Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
File: F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft (raw, json)
Hash identifier: w0VQcxntTdmkPwm/3N+rAbfcTpwPEpRN2d8jhGRLeFI=
Subject key identifier: E1:0C:62:69:42:31:5D:1F:C5:BD:8D:B8:39:B4:0F:17:4A:CC:07:7E
Authority key identifier: 17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
Certificate issuer: /CN=177005177526d668e844b2a7a5a59ac64a495652
Certificate serial: 019A4E4F80749800E5095315DB0A208D6982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
Manifest number: 0668
Signing time: Tue 04 Nov 2025 10:00:24 +0000
Manifest this update: Tue 04 Nov 2025 10:00:24 +0000
Manifest next update: Wed 05 Nov 2025 10:00:24 +0000
Files and hashes: 1: F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl (hash: 5QgifKLsIkrESPupeUXwnUG20g7eAWHaYM6uj51AohQ=)
2: mF32KrmR7qkPWXVgQfXewbxtOHE.roa (hash: iXEGOcbHzPC+9l+k6XZzUAzgZY6fYnZW9+XlT/82/iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:80:74:98:00:e5:09:53:15:db:0a:20:8d:69:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177005177526d668e844b2a7a5a59ac64a495652
Validity
Not Before: Nov 4 10:00:24 2025 GMT
Not After : Nov 5 10:00:24 2025 GMT
Subject: CN=e10c626942315d1fc5bd8db839b40f174acc077e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:67:c4:42:f3:d2:12:2c:0c:72:a0:c8:7e:
d3:77:0c:f5:35:00:03:77:ea:a0:98:58:20:8a:58:
f9:27:6f:01:7c:0f:08:d2:22:2a:23:6a:8b:dc:80:
a6:9a:00:41:04:93:7a:25:84:4f:cd:48:e1:aa:c4:
bc:2b:5b:41:4a:88:3f:b2:2f:60:76:99:4f:f5:aa:
77:2d:8a:ab:18:51:69:f3:7f:de:02:94:d8:e3:88:
9e:b5:bf:21:a4:03:82:59:2e:e0:86:05:32:4f:ae:
c7:5c:53:51:58:4f:06:b7:fa:08:48:e0:3f:05:42:
41:36:8e:ab:38:55:6a:55:b3:15:56:a3:0a:95:3c:
f8:31:98:62:e3:87:8b:56:69:f3:86:99:a5:18:af:
59:5c:7f:51:e5:c5:b7:d3:3a:e3:ff:f1:b9:13:2c:
a6:e8:4c:53:da:4c:56:81:6a:d0:62:33:09:14:b8:
69:7e:6c:e7:03:71:ab:3f:75:b1:b3:18:61:39:23:
ca:57:63:bb:c9:0a:2f:f5:48:ed:9a:91:8e:40:55:
5f:6b:82:fd:26:4e:7b:db:0e:58:5a:5a:b2:5d:bb:
da:b2:da:32:1c:64:48:4d:15:f2:b1:47:de:3d:d8:
f1:3b:25:db:e0:07:77:27:07:03:c9:b6:61:89:f8:
b4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0C:62:69:42:31:5D:1F:C5:BD:8D:B8:39:B4:0F:17:4A:CC:07:7E
X509v3 Authority Key Identifier:
keyid:17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:15:4f:5b:3e:67:45:c6:b1:d0:bb:f9:ca:9a:95:7a:ae:b8:
bf:52:01:1a:aa:c3:c1:6e:c5:da:16:0f:a1:a9:bc:4e:1d:25:
c5:9f:6e:0a:5c:cf:d3:27:29:51:9b:17:b4:c7:26:09:2c:e5:
4f:0b:19:a2:91:33:f0:ae:dd:95:81:bb:58:69:cb:10:14:81:
8e:78:46:d8:58:75:b0:cc:36:4a:d7:e2:80:cd:4f:13:3d:8d:
e9:ab:10:49:61:6b:3b:c5:30:06:84:d2:93:23:b8:46:93:0b:
ab:dd:c5:e2:0e:52:eb:dc:55:cf:7c:8b:1d:7a:b9:ec:df:8b:
37:57:08:91:a5:b4:72:51:b9:1d:e0:c7:df:a4:7a:9f:97:de:
b9:d9:0d:79:ff:dd:65:76:8e:51:b4:dd:63:4a:b9:b1:4e:aa:
12:c0:d4:74:64:91:42:14:24:c6:b2:14:6c:22:48:19:a5:84:
5c:5c:67:64:a4:ee:e3:f1:8e:f1:63:e1:56:45:d2:1b:04:f4:
9d:35:bd:90:84:8b:12:92:e5:c7:6a:3d:e4:84:2c:83:de:94:
de:5b:54:88:a6:51:07:1a:ee:05:ab:91:77:8e:d6:fd:bd:c7:
73:d4:dd:1f:77:f1:e2:10:36:09:0a:9f:e6:e8:f3:84:3a:29:
50:2f:9c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:38 2025 by rpki-client