Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
File: F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json)
Hash identifier: XEZOppW7mefM+KgUPZTd17C7LYyhGc+6+4jHleUBOtA=
Subject key identifier: 43:FB:C9:0E:A9:FF:A1:97:AE:DA:AA:58:D2:3C:95:A8:1F:C6:08:05
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial: 0199FBB361FF2EF40456BA0248D2B8F9A796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
Manifest number: 0FB6
Signing time: Sun 19 Oct 2025 09:01:01 +0000
Manifest this update: Sun 19 Oct 2025 09:01:01 +0000
Manifest next update: Mon 20 Oct 2025 09:01:01 +0000
Files and hashes: 1: DObJc8p-7Ot6mwqf9iAdMs4hyyE.roa (hash: qMkiFXi4/th5qH5SWqQAS6g0Gmc+b0OVu7qmP7GVojA=)
2: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: BaH3bse9Xddrh205DmY5s0lU62mOUlwHsns/3/UcCYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:61:ff:2e:f4:04:56:ba:02:48:d2:b8:f9:a7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Validity
Not Before: Oct 19 09:01:01 2025 GMT
Not After : Oct 20 09:01:01 2025 GMT
Subject: CN=43fbc90ea9ffa197aedaaa58d23c95a81fc60805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:aa:f1:16:34:20:7d:0a:69:a2:9a:8b:f7:3e:
80:01:5a:9d:6c:58:a3:a6:f0:94:f9:b6:a1:9d:1b:
32:52:2f:a9:7a:0f:6a:49:90:8a:ea:83:77:17:34:
d6:fe:1a:4a:31:82:09:9b:4e:16:ee:48:41:a5:dc:
c8:31:88:e5:4d:bb:d1:07:cb:e3:77:49:46:9a:f8:
ca:87:bd:47:48:43:2b:c2:55:c8:90:84:84:88:35:
44:9e:17:62:e5:b1:70:6e:cf:05:76:d7:d8:d2:9d:
7f:63:f6:91:e1:71:e8:fb:c7:f2:d3:00:fc:94:6a:
f9:7a:7f:95:13:69:e8:5b:ce:72:08:ea:4e:7f:16:
70:46:64:9c:ac:04:ae:43:1d:f7:1f:de:8c:43:91:
f8:57:9e:11:f1:fc:64:72:a7:25:f3:ef:c5:3d:14:
ad:7e:e6:07:2f:5a:d5:8e:b6:f4:80:3d:1f:aa:a1:
0f:99:d8:e1:13:23:53:d1:74:fa:37:85:cc:0e:4d:
0a:64:3f:52:14:bc:74:9e:c3:70:39:0e:26:d7:9c:
68:4e:29:63:01:33:85:ff:e6:fa:bf:67:ef:c9:19:
5d:8c:ac:d5:6f:a6:b1:ba:d3:8a:7f:92:aa:9e:08:
ed:00:6d:b5:44:79:f6:f9:d5:62:9b:af:98:20:36:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FB:C9:0E:A9:FF:A1:97:AE:DA:AA:58:D2:3C:95:A8:1F:C6:08:05
X509v3 Authority Key Identifier:
keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:49:6d:f5:fb:b1:f4:26:61:2a:75:85:02:d6:5c:77:cf:29:
71:d3:8c:48:5c:47:89:ee:b6:cd:a0:5c:65:fd:70:08:b7:5c:
f3:92:62:5e:7b:18:d9:0c:a0:e2:fb:5a:ca:de:68:b4:06:c7:
73:10:c2:c8:9f:64:08:36:cf:46:b2:61:65:9a:b6:90:9b:1e:
2e:d4:81:60:41:e9:92:d1:44:1b:9e:57:c1:88:8c:89:23:35:
69:08:50:8f:c7:38:e8:d6:28:b7:e4:d2:81:20:2b:12:2a:bc:
73:64:13:3c:b4:37:c3:55:8d:19:ee:62:d3:68:70:58:86:20:
4a:19:29:ad:81:45:54:77:c8:eb:ed:14:9d:d5:63:f8:a4:66:
d7:70:18:ca:86:79:10:d0:2d:11:31:1e:21:c2:db:1a:34:ec:
d3:a4:37:d3:2c:f5:19:df:38:c8:84:3b:9d:d3:f4:a3:ea:d7:
a1:5d:e4:0e:ea:79:e7:10:2c:be:85:a5:17:33:83:db:d1:a9:
5d:51:4f:52:cd:61:fb:fd:6e:e2:d2:cd:af:79:64:98:28:27:
6c:61:55:c2:6f:c7:ed:85:83:c0:9d:9a:a7:66:4e:5a:1b:15:
56:a0:74:1e:1e:6b:14:ef:7b:1e:64:f3:31:8c:52:52:13:37:
ff:cf:08:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:33 2025 by rpki-client