Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
File: F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft (raw, json)
Hash identifier: SojeRKnaVHkvrX2+w9w1B2gcgAdc5Rdg8zSB7iWENDU=
Subject key identifier: 89:3A:F9:31:58:03:F3:1A:85:43:14:47:C7:80:5D:00:72:15:49:FD
Authority key identifier: 17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
Certificate issuer: /CN=177005177526d668e844b2a7a5a59ac64a495652
Certificate serial: 0198D5BBAF483DDA0941540AC6F12726409B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
Manifest number: 05A5
Signing time: Sat 23 Aug 2025 07:01:43 +0000
Manifest this update: Sat 23 Aug 2025 07:01:43 +0000
Manifest next update: Sun 24 Aug 2025 07:01:43 +0000
Files and hashes: 1: F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl (hash: 2DhE6JdEND7abYzBniO1XAWS8H2Pa0OA/W2jX8Bkj8I=)
2: mF32KrmR7qkPWXVgQfXewbxtOHE.roa (hash: iXEGOcbHzPC+9l+k6XZzUAzgZY6fYnZW9+XlT/82/iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:af:48:3d:da:09:41:54:0a:c6:f1:27:26:40:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177005177526d668e844b2a7a5a59ac64a495652
Validity
Not Before: Aug 23 07:01:43 2025 GMT
Not After : Aug 24 07:01:43 2025 GMT
Subject: CN=893af9315803f31a85431447c7805d00721549fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:6e:49:1e:8a:40:42:e1:31:8d:4f:f3:26:
54:b9:55:63:72:ac:e7:15:5e:53:4c:7e:b4:14:d1:
aa:68:f0:c2:04:d8:c1:52:f3:a6:7e:a6:6b:35:34:
69:af:5b:a4:9c:4a:20:61:fd:6f:92:84:24:d2:98:
3b:d9:52:af:6b:af:0b:f5:1b:87:d2:b3:2e:87:83:
00:e9:ab:19:bf:70:b9:c3:58:6e:a3:d1:70:b2:2f:
f5:76:8d:5d:02:1e:54:ba:5e:2b:80:43:08:68:bf:
d0:07:0f:88:16:03:14:45:34:d9:89:4f:28:b7:ac:
54:84:6a:97:d0:2f:18:9b:51:85:ab:d6:e4:ad:d5:
c2:ac:8a:e5:20:93:20:df:5e:68:29:f4:43:bb:90:
50:38:19:e0:e4:47:d4:1d:97:a1:cc:59:68:46:9d:
2e:74:d1:c4:66:1c:2e:44:11:31:e0:0c:01:18:68:
30:f0:1c:e3:5f:0b:fe:b4:d8:a7:ae:da:2b:9e:cf:
81:14:ca:f2:9c:11:e0:f4:91:4e:cd:95:90:24:7a:
e9:3a:c4:0c:32:72:52:45:09:6e:3e:69:6d:00:b0:
e4:5d:ff:a6:a8:f5:a3:05:35:b4:9e:05:dd:4d:d9:
cc:33:40:00:20:86:0c:35:5e:65:f0:bd:81:97:ff:
72:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3A:F9:31:58:03:F3:1A:85:43:14:47:C7:80:5D:00:72:15:49:FD
X509v3 Authority Key Identifier:
keyid:17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cf:ee:00:90:97:04:07:ea:b7:36:a1:5f:0b:5c:ca:29:2c:
9e:65:a4:4d:1f:a6:0d:2f:63:37:81:c3:8b:c9:a7:fb:60:c1:
92:1d:61:4b:22:69:b7:e8:e8:06:6d:2c:de:77:6f:db:8a:d9:
f9:8e:f2:ef:db:99:c5:ab:1b:7d:b9:95:51:48:4d:cd:e6:20:
90:1a:d2:c0:8e:13:6f:0b:09:06:1a:c2:3a:b5:1b:f1:22:67:
58:04:72:85:55:46:e4:4b:bf:ed:99:f0:d6:0f:ea:db:03:01:
d0:ed:5c:e6:39:d0:69:74:f7:d8:b1:1c:09:1a:c3:fe:cd:0d:
5a:49:67:52:79:de:82:1c:aa:1e:dc:ae:bb:5c:df:4b:b8:d6:
87:dc:8d:c7:7a:3b:03:5f:7c:54:93:83:c5:9f:e9:a3:2a:43:
79:d2:50:fa:3f:72:d7:45:67:7f:94:10:ca:9f:f0:70:da:7f:
be:05:24:7b:30:66:55:99:64:63:d1:9c:0d:80:09:82:a2:e7:
e6:8e:11:08:41:ee:04:63:6c:be:93:6f:4e:b6:eb:7f:bd:aa:
20:c7:b4:74:da:b0:aa:80:9f:f8:43:f2:9d:d3:e5:7d:df:0c:
cc:28:9a:88:94:9a:08:80:27:24:72:8c:50:be:bd:b6:68:8d:
51:55:ce:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:49 2025 by rpki-client