Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
File: F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft (raw, json)
Hash identifier: aZ1jCUHXqhBY7iiSG0QZucmb/hCPaQ5e1gWJ7vkAmhU=
Subject key identifier: 48:EA:A6:8F:5E:19:5B:EF:FD:65:AB:8E:B8:C7:6E:9D:B3:FA:68:90
Authority key identifier: 17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
Certificate issuer: /CN=177005177526d668e844b2a7a5a59ac64a495652
Certificate serial: 01989034FBA6D37D43150938A903D5565E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
Manifest number: 0581
Signing time: Sat 09 Aug 2025 19:00:48 +0000
Manifest this update: Sat 09 Aug 2025 19:00:48 +0000
Manifest next update: Sun 10 Aug 2025 19:00:48 +0000
Files and hashes: 1: F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl (hash: 4PtRUqPk0ni0LzIcZJICeKR42TVFOktRmBPjDvJDb7I=)
2: mF32KrmR7qkPWXVgQfXewbxtOHE.roa (hash: iXEGOcbHzPC+9l+k6XZzUAzgZY6fYnZW9+XlT/82/iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:fb:a6:d3:7d:43:15:09:38:a9:03:d5:56:5e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177005177526d668e844b2a7a5a59ac64a495652
Validity
Not Before: Aug 9 19:00:48 2025 GMT
Not After : Aug 10 19:00:48 2025 GMT
Subject: CN=48eaa68f5e195beffd65ab8eb8c76e9db3fa6890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:0c:dd:0d:ff:6a:2d:fc:f2:38:4d:45:65:
9d:66:6d:71:64:36:0d:e3:f9:df:10:86:8a:11:9c:
c2:14:e1:c0:6c:b1:1e:a0:b3:eb:03:1f:94:5d:d4:
31:30:d0:45:be:91:29:4b:44:42:76:f5:a5:c6:82:
e8:bb:4d:cb:4f:7e:75:67:0e:90:7e:52:f8:29:1b:
40:b6:d3:ed:d1:07:16:1c:6e:6a:3a:5c:70:6c:a6:
cc:bd:3b:e2:58:db:f8:45:1d:85:11:a9:2d:e3:85:
a1:d5:ec:02:c1:ff:47:08:73:86:0f:b1:c7:f5:5f:
f9:29:b2:6f:59:19:d9:7d:69:3f:8a:27:c1:9e:09:
83:41:f9:56:31:1c:1a:c3:87:30:bc:f6:5d:93:09:
13:27:4d:60:bd:67:ea:df:b0:58:e8:83:4a:2f:a8:
f5:83:ec:04:7f:a4:3e:30:2a:de:92:b8:41:ba:d8:
13:b8:c2:9f:57:c5:20:09:a6:d7:02:bb:38:50:b1:
c1:98:4f:ce:d8:3d:bc:63:5a:b3:10:5d:5b:2f:47:
0c:fe:cf:c7:f0:8b:d8:60:1e:0b:79:26:b4:25:6a:
88:91:47:c5:4b:c4:21:b3:45:79:d8:16:fc:40:48:
89:6c:34:f5:3d:8d:77:05:3e:d1:44:31:b0:b7:7f:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EA:A6:8F:5E:19:5B:EF:FD:65:AB:8E:B8:C7:6E:9D:B3:FA:68:90
X509v3 Authority Key Identifier:
keyid:17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b5:e1:d0:b0:fc:65:a4:a2:04:29:bb:de:b6:12:56:68:5a:
b8:93:cc:a8:70:6f:d6:ee:02:b0:45:4b:a8:7a:a4:83:fe:03:
06:bd:52:71:7c:cb:56:d0:c9:d7:fc:00:e7:4f:bd:41:77:9e:
74:60:85:2a:4e:67:74:aa:9a:9e:7e:5d:c2:5a:2e:f5:65:90:
5d:60:92:01:12:c0:1b:08:bf:21:5a:78:13:de:1c:e1:3d:a0:
66:56:e9:8c:f7:db:be:cd:0d:16:c1:44:5e:ab:88:d8:84:74:
4a:8d:dc:1d:e0:d5:ae:80:44:01:4d:a9:79:20:ab:00:55:2a:
e0:67:61:38:99:26:e5:c7:9b:ad:50:e8:81:0d:80:d9:7f:ee:
61:a1:8c:da:8c:5a:e4:fc:b0:24:4f:10:42:53:84:ca:5b:ef:
42:bb:ff:e3:93:bd:f7:39:7f:83:ad:e2:5f:d2:3f:6b:97:b9:
d7:ee:0c:28:2c:87:67:20:5b:4d:a8:6b:eb:c9:f3:0d:e0:a9:
c2:73:63:6d:0c:13:7f:79:20:e9:d3:66:94:f2:47:7e:7d:d7:
10:f9:c0:77:c8:ed:be:18:00:06:c1:45:af:af:69:75:e4:5c:
8e:b6:f0:b3:e2:e2:3f:6a:2d:63:a1:14:e5:b9:55:09:ac:f5:
18:f6:c9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:54 2025 by rpki-client