Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File: F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier: KGjhLwgkyO6KPD9Q+qkM1IQbb6/QWmCC1Z73T1/UMLc=
Subject key identifier: 90:92:BF:A8:2E:CB:C0:4A:C1:50:6D:64:45:F6:CD:38:FC:ED:99:7C
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial: 019A53E429C9E833D9D67F9FED2CB75925EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number: 0F6D
Signing time: Wed 05 Nov 2025 12:00:53 +0000
Manifest this update: Wed 05 Nov 2025 12:00:53 +0000
Manifest next update: Thu 06 Nov 2025 12:00:53 +0000
Files and hashes: 1: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: W31M3VhIiZYOylb8y5w49b7OoKG2khmaWNVYiIl3Wu4=)
2: sUbLpeFS3XLLLQIvzdPabGUHzHo.roa (hash: 3V72mhpNF2hyMt7Kyc3iG5tEZ6zvkVberiaxQXV1Hcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:29:c9:e8:33:d9:d6:7f:9f:ed:2c:b7:59:25:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Validity
Not Before: Nov 5 12:00:53 2025 GMT
Not After : Nov 6 12:00:53 2025 GMT
Subject: CN=9092bfa82ecbc04ac1506d6445f6cd38fced997c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:93:df:5b:42:c5:97:59:be:4b:11:df:49:e4:
87:d9:c7:3c:59:86:5d:6d:54:e6:aa:80:10:fb:46:
a6:bf:73:2c:8e:c7:89:7d:a2:71:5a:18:3c:0e:0e:
59:8f:d7:b7:09:6b:e6:70:7f:bf:92:54:cf:e4:36:
dc:b3:e2:78:41:be:6b:2e:ae:1c:34:eb:8c:48:3a:
3e:6a:5e:39:f7:8f:8a:be:63:50:6e:d6:44:ef:49:
fd:34:53:90:7b:2f:c5:29:57:c3:7b:9e:9a:f7:75:
aa:91:d7:93:68:e1:e3:d4:f5:9f:7d:1f:da:62:b2:
26:20:75:ab:69:42:22:f7:f2:75:18:ca:de:4a:e6:
0d:3e:d8:32:5e:12:aa:31:a2:d8:48:25:86:d1:79:
57:24:f2:00:7a:11:47:77:ba:88:6f:29:40:39:e2:
3d:80:d1:05:c7:a4:be:54:60:a4:8d:ba:d8:cd:18:
56:dd:8b:b1:f8:cb:fe:a4:8b:62:ed:72:f8:f5:f8:
88:ae:bf:4d:55:40:74:ef:14:0c:9f:bf:89:7c:33:
63:d3:b0:ce:4d:17:ae:0a:24:e8:cb:78:07:d8:26:
12:ee:48:ec:90:e7:49:de:77:58:25:71:a6:65:88:
2f:bc:f6:f2:91:46:39:49:85:67:91:1a:67:48:6d:
ce:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:92:BF:A8:2E:CB:C0:4A:C1:50:6D:64:45:F6:CD:38:FC:ED:99:7C
X509v3 Authority Key Identifier:
keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:73:92:00:e4:95:02:25:da:ac:b9:dd:7d:47:30:e7:54:ae:
12:be:64:4d:fe:cd:cb:51:08:33:3c:f7:49:be:2d:f2:0b:c6:
ea:c1:f3:4b:1c:80:af:46:f5:7f:49:08:de:89:ef:ce:06:b6:
78:da:fd:3b:ad:b4:bd:4c:57:16:a5:b2:29:aa:93:28:55:3a:
f7:d1:25:70:bc:22:41:76:c9:5c:1d:09:b1:6d:60:01:8b:9e:
9c:b2:95:9f:59:dc:88:9a:f7:a1:17:fa:2b:8a:2e:3e:a2:3e:
2f:d6:69:7e:8a:ab:6b:c4:73:91:51:71:cb:2d:ff:45:e3:4f:
f0:86:6f:6b:14:65:4d:ed:17:0f:92:9a:f8:0c:c8:61:c5:1a:
96:3f:f1:6a:e2:cc:73:4a:a3:b2:ff:2f:80:e0:32:d1:24:49:
2f:4e:a6:54:3d:03:30:56:90:bd:f8:51:7e:b6:c8:b3:55:f9:
9b:9c:1e:7f:d0:14:1a:13:21:7f:23:65:29:19:5f:fb:70:a2:
28:f8:42:e1:e9:8b:d7:e5:cd:91:cc:03:91:28:06:52:04:22:
72:74:3a:53:90:46:4e:ab:db:e4:3d:d8:a9:3c:27:dc:14:84:
02:cf:66:a3:a4:1b:9e:fa:f9:c6:45:dd:59:6e:55:57:ca:cc:
0e:30:c3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:18:12 2025 by rpki-client