Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
File: F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json)
Hash identifier: ixDSYhiSQw7dMRnageiDkRf2fpt3YWoE6PApVpxkzck=
Subject key identifier: FF:95:44:9A:E6:FF:27:7D:47:1D:3D:E6:CD:77:3C:36:36:E0:C4:2C
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial: 019A4CCEB6117DBD612266137120D3A8EBF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
Manifest number: 0FE0
Signing time: Tue 04 Nov 2025 03:00:06 +0000
Manifest this update: Tue 04 Nov 2025 03:00:06 +0000
Manifest next update: Wed 05 Nov 2025 03:00:06 +0000
Files and hashes: 1: DObJc8p-7Ot6mwqf9iAdMs4hyyE.roa (hash: qMkiFXi4/th5qH5SWqQAS6g0Gmc+b0OVu7qmP7GVojA=)
2: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: ezXBqj3tF83Xml/P2Y7bwqOH1wthskZggZLf2s1ImnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 03:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:ce:b6:11:7d:bd:61:22:66:13:71:20:d3:a8:eb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Validity
Not Before: Nov 4 03:00:06 2025 GMT
Not After : Nov 5 03:00:06 2025 GMT
Subject: CN=ff95449ae6ff277d471d3de6cd773c3636e0c42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:e0:c3:bb:43:a7:5d:f7:11:7b:14:f4:ca:
7d:da:2e:6e:14:56:2e:90:e7:78:c4:1e:7c:6f:94:
63:27:e1:ca:78:21:94:09:67:e1:32:39:56:bd:00:
15:a0:a7:ff:d5:1c:ec:b5:f7:8c:85:38:29:c8:d3:
10:b8:f8:3a:e4:2c:94:bf:fd:56:6c:44:58:70:9c:
d4:bc:61:c7:e6:f7:ee:8c:70:ae:70:51:4a:99:01:
6a:0a:9a:e4:11:90:2a:db:52:9e:88:86:e7:a4:72:
a2:11:be:9f:cb:d5:ec:49:3d:2b:f3:79:65:c4:b4:
25:19:12:30:6b:84:bd:5b:98:e7:ff:2a:40:4c:64:
cf:19:81:df:ff:03:a2:e6:36:6d:27:38:3c:07:bb:
99:a9:87:8e:d0:d4:e4:81:8a:ef:b0:a6:ab:82:ca:
47:9e:79:0d:b3:30:ee:f2:30:76:bd:a6:ad:5d:42:
0f:33:fc:18:48:eb:01:7c:9c:fb:bc:ba:b6:63:a6:
83:89:97:92:28:de:6c:f2:cc:db:00:8d:c8:26:f0:
84:b2:a7:f0:82:4b:61:90:79:8b:96:dc:4f:c5:61:
74:4f:19:32:5d:2e:19:c0:fa:59:92:17:63:29:98:
87:54:fd:56:5b:71:f9:18:94:e7:01:e8:ad:1b:b2:
c8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:95:44:9A:E6:FF:27:7D:47:1D:3D:E6:CD:77:3C:36:36:E0:C4:2C
X509v3 Authority Key Identifier:
keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f8:8b:63:72:e8:72:78:bb:a1:73:c6:f6:01:21:d5:6f:d8:
7d:c1:ac:19:7f:db:e4:05:19:e0:77:00:5b:14:91:cb:d8:c8:
45:bf:7c:71:69:9b:35:4b:a2:d0:f8:8d:91:a2:32:f7:e1:6a:
6d:c8:10:f6:0a:1b:38:8b:a5:3c:86:10:c8:eb:aa:0b:83:77:
0e:af:bd:6d:ca:a8:1d:f7:8d:25:0e:26:7f:fe:9a:ed:d7:31:
d4:3b:8d:a9:a3:74:f6:c2:0d:b8:c0:b7:bf:db:1a:f9:71:1a:
55:78:03:b0:95:4f:a0:e2:f0:2c:20:3e:99:a7:df:01:65:ea:
a1:7e:40:15:72:79:ea:ef:ee:ac:20:03:a7:39:a4:80:ec:7a:
99:a6:18:6d:c3:87:20:ae:44:11:32:eb:96:51:77:02:d3:7a:
3a:1e:e3:25:65:60:2e:c7:a0:a2:82:f9:db:cc:02:86:6f:f0:
93:16:f0:b9:93:67:59:8d:3c:e2:54:e1:7d:80:5c:0c:b1:94:
85:10:94:06:e0:8e:7e:86:5d:0a:2f:8f:9e:73:a7:74:2f:ab:
c6:99:66:21:ad:d8:61:da:93:21:e7:90:a5:c4:0a:c0:8c:65:
ca:c1:a8:52:36:bf:a0:00:71:7d:5b:87:b2:01:d2:43:88:cb:
ba:19:8a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:49:46 2025 by rpki-client