Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
File: F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json)
Hash identifier: ct4pvT25159Q6NwRtoPcLIA2Dv1Et5+CvOsX583etWM=
Subject key identifier: 50:1E:A2:76:46:F4:09:DD:AC:FE:8C:70:A1:97:F6:50:86:33:92:E3
Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
Certificate issuer: /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Certificate serial: 019A00350317225F5500584AEE8057C23831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 06:01:05 +0000
Manifest this update: Mon 20 Oct 2025 06:01:05 +0000
Manifest next update: Tue 21 Oct 2025 06:01:05 +0000
Files and hashes: 1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: //I8EhbNcYA1Hu9diudKKWnpPcMsFxxgvHpe5TF8U6I=)
2: YkiiV0RDHFC-BUQDCVg59T2UUOg.roa (hash: JgGDNNpAIzdyLgpjO8Q07wczCvQGkR61dSx5OtpD+HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:03:17:22:5f:55:00:58:4a:ee:80:57:c2:38:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Validity
Not Before: Oct 20 06:01:05 2025 GMT
Not After : Oct 21 06:01:05 2025 GMT
Subject: CN=501ea27646f409ddacfe8c70a197f650863392e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:20:3f:f4:1f:5e:56:aa:e4:5b:f5:1b:ca:
45:60:3b:26:98:6a:8c:da:c8:e0:67:12:6f:f3:64:
d8:11:dd:de:03:64:24:21:8b:d0:d7:21:04:92:a9:
76:fa:6b:3f:44:01:f4:b5:33:cc:9d:e7:4e:2c:ca:
f9:85:75:f4:52:55:7f:f5:f5:62:a5:9d:40:b2:42:
16:36:c2:e8:31:b6:a4:2d:5f:a0:53:7c:f6:9f:29:
a6:13:06:ee:51:48:0c:2d:32:79:fa:62:76:9b:ce:
d4:96:e5:c1:60:3e:63:be:8a:86:fe:b1:b0:da:30:
04:a2:b6:b8:fc:b3:42:a7:a8:b1:cd:01:2c:90:75:
21:a3:48:bd:1c:6d:72:4b:70:34:06:ce:f2:dc:eb:
e9:d2:05:70:d2:31:0b:c9:5b:31:e6:3f:01:3c:56:
fd:90:f2:89:8d:79:b9:18:f5:94:8b:29:e7:1a:f0:
6b:6a:eb:31:ac:45:bb:da:6f:bc:a2:b9:4b:14:fb:
17:64:db:1b:8d:d2:27:fa:d4:20:2d:56:d0:78:19:
4a:4a:77:3f:df:6e:12:73:f3:e6:ab:66:bb:c2:64:
3b:d0:09:e7:00:3c:d8:50:7b:c3:04:e9:48:61:3b:
c1:28:20:12:72:12:1c:64:99:f3:d7:3b:4a:34:05:
d5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1E:A2:76:46:F4:09:DD:AC:FE:8C:70:A1:97:F6:50:86:33:92:E3
X509v3 Authority Key Identifier:
keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:58:ea:2f:ca:bd:7c:5d:bf:b9:e5:a0:db:19:0a:bc:40:13:
33:49:df:38:60:98:e7:77:db:14:cf:bf:3a:c2:1e:7d:50:b4:
e6:78:95:61:38:79:49:65:09:43:49:34:52:d4:ac:96:87:c9:
23:7a:4a:13:b4:59:c2:b3:cb:aa:1d:b2:8f:33:45:b3:b1:05:
17:cc:af:a9:54:58:67:ff:e0:d2:c9:71:cd:21:ad:97:68:57:
e8:cf:29:de:b5:a9:07:9b:52:eb:95:50:f0:c6:05:c0:b9:4e:
95:99:56:73:de:ac:39:fb:ec:bf:a4:d1:c4:df:29:b2:24:ee:
ff:ee:0e:7d:d6:24:63:20:65:2e:ea:90:47:a2:ad:b5:89:22:
73:b1:3e:fb:05:5b:e4:84:08:42:dc:9f:a4:f6:bb:1b:bf:4f:
2d:02:c8:e4:b4:1b:b7:75:b7:93:5c:b1:39:0a:0f:4e:3e:60:
7e:93:5e:6d:77:cd:c1:f0:11:c5:73:8a:e7:e9:70:a9:2a:2c:
39:92:87:a0:ea:8a:05:e9:67:a4:df:ef:2a:ff:0e:04:8c:32:
78:43:9b:83:2a:d8:4a:da:d3:2c:06:75:bd:54:7c:52:ae:06:
57:52:dd:00:26:af:a0:ae:6e:0d:d7:f6:0e:11:e5:97:73:73:
70:ac:9c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:43 2025 by rpki-client