Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
File: _-Q3vK2brPo7drfdBFQTP7TYyz4.mft (raw, json)
Hash identifier: DVaZlv7TLhBA79Nu5/LRw4TyF/SjKdGYnzNcjRQgvPU=
Subject key identifier: 74:4D:5B:AD:BE:75:11:5B:35:F3:DD:1B:E6:DF:80:C2:D2:73:F0:2C
Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Certificate serial: 019A2A7A06EFE6FA804EFF9AAA0BEA98AD9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
Manifest number: F3
Signing time: Tue 28 Oct 2025 11:00:31 +0000
Manifest this update: Tue 28 Oct 2025 11:00:31 +0000
Manifest next update: Wed 29 Oct 2025 11:00:31 +0000
Files and hashes: 1: BLqnqYXfNpeDaXR1TT1NxALunTU.roa (hash: HiOoL5QoKyGrCXU+ZvFwDx1bHqF6go6OY2pLOukJd1s=)
2: _-Q3vK2brPo7drfdBFQTP7TYyz4.crl (hash: oSrHT50aBDcKZbQ5M/4tBOMAc1biRyRe78mh8HB49II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:7a:06:ef:e6:fa:80:4e:ff:9a:aa:0b:ea:98:ad:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Validity
Not Before: Oct 28 11:00:31 2025 GMT
Not After : Oct 29 11:00:31 2025 GMT
Subject: CN=744d5badbe75115b35f3dd1be6df80c2d273f02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:71:f5:2d:c0:b8:e7:10:b5:3f:f4:cd:5a:
0c:44:36:df:bf:8a:e1:89:74:a3:65:16:6b:11:a5:
da:b0:36:b1:a7:0e:ed:bd:28:6d:d3:13:f6:aa:48:
31:18:2c:87:5f:3f:a7:35:71:9d:73:4b:0b:0c:72:
e7:66:f9:13:9c:4d:db:02:47:d6:5f:0d:47:0b:76:
ad:1d:7f:03:6c:3a:a5:18:22:1e:8a:f3:cc:ba:0a:
61:27:73:5b:b5:ec:fe:16:44:a6:e3:0f:30:25:90:
77:8f:f0:af:96:69:0c:4f:51:18:eb:6e:40:e1:92:
5b:fa:62:29:32:02:f2:5c:f3:94:ad:64:43:11:50:
d5:09:b6:c5:6a:c7:9c:08:f1:96:9f:a7:eb:b9:38:
42:78:4e:90:5e:a2:ea:db:18:a1:9d:be:80:3a:17:
0f:f2:95:9b:86:6a:7e:33:40:e3:bf:43:06:18:df:
8d:70:0c:31:66:03:06:c7:b9:b5:40:98:70:ce:bd:
bd:2f:a3:bd:dc:9e:63:1c:03:98:bf:9f:d3:f5:ca:
f8:a0:8e:c3:4e:8d:b0:49:3e:2c:4d:b2:5f:39:fb:
49:ef:e4:bd:72:8a:f9:72:85:58:d7:11:ed:fb:88:
18:0a:35:e7:05:39:86:5f:c8:cb:cf:5e:e8:38:3c:
67:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4D:5B:AD:BE:75:11:5B:35:F3:DD:1B:E6:DF:80:C2:D2:73:F0:2C
X509v3 Authority Key Identifier:
keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:34:26:75:7b:cd:b1:bd:49:8d:2e:ef:28:2b:e8:b3:09:7b:
c2:10:f0:28:92:95:06:a9:c6:13:6d:d5:8c:d7:16:98:6e:b1:
61:90:8f:9d:2e:32:9e:7f:69:6c:f6:24:68:c5:50:f0:d3:08:
7a:90:b8:c6:8e:97:fc:f0:7a:af:2d:fa:8e:d4:29:b5:c9:23:
22:d2:41:30:3b:fd:83:57:bb:fe:4b:eb:cc:a7:e1:8c:0a:34:
40:2d:7d:37:23:fe:f4:70:8e:6f:80:6d:6c:44:64:f9:85:6b:
75:f8:2f:45:8a:b1:1b:d8:78:b6:86:a9:f0:a3:7a:a9:ed:a0:
a6:c9:18:61:2d:86:e1:c7:b0:6f:59:f9:ed:be:7c:57:ce:73:
b4:54:37:b7:16:64:b8:21:7b:9c:6b:9a:75:da:f7:b9:36:69:
8e:1a:13:5b:04:91:0c:b9:54:d1:c3:f2:c5:3c:75:48:13:ff:
b1:fa:b0:19:ab:75:85:55:a3:b8:50:74:fe:97:ce:ab:0f:69:
5e:27:a6:f3:99:7f:50:d8:25:da:7e:6a:59:fb:74:77:6e:d1:
3a:d5:23:4f:c1:8c:13:5d:38:8f:bc:e2:31:c3:c0:f3:06:84:
b3:95:3c:f9:c4:98:7f:61:3b:e4:e3:7f:b7:47:38:4a:c4:dc:
58:bd:97:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:03:23 2025 by rpki-client