Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
File: F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft (raw, json)
Hash identifier: QzmF55pyqdQXBjNBcG+v7TgZhgpuOv0QfcnAiBcxmxk=
Subject key identifier: 68:B7:79:7A:D6:54:26:A2:72:5C:3E:F8:B5:4D:30:84:38:CC:5D:0E
Authority key identifier: 17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
Certificate issuer: /CN=177005177526d668e844b2a7a5a59ac64a495652
Certificate serial: 0197B9D93338DDAD365F358943B55669DEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
Manifest number: 0512
Signing time: Sun 29 Jun 2025 04:01:48 +0000
Manifest this update: Sun 29 Jun 2025 04:01:48 +0000
Manifest next update: Mon 30 Jun 2025 04:01:48 +0000
Files and hashes: 1: F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl (hash: 3QG9pNJKvCM/npvfcLUf2otNqJzpeFVy2KNy3X8a0TA=)
2: mF32KrmR7qkPWXVgQfXewbxtOHE.roa (hash: iXEGOcbHzPC+9l+k6XZzUAzgZY6fYnZW9+XlT/82/iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:33:38:dd:ad:36:5f:35:89:43:b5:56:69:de:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177005177526d668e844b2a7a5a59ac64a495652
Validity
Not Before: Jun 29 04:01:48 2025 GMT
Not After : Jun 30 04:01:48 2025 GMT
Subject: CN=68b7797ad65426a2725c3ef8b54d308438cc5d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b4:b0:b8:11:6c:3e:73:c5:7c:b5:28:a2:c8:
84:53:15:82:f1:3d:79:93:43:9c:5c:6c:12:85:2a:
e1:c8:42:7d:bf:ea:fb:6e:e6:53:05:61:a7:b1:c7:
cd:64:df:8e:62:8c:66:c9:12:41:91:a8:c8:76:2a:
1c:34:54:cf:63:31:33:55:1f:f0:b4:84:9a:67:a9:
ec:5b:e6:9f:f9:e5:da:1f:6d:60:25:53:2d:84:de:
67:f6:ba:92:30:3c:74:0b:d2:ee:76:fd:e0:44:02:
b2:b0:a8:ea:7f:42:56:81:fa:93:d5:c2:0e:e1:29:
e6:4b:52:67:ce:5f:f5:a6:1a:81:5a:ce:e8:36:4a:
c3:58:08:ee:6c:e6:95:be:e4:92:41:23:70:fc:1f:
18:69:f0:e4:5d:8e:5b:a5:c0:63:52:e2:25:e7:5f:
05:8b:a5:3c:2e:84:a3:51:0b:63:a0:09:1e:77:f8:
21:02:93:18:54:83:f6:08:5f:5a:d4:26:92:5c:6a:
2a:c5:db:79:c7:2b:f4:97:2c:98:11:4a:a8:2a:36:
c4:7f:5b:56:02:cb:b2:02:ef:e6:6f:f1:43:c0:b2:
30:63:ca:9d:31:1d:f9:14:e5:b4:9b:84:ca:bb:1f:
ac:94:58:a4:7a:d4:ab:78:5d:aa:b4:7c:b9:e1:5e:
ec:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B7:79:7A:D6:54:26:A2:72:5C:3E:F8:B5:4D:30:84:38:CC:5D:0E
X509v3 Authority Key Identifier:
keyid:17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:22:61:43:79:8c:d7:44:28:3d:0f:c1:de:32:6c:3e:8c:82:
90:0c:84:01:ad:5f:09:57:8f:0e:fc:7b:49:7b:9d:d9:6d:3c:
61:f7:92:c4:43:37:e3:bf:62:07:b5:d0:57:b0:74:2c:b9:64:
b7:b2:dd:b5:56:36:0b:84:eb:ca:40:d5:d6:41:a3:3b:66:a8:
ed:2d:68:7f:6e:07:3e:a9:26:71:2f:11:4c:2a:d9:76:9a:4d:
11:32:84:87:3c:a1:d8:bc:48:82:c5:32:07:1e:b5:7e:87:9e:
24:49:9c:72:60:39:ba:dc:77:3d:d6:1f:17:7c:d0:b4:9a:82:
a5:fe:d2:3b:1d:25:48:f0:c4:ac:3a:54:e8:60:e6:95:27:42:
1b:3a:25:b2:8e:9e:49:46:76:e1:6d:b6:9d:0f:18:e3:d7:f8:
9a:95:70:55:10:8c:17:4d:48:5d:65:c3:b9:a7:49:39:35:db:
c4:b2:0a:c9:07:4e:2e:ef:d7:32:5a:61:97:47:a6:7d:cf:ea:
56:59:91:ff:10:f2:0e:8f:4f:e2:bf:a4:36:64:f7:1e:77:31:
49:d2:de:ae:42:1a:31:a9:92:93:f4:6e:06:d6:08:f0:7b:5b:
26:f9:59:d6:2d:dc:b6:3f:ed:44:99:a7:06:cd:66:42:c3:7f:
be:e0:31:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:07:13 2025 by rpki-client