa:17:4b:45:7c:e6:85:59:4f:
7e:52:60:54:d1:a9:e6:53:33:ca:79:fb:f8:fb:8d:18:ae:81:
83:52:19:cb:ec:0e:3d:04:d5:d5:75:55:cf:2d:b6:f4:f6:82:
2d:d0:20:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:47 2025 by rpki-client