Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
File: RFc3PhpobWtZ7oXcN4mdBlMThuU.mft (raw, json)
Hash identifier: qDglSPS9bWZ1HIt4QzWIITmVJM2IEhE0bKE+Hi39zjg=
Subject key identifier: B8:3B:70:72:C1:B9:EC:F3:E4:4B:AD:7A:02:A2:87:CB:8B:D6:CF:3E
Authority key identifier: 44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
Certificate issuer: /CN=4457373e1a686d6b59ee85dc37899d06531386e5
Certificate serial: 019A72CA89FF2FF9845FC4A3AC6B8F31D1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
Manifest number: 049F
Signing time: Tue 11 Nov 2025 12:01:07 +0000
Manifest this update: Tue 11 Nov 2025 12:01:07 +0000
Manifest next update: Wed 12 Nov 2025 12:01:07 +0000
Files and hashes: 1: RFc3PhpobWtZ7oXcN4mdBlMThuU.crl (hash: NbOawH1Sa828vqdKruOAl5TJ/zOIfmlLwSCTeKUCBiE=)
2: XMirD3qG50TrikmGR0PujWf3jjs.roa (hash: iR/AZzWdddK7a5E0N2BfP3yz4LyY5Uji67zQAihWnBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:89:ff:2f:f9:84:5f:c4:a3:ac:6b:8f:31:d1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4457373e1a686d6b59ee85dc37899d06531386e5
Validity
Not Before: Nov 11 12:01:07 2025 GMT
Not After : Nov 12 12:01:07 2025 GMT
Subject: CN=b83b7072c1b9ecf3e44bad7a02a287cb8bd6cf3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:86:7d:f8:33:11:6d:ac:7f:a5:8a:0e:05:
59:de:9b:81:10:72:68:15:6d:9f:45:a7:d3:f8:43:
c5:b5:60:0b:19:9e:63:e7:cf:66:cc:7a:d6:9c:3f:
c3:ae:60:2f:58:ee:2f:60:f0:c5:58:02:82:27:52:
aa:0f:b7:7e:60:15:52:47:0f:cb:c3:46:9c:f7:86:
ba:9f:66:bb:60:20:a9:09:7b:fb:d7:c7:e8:58:a7:
be:8e:2a:86:62:63:48:d5:1f:63:eb:8a:c7:b8:be:
51:f9:20:d9:e2:67:d6:fa:61:70:6c:d9:57:f2:fd:
d8:0f:39:9c:17:19:af:4d:85:47:34:38:d9:30:56:
6f:55:88:39:29:5d:94:63:9b:df:42:7b:6e:ca:90:
b4:81:90:5d:ee:8d:d1:75:03:f5:76:e2:49:f5:8d:
b5:97:c1:f0:e6:e9:d2:01:2c:d2:78:73:00:8c:28:
6d:91:e1:8c:d8:56:7e:ad:76:4e:0f:7c:51:bc:90:
7a:13:58:98:7e:b8:f3:5a:f6:4d:ed:2d:39:1a:59:
88:80:73:c8:0e:7a:7c:af:82:8d:33:1a:b7:d0:08:
e3:41:58:7c:19:87:c8:3d:b5:a4:04:e1:b7:9a:46:
13:8e:4e:2e:74:c1:7e:15:45:d3:76:10:2b:56:54:
a8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3B:70:72:C1:B9:EC:F3:E4:4B:AD:7A:02:A2:87:CB:8B:D6:CF:3E
X509v3 Authority Key Identifier:
keyid:44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5f:8d:2e:a9:8e:dc:03:b8:d8:83:96:69:9c:3a:52:60:37:
79:a7:73:fe:a7:c6:7e:97:d6:05:63:16:a9:ae:10:64:46:74:
62:e6:18:a3:f9:01:9d:be:4d:bf:52:59:84:f4:68:20:6f:63:
0d:14:bb:f6:b7:8c:a5:5f:a0:d7:a2:c2:f7:d9:e3:eb:48:3a:
0a:a0:74:c2:8f:67:71:28:5b:66:b9:47:d3:34:7e:16:9b:0a:
51:4d:a1:c7:22:2f:a5:e1:e1:34:30:63:f7:67:93:d2:63:f0:
4e:44:09:3a:6f:d8:45:e0:09:ea:c6:63:cf:3e:9f:97:b5:dc:
25:35:6d:12:7f:51:80:3e:e7:38:e2:05:47:01:56:0e:24:1f:
5d:5f:5f:bf:66:0f:88:96:b3:1d:e8:b5:f3:15:53:17:b9:87:
58:b8:8d:a3:2d:de:d1:eb:97:37:47:44:56:4e:6b:50:8e:c1:
bc:b3:0d:ae:ae:c6:1d:b3:9e:f6:18:cf:b2:d5:6b:85:a2:3b:
3d:a7:5a:3d:d5:6d:ef:05:6e:2a:16:b5:69:dc:31:da:71:5e:
74:64:46:20:a6:b7:23:32:28:2c:35:9c:f8:ab:bd:7e:fd:e9:
f6:d8:81:0e:57:c8:8f:6e:9a:cd:5d:ed:3c:d6:b7:e8:83:b5:
f6:0a:08:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:28 2025 by rpki-client