Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
File: F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json)
Hash identifier: jFv/rm0qbDErsCNyEObN+vQ8p3voidiPZ7Au+YF0Wpo=
Subject key identifier: 47:50:00:02:D3:B9:3C:F1:E8:BD:58:04:24:A6:E3:72:2E:88:47:EC
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial: 019849669C578096846D9F15C4E32DA83E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
Manifest number: 0ED2
Signing time: Sun 27 Jul 2025 01:01:58 +0000
Manifest this update: Sun 27 Jul 2025 01:01:58 +0000
Manifest next update: Mon 28 Jul 2025 01:01:58 +0000
Files and hashes: 1: 7fUo-oGUyRn9-9ANdyLLV4IAEzs.roa (hash: WPPCtKBHs3yDruufjrRdI5i0kryHgilSWp2pBoxruxg=)
2: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: F9e7fjaCgbcDZ9TSl2kohrUmUHPy1heJuTq/GE0EW6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:9c:57:80:96:84:6d:9f:15:c4:e3:2d:a8:3e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Validity
Not Before: Jul 27 01:01:58 2025 GMT
Not After : Jul 28 01:01:58 2025 GMT
Subject: CN=47500002d3b93cf1e8bd580424a6e3722e8847ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:94:4b:e1:53:2c:b1:9d:f0:a0:b3:9b:42:36:
9d:bd:d3:61:e2:ed:1f:75:01:3b:e9:fa:35:d6:d7:
9c:e1:19:80:4a:75:5c:d1:5c:ff:69:82:09:69:fc:
57:88:b6:93:21:7c:ee:17:0b:7f:e6:2a:af:08:b1:
4f:02:1c:ed:c1:16:f9:a5:36:a8:4d:6b:6a:13:78:
95:49:30:87:b0:08:01:dc:09:f8:d9:9a:7f:17:a9:
32:5d:a0:b2:78:c0:1e:c8:c8:92:9f:f8:de:90:10:
c8:40:20:d6:6d:54:d0:2d:4b:e0:d8:94:e6:39:c3:
cf:9e:58:8f:49:a2:21:b0:e4:a7:c4:5b:64:7f:a2:
c5:88:10:35:e0:be:dc:ec:98:9d:24:18:4e:de:9a:
11:72:44:82:d5:df:a5:22:c9:e4:e6:8a:ba:01:5b:
9a:66:4a:5b:6a:b5:0b:ed:4e:64:f0:45:91:51:8a:
7c:08:38:43:71:62:63:ca:a8:d5:56:c3:63:61:28:
f9:aa:4f:c3:54:ec:f9:d2:d2:a2:03:94:b7:99:e6:
14:06:d1:dc:dd:5b:d9:7f:c3:ef:dc:9c:b9:d8:fa:
43:0d:b5:0a:df:62:a0:1f:a7:b1:ea:83:e8:b7:00:
ee:05:57:34:13:27:88:90:31:7d:75:24:c0:46:e4:
70:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:50:00:02:D3:B9:3C:F1:E8:BD:58:04:24:A6:E3:72:2E:88:47:EC
X509v3 Authority Key Identifier:
keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8f:57:62:a4:f6:1c:41:9a:c7:3d:cb:9c:47:83:19:5c:91:
cc:7c:e9:17:21:a7:e2:66:e3:7b:e5:81:04:18:9c:95:16:2b:
73:fc:21:42:d9:b0:98:59:8a:f4:51:ab:71:34:a5:5d:8e:8b:
d1:a9:d3:b6:c9:b8:dd:3f:38:d6:8d:f4:1a:dd:de:eb:3f:09:
54:da:78:c9:df:4e:70:1f:e5:2c:f6:fc:34:d4:fd:be:1c:d3:
bb:3d:dd:b2:d1:65:3d:04:93:26:04:31:7e:4c:9b:ca:fc:0a:
1b:cb:ce:b0:67:ad:32:14:43:36:cf:b3:df:ad:b8:1e:dc:ef:
4e:1d:50:8e:2e:81:4e:aa:7b:c2:6d:a0:d6:1d:59:05:95:18:
94:a9:fb:02:a1:65:cb:88:95:cd:51:63:fc:f9:3c:a2:8f:e5:
40:ab:4e:72:e0:23:4e:db:fc:2f:a6:10:73:6b:53:a8:b1:16:
c2:cb:20:76:34:ef:4c:f4:cb:d4:1f:9c:05:61:92:9a:39:d1:
f9:22:be:ed:ab:1b:38:29:11:ba:66:01:e9:c7:a7:40:22:fb:
7f:b4:72:f9:0b:be:b8:28:8d:68:3a:64:28:da:ba:10:58:00:
18:27:1e:1d:f8:ad:c9:44:39:c5:b5:43:e0:2d:a4:ea:38:73:
fd:d9:56:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:53:04 2025 by rpki-client