Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File: F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier: xk8+JcLJPXQM8mKCQQd+a49OVIRywpH00DLD84Y6x7o=
Subject key identifier: D2:87:A0:37:28:FE:5E:63:C4:4B:36:1C:64:03:41:34:F3:76:E3:77
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial: 019897B75393DAD1B8090B0D232DEBB32B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number: 0E87
Signing time: Mon 11 Aug 2025 06:00:30 +0000
Manifest this update: Mon 11 Aug 2025 06:00:30 +0000
Manifest next update: Tue 12 Aug 2025 06:00:30 +0000
Files and hashes: 1: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: ycCFrb8cvUWbWrg1NdkMLC+rB42NLa7jsIkkDnLjyXs=)
2: sUbLpeFS3XLLLQIvzdPabGUHzHo.roa (hash: 3V72mhpNF2hyMt7Kyc3iG5tEZ6zvkVberiaxQXV1Hcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:53:93:da:d1:b8:09:0b:0d:23:2d:eb:b3:2b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Validity
Not Before: Aug 11 06:00:30 2025 GMT
Not After : Aug 12 06:00:30 2025 GMT
Subject: CN=d287a03728fe5e63c44b361c64034134f376e377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e5:4d:55:6d:3f:5f:20:aa:f3:9e:c8:f9:5a:
69:d7:7b:5d:fe:6b:2a:4a:91:d4:01:cb:32:c6:7d:
80:4e:e0:fa:9a:ac:ad:fe:50:74:f5:5f:2a:8e:99:
07:81:57:8d:c6:e9:c0:01:17:c2:d3:2e:fa:f3:e5:
f3:fd:7c:94:c0:53:fb:6f:cf:48:3d:70:44:ca:06:
f4:bc:be:70:9c:19:b9:12:88:1a:d7:a2:77:f0:55:
9e:3b:f4:37:69:ad:68:95:a0:ce:e9:19:4f:bb:6e:
e7:b1:57:e8:4e:96:ed:98:dd:20:ad:bc:fc:e3:d8:
c4:a5:1d:f6:1f:d8:67:95:02:72:1a:b5:2d:a0:8e:
5f:21:cd:41:58:5f:e3:b6:92:ed:12:6a:08:00:62:
42:e5:2f:4c:82:a3:4c:5e:e9:c2:7d:0a:04:48:aa:
cc:32:55:d8:e7:73:0d:b0:78:ac:d9:9a:1e:4e:cd:
7a:fd:b6:e7:0c:4f:a3:24:dc:9c:29:6d:4d:f3:4e:
ca:b7:33:7d:30:df:53:be:ae:53:19:8e:0e:85:5f:
d3:25:18:d5:e7:84:29:60:10:90:6c:95:f5:5d:3b:
57:2e:21:83:14:be:9c:d3:bd:52:93:27:30:eb:0a:
b7:66:74:40:34:18:38:47:97:0a:0f:6f:00:59:e8:
b7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:87:A0:37:28:FE:5E:63:C4:4B:36:1C:64:03:41:34:F3:76:E3:77
X509v3 Authority Key Identifier:
keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:64:a6:1e:95:bf:41:24:b2:12:be:a6:90:ff:60:9d:89:d8:
aa:c0:26:7f:8e:19:ed:bf:18:18:95:0b:54:a0:8a:1e:ea:22:
a9:0e:bb:32:40:1e:be:9a:54:cb:a0:b2:2c:33:d0:86:c4:4d:
b3:fc:2a:23:0e:5a:5c:12:63:7c:98:90:1f:df:32:20:9d:e6:
92:e3:09:00:99:ab:54:b2:65:53:9b:04:17:7c:75:ba:1c:4d:
43:d5:2f:56:38:67:14:c0:23:e7:ce:30:1c:fc:24:8c:2b:3b:
fc:b6:e7:ae:1e:ba:d3:12:dc:6f:e8:4b:a6:cb:ce:e2:b1:59:
6c:3e:1c:86:de:60:45:ef:a1:5a:96:e8:e3:3d:00:ed:25:8c:
3a:c1:d1:52:3b:16:c9:56:90:3c:5f:cd:9a:72:a4:b2:5d:c6:
99:88:40:5a:d4:85:ab:21:5d:62:dd:3d:59:dd:3f:8f:f4:a3:
64:42:a2:96:73:a9:ed:03:00:d9:7d:35:1b:ee:15:10:aa:46:
e3:cb:07:84:92:e5:22:0a:c3:40:f1:c1:4e:08:a2:c7:03:a6:
92:c5:72:89:fc:b6:fd:8f:4a:68:1d:71:04:6b:a7:f0:35:cc:
2e:87:65:49:ea:20:3d:bb:4f:7a:53:12:8e:6a:52:7b:e8:8e:
e3:40:db:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:50 2025 by rpki-client