Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File: F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier: 5WneNMs7Wz8yiZzPf/m2Xa/9AqeBJfGDPcKczGnIVTc=
Subject key identifier: 6D:78:80:11:CE:9C:3A:27:20:7B:C3:E7:02:4F:BB:E4:5A:7F:D4:4B
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial: 019922C35206CEBC3C1479F668AC89FAD11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number: 0ECF
Signing time: Sun 07 Sep 2025 06:00:49 +0000
Manifest this update: Sun 07 Sep 2025 06:00:49 +0000
Manifest next update: Mon 08 Sep 2025 06:00:49 +0000
Files and hashes: 1: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: Tq0MAkUPxZAiMTirqwQkEB8BFVdqFeRU9y2Y9rOT99k=)
2: sUbLpeFS3XLLLQIvzdPabGUHzHo.roa (hash: 3V72mhpNF2hyMt7Kyc3iG5tEZ6zvkVberiaxQXV1Hcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:52:06:ce:bc:3c:14:79:f6:68:ac:89:fa:d1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Validity
Not Before: Sep 7 06:00:49 2025 GMT
Not After : Sep 8 06:00:49 2025 GMT
Subject: CN=6d788011ce9c3a27207bc3e7024fbbe45a7fd44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:79:f4:62:5b:4c:5d:1c:1f:10:84:17:50:49:
6e:8b:4a:22:1b:70:8d:c5:93:1c:01:ec:eb:20:5d:
5a:d9:9d:e3:08:74:61:a9:fb:4d:1e:c0:b3:6e:23:
32:cf:9f:2c:f2:da:7e:b4:b7:81:19:66:57:b5:2a:
55:93:ef:97:2f:d2:f3:0f:aa:23:16:4d:c4:8f:0d:
a2:09:6b:ff:d9:0e:f1:1a:9c:74:2e:e0:77:eb:7b:
bb:ab:c1:0d:38:17:cf:07:1b:b4:36:20:1d:d4:fc:
93:5f:ed:c7:4d:dd:a4:13:bb:14:37:df:58:13:f6:
13:29:e1:23:42:a4:46:cd:e0:db:85:16:cc:07:c7:
a1:58:35:47:49:99:fa:22:15:cd:55:ac:67:ea:2f:
2e:52:3c:41:d7:54:03:95:61:f6:fd:fa:f1:85:21:
77:44:e5:86:7a:fd:bc:1f:9d:20:92:f6:ff:db:e2:
41:4e:67:d2:ee:e6:83:9b:a3:64:72:cf:94:c3:b3:
6d:f8:6a:93:66:87:bf:e0:a9:db:84:74:93:09:6f:
a7:82:d5:66:33:f8:c0:18:cb:35:59:e5:4f:fc:91:
33:d7:b6:db:14:71:d4:04:2a:34:11:9b:2a:c7:77:
45:5b:55:e1:d5:37:73:74:3c:ab:fd:d6:54:4b:a2:
c2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:78:80:11:CE:9C:3A:27:20:7B:C3:E7:02:4F:BB:E4:5A:7F:D4:4B
X509v3 Authority Key Identifier:
keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0f:d6:fc:4f:76:00:7d:88:b3:57:77:75:b2:5c:ca:56:69:
88:c1:aa:fc:4e:d8:be:09:8e:b7:49:f5:6d:08:ed:a5:7e:2d:
ba:10:2f:12:07:51:69:eb:e8:ba:36:93:8f:0f:6b:8d:44:0f:
98:a8:94:b2:96:ad:cf:01:f0:65:08:9d:a3:e1:b4:ee:70:3b:
05:29:12:f7:77:13:5c:be:ab:e3:27:31:56:e1:83:0a:15:36:
0d:a1:60:d3:0c:a8:86:25:0f:f4:05:a0:b6:02:02:cc:62:31:
61:15:be:d7:2d:ae:9c:d9:8e:26:f8:ab:c2:7f:02:f1:b3:ba:
74:a8:2f:bd:84:9f:2f:cb:af:81:97:d5:f5:63:00:cd:95:10:
2f:d7:0b:0e:13:60:70:d4:95:0c:6a:1d:59:8b:e1:1f:e5:58:
28:ac:7d:c2:57:30:25:f9:50:83:4a:16:83:a0:13:39:1c:24:
06:79:00:b5:92:e8:73:3a:e8:86:50:c0:44:1c:47:0d:a8:35:
ab:44:f2:ac:46:b3:ff:de:f7:57:73:1e:2a:ad:5c:95:c1:90:
4c:39:2c:10:b9:9d:a2:9f:8e:7b:52:9d:70:94:00:13:48:b1:
49:b3:54:d7:f2:ae:c1:08:5e:8c:0f:ad:a2:1a:cc:f2:e0:4c:
9d:df:29:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:33 2025 by rpki-client