Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
File: RFc3PhpobWtZ7oXcN4mdBlMThuU.mft (raw, json)
Hash identifier: Kj19UX6MlAGwpORZ6quGHZbz3A3ftXO5wdKdxtZawsI=
Subject key identifier: BA:4E:3F:12:4D:24:9C:F8:1B:AD:2F:FA:56:7C:88:AE:98:0D:B1:C1
Authority key identifier: 44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
Certificate issuer: /CN=4457373e1a686d6b59ee85dc37899d06531386e5
Certificate serial: 019922C31DF7843757556F5CEE0B63E7546E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
Manifest number: 03F1
Signing time: Sun 07 Sep 2025 06:00:36 +0000
Manifest this update: Sun 07 Sep 2025 06:00:36 +0000
Manifest next update: Mon 08 Sep 2025 06:00:36 +0000
Files and hashes: 1: RFc3PhpobWtZ7oXcN4mdBlMThuU.crl (hash: Bj6auTMhqsh4BffK58+75R2B2QSS0Pa7O8Wx++ms2PE=)
2: XMirD3qG50TrikmGR0PujWf3jjs.roa (hash: iR/AZzWdddK7a5E0N2BfP3yz4LyY5Uji67zQAihWnBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:1d:f7:84:37:57:55:6f:5c:ee:0b:63:e7:54:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4457373e1a686d6b59ee85dc37899d06531386e5
Validity
Not Before: Sep 7 06:00:36 2025 GMT
Not After : Sep 8 06:00:36 2025 GMT
Subject: CN=ba4e3f124d249cf81bad2ffa567c88ae980db1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:67:c9:76:b1:ac:8e:f1:7b:f5:e0:f1:da:77:
f6:bb:53:d5:93:86:2d:3a:7f:83:01:df:26:ee:be:
fc:63:85:b7:e9:29:a7:b0:54:e8:05:e2:01:17:4d:
b1:f8:9c:90:a9:ce:46:b8:61:16:c6:17:2b:40:8f:
59:90:a0:42:fc:41:6b:82:4e:df:07:ad:cb:be:7a:
ea:e5:fa:e7:7c:38:5d:b5:15:52:75:fd:36:e2:04:
49:d4:79:a9:12:03:74:4d:70:1c:f4:0f:5c:f7:64:
67:69:5c:11:40:7d:a8:96:cb:9c:80:04:5c:05:64:
9c:6b:b3:c3:88:9e:57:88:e0:db:57:d1:4d:fb:4d:
05:06:01:56:75:9d:bd:c7:76:a0:41:7f:d4:af:a6:
df:da:26:50:d1:9c:6c:72:96:99:c9:30:e3:6a:95:
21:a1:68:16:66:f1:6f:69:de:08:db:6e:6d:dc:cf:
4f:36:1a:65:36:b8:7a:b3:20:ab:fa:d7:29:bd:b7:
af:3e:44:11:ff:05:28:ef:9c:26:72:06:bc:30:91:
ed:15:8c:4d:b9:ec:b6:77:bd:5c:a4:72:84:28:53:
cf:e2:44:4e:73:64:42:6b:b5:a3:cf:a1:ab:46:cd:
10:28:53:79:9c:0a:d4:59:45:9e:0f:da:0c:37:fc:
1b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4E:3F:12:4D:24:9C:F8:1B:AD:2F:FA:56:7C:88:AE:98:0D:B1:C1
X509v3 Authority Key Identifier:
keyid:44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:af:3a:77:f2:f2:64:9d:a8:ee:57:8c:f7:59:b7:b5:3e:f5:
0c:9a:d0:48:bd:6f:a4:52:92:92:d3:6c:a8:96:e4:fd:13:33:
82:ab:dc:2b:9c:6f:dc:c4:55:c7:d4:39:e2:db:32:d9:b6:33:
89:35:c5:10:96:6c:e2:5f:e8:47:81:e6:39:6d:4c:59:ed:98:
4b:e4:96:77:3f:b7:98:2a:eb:8e:d8:88:14:ca:37:0b:6a:0d:
44:d0:e1:2e:5f:ec:e0:7b:97:a2:8d:8a:83:28:40:c8:40:00:
58:28:41:97:3d:01:b8:4c:49:c3:ca:ac:0b:27:04:d1:12:99:
19:07:6e:3b:9e:1e:9c:de:e1:0a:fa:67:94:a9:de:13:5a:3e:
cc:39:47:68:e6:71:07:47:6f:4e:88:0e:95:78:56:59:48:42:
46:e2:fe:cd:d5:8e:9d:be:9d:9e:b1:dc:5f:e2:35:51:eb:55:
2a:7f:38:53:16:a9:89:7f:37:a3:d5:29:00:3a:0c:a2:23:70:
4c:2c:6d:84:e2:94:b5:38:ca:ba:17:39:53:42:8e:e3:21:e3:
b6:ef:40:65:66:01:96:db:e8:c8:1d:ed:eb:d0:ab:b8:48:d1:
49:a1:d9:4c:90:67:27:83:41:fc:1b:16:55:94:e4:a7:36:70:
d9:2e:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:13 2025 by rpki-client