Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
File: F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft (raw, json)
Hash identifier: Ipb7E76fF2hKUONjJMZWMR/MGCxjQ6LvxBf+1dkksaA=
Subject key identifier: 12:FC:18:0A:77:B5:09:1F:21:4B:DC:C7:B0:E5:6E:C4:A6:E8:C8:0F
Authority key identifier: 17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
Certificate issuer: /CN=177005177526d668e844b2a7a5a59ac64a495652
Certificate serial: 0199FB45C6F6029D8B4AC9E19892A8AC9BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
Manifest number: 063D
Signing time: Sun 19 Oct 2025 07:01:18 +0000
Manifest this update: Sun 19 Oct 2025 07:01:18 +0000
Manifest next update: Mon 20 Oct 2025 07:01:18 +0000
Files and hashes: 1: F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl (hash: O+b8wmM8gZLu5qUg3u0SnOCAgq7dpyxUqtUFytiXnBs=)
2: mF32KrmR7qkPWXVgQfXewbxtOHE.roa (hash: iXEGOcbHzPC+9l+k6XZzUAzgZY6fYnZW9+XlT/82/iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c6:f6:02:9d:8b:4a:c9:e1:98:92:a8:ac:9b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177005177526d668e844b2a7a5a59ac64a495652
Validity
Not Before: Oct 19 07:01:18 2025 GMT
Not After : Oct 20 07:01:18 2025 GMT
Subject: CN=12fc180a77b5091f214bdcc7b0e56ec4a6e8c80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:e2:13:c4:4b:1d:ef:75:5f:df:30:4b:fd:
db:7d:49:dd:99:b6:50:c4:14:ee:ae:86:bc:98:c2:
ec:22:b0:84:fc:eb:96:c1:d2:f2:22:68:6d:5f:1a:
57:29:57:9d:8b:01:4f:8a:0b:fc:28:43:89:c8:16:
e1:ba:1e:39:a2:5f:4a:b5:0a:8e:a2:9c:4f:75:12:
a8:7a:22:a8:1b:dc:2d:82:03:67:5b:d8:88:84:03:
95:28:35:31:61:b5:88:1b:e2:6c:a7:37:06:17:62:
60:4d:a4:1a:69:fd:b2:8d:8e:37:fb:7b:de:5d:f7:
b2:25:70:e3:f0:63:5e:15:91:62:af:4d:f9:2b:d8:
d0:40:56:70:84:5c:cd:39:ea:b5:27:c5:66:52:b3:
c7:72:2f:ed:91:22:fd:14:3e:c9:36:4f:d0:af:b7:
98:96:36:1a:1b:df:5c:04:03:64:d0:e2:65:c1:86:
1a:54:69:d1:df:0f:6d:e1:b0:8b:61:8e:0d:28:d4:
99:fd:bd:fe:0c:aa:1e:0d:67:55:6e:93:53:c3:01:
ac:0d:48:08:14:fc:4d:71:c4:d3:97:0a:6c:d5:cc:
41:5f:a7:6f:e2:bf:0c:c2:c3:7f:48:9d:e3:05:01:
30:22:14:e5:ea:9d:b9:d2:eb:4b:f5:6b:1e:ff:e9:
22:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FC:18:0A:77:B5:09:1F:21:4B:DC:C7:B0:E5:6E:C4:A6:E8:C8:0F
X509v3 Authority Key Identifier:
keyid:17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:84:f1:bd:f4:a4:ca:52:0a:56:c2:26:a8:86:fc:be:ec:da:
db:cd:1c:45:d5:60:b7:16:9f:b5:9a:ab:6c:e5:91:37:b5:7b:
29:d9:91:93:28:a3:b5:d2:b0:06:a2:a5:9b:1c:10:89:8c:1d:
28:a0:a7:46:b9:6b:40:81:4f:3f:c3:41:f2:dc:80:8f:93:87:
53:81:69:02:a6:bc:e6:ab:26:8f:c2:5d:d9:43:b2:37:64:29:
b5:f6:0b:bb:50:02:02:6c:b5:1e:07:36:28:99:74:7c:aa:a9:
ca:9c:87:3a:37:f6:14:e4:c0:9a:e8:5a:37:b6:87:37:de:b6:
c3:d2:ba:45:f3:36:e1:cf:83:77:3b:ad:f2:79:66:d8:58:1c:
b2:fc:20:6d:24:7a:fe:53:2a:f9:cc:c6:76:dd:57:07:d7:dc:
00:de:45:af:99:30:2c:1b:47:4b:fd:57:74:cd:62:a2:7e:a5:
f4:fd:78:ee:78:75:17:fc:2b:1e:36:d5:d9:9e:18:6b:2a:80:
e9:72:3f:51:ee:db:36:2a:07:88:83:ab:b2:b0:f3:54:5c:66:
ee:b4:16:07:74:5e:9e:99:b8:15:69:09:b0:95:72:25:d3:c7:
96:b9:8c:b2:49:b9:30:2d:9f:40:0e:bc:9e:3a:ff:ee:93:6c:
62:00:94:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:54 2025 by rpki-client