Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft
File: F3khM2kRpWiNeOk__l5HIRO7Gb4.mft (raw, json)
Hash identifier: HX7w1PU9DwQsaewvqI9zhgC4tmrLs/RY8CKrsns6F1Y=
Subject key identifier: 83:A1:B3:7B:92:78:EC:E5:A9:D3:D1:EB:39:3F:8D:FC:DC:3D:59:67
Authority key identifier: 17:79:21:33:69:11:A5:68:8D:78:E9:3F:FE:5E:47:21:13:BB:19:BE
Certificate issuer: /CN=177921336911a5688d78e93ffe5e472113bb19be
Certificate serial: 0199FFC8C9AD943DD99EFC06F55C8EF45911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft
Manifest number: 06C5
Signing time: Mon 20 Oct 2025 04:02:52 +0000
Manifest this update: Mon 20 Oct 2025 04:02:52 +0000
Manifest next update: Tue 21 Oct 2025 04:02:52 +0000
Files and hashes: 1: F3khM2kRpWiNeOk__l5HIRO7Gb4.crl (hash: EHBzDjUha5xKA6wXXTzOyz7DuJPFx6hZiCeE2myRi94=)
2: WN1QsY4J0xzhzXI37At9k24AG4s.roa (hash: aONG4etXL5aCmGtS97ulkTYk4UjXjlB6E7tpLdYeDEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:c9:ad:94:3d:d9:9e:fc:06:f5:5c:8e:f4:59:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177921336911a5688d78e93ffe5e472113bb19be
Validity
Not Before: Oct 20 04:02:52 2025 GMT
Not After : Oct 21 04:02:52 2025 GMT
Subject: CN=83a1b37b9278ece5a9d3d1eb393f8dfcdc3d5967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:1a:6b:2d:32:52:46:ff:21:7b:b1:8a:74:
c8:05:fb:fd:b6:0a:95:6b:29:56:5b:ec:b4:85:7c:
45:8b:e1:f8:9e:5a:0d:b4:9c:15:70:90:60:03:c3:
f5:f5:d1:c1:cd:5d:24:a8:25:73:88:e2:7b:76:1b:
cb:ed:4c:9e:89:de:7c:c3:b7:62:83:df:fd:93:8e:
21:ac:da:c9:1e:e1:bb:88:57:b5:10:b8:7e:2d:d2:
5c:0d:c7:e0:cb:ff:b0:ef:70:c0:fa:f9:5f:b9:10:
c1:ea:5e:c3:63:d6:28:18:78:48:f6:b6:3f:b6:b1:
b4:ba:53:06:36:0c:7a:e4:28:bd:c9:12:4e:b4:e0:
7e:fa:2a:22:7e:15:73:25:d2:ff:07:c0:e9:27:fb:
a1:67:13:d1:9b:a1:04:bd:dc:2d:64:df:6b:3b:14:
ea:d8:fa:7f:a5:5c:aa:99:27:a5:e9:a2:4a:f9:74:
5d:fd:47:99:78:9d:1f:01:19:bd:77:75:76:ad:fc:
05:f2:33:87:34:93:09:16:06:22:bb:23:5f:c2:52:
05:b3:a5:bf:ef:07:d2:0c:a4:06:ea:26:57:33:a2:
52:61:d1:04:c7:fe:cf:36:d8:d3:b7:9d:6a:e6:97:
07:18:6b:f0:ae:a7:b7:f0:20:e5:2e:84:d6:ae:a9:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A1:B3:7B:92:78:EC:E5:A9:D3:D1:EB:39:3F:8D:FC:DC:3D:59:67
X509v3 Authority Key Identifier:
keyid:17:79:21:33:69:11:A5:68:8D:78:E9:3F:FE:5E:47:21:13:BB:19:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e1:fd:55:c8:86:56:b2:2f:9b:ae:e4:15:ed:73:63:d1:1c:
36:79:6a:bf:26:30:65:75:cf:6f:25:13:ec:ce:2f:70:4e:c5:
11:5b:03:ea:a3:c0:3e:34:5a:41:ee:b7:d1:cd:ec:51:b7:27:
03:4b:02:a7:06:2c:10:e4:69:98:06:e7:69:ff:da:81:96:fd:
be:5e:d5:4a:ca:43:0d:2a:01:9d:a3:03:a7:ac:5d:fb:e3:f2:
30:1c:4c:3e:0d:88:89:79:fc:38:58:49:eb:66:f1:c3:f4:61:
f7:79:d0:59:58:cf:42:44:db:ed:47:00:46:24:62:9e:40:d2:
76:a1:5a:0f:28:fb:6f:30:0f:dc:c8:89:61:39:34:e5:89:2b:
65:2e:99:ba:5b:57:6d:42:8c:21:5d:9c:38:99:11:ab:4b:5d:
1b:86:81:59:e4:dc:12:a2:93:66:8f:21:60:93:a0:f9:51:b6:
1b:95:a7:56:10:1c:7f:73:58:1e:28:04:e2:18:af:c2:f5:ef:
3a:36:43:7e:fc:53:28:4e:c3:8e:52:12:d9:1f:8f:04:51:47:
f9:bd:cf:37:f3:d1:07:73:87:b9:75:bb:7c:34:3a:5a:af:8b:
fa:0e:c2:2a:c9:6a:e5:a2:a3:0c:ed:90:45:1a:80:0b:37:1a:
e8:22:0a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:01:07 2025 by rpki-client