Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
File: F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json)
Hash identifier: gUtwePs9/KjGh0BtMiXtMZbkTUD4D0DB/YifY5T4lIA=
Subject key identifier: 36:A1:60:A6:1F:9B:C3:A8:01:DE:81:98:D7:05:6D:14:7D:EF:93:18
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial: 0198D6608E5FD9E14C1D28C114C224EBDB0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
Manifest number: 0F1B
Signing time: Sat 23 Aug 2025 10:01:48 +0000
Manifest this update: Sat 23 Aug 2025 10:01:48 +0000
Manifest next update: Sun 24 Aug 2025 10:01:48 +0000
Files and hashes: 1: 7fUo-oGUyRn9-9ANdyLLV4IAEzs.roa (hash: WPPCtKBHs3yDruufjrRdI5i0kryHgilSWp2pBoxruxg=)
2: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: j56BJ0gliRgVOWLASsr9k1yGwCEYFHYpiLrznlMoV1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:8e:5f:d9:e1:4c:1d:28:c1:14:c2:24:eb:db:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Validity
Not Before: Aug 23 10:01:48 2025 GMT
Not After : Aug 24 10:01:48 2025 GMT
Subject: CN=36a160a61f9bc3a801de8198d7056d147def9318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:d3:cf:2b:21:e6:e0:f3:2f:1f:fb:01:94:
4c:67:6f:96:29:bc:ff:4c:33:26:b2:62:6c:26:ef:
6c:b5:8b:1b:bf:c7:da:f3:c9:cc:f8:69:18:7a:87:
ba:93:13:5f:d3:5c:3b:05:33:ae:38:80:fe:ad:44:
85:e2:a3:ba:48:ae:24:49:da:42:b8:cb:d5:17:73:
d9:79:d0:ce:49:08:da:35:c6:2e:e1:46:91:03:01:
1f:41:40:7d:09:10:1e:6f:00:fb:92:29:a3:13:a8:
d8:b6:78:f6:05:e4:3f:00:47:b6:17:f9:6b:c7:15:
f4:aa:11:35:43:b9:79:a3:86:f6:2b:51:ee:aa:ee:
97:3e:33:49:2c:60:9e:cf:53:63:5a:c9:2f:7a:be:
07:4d:3b:d0:cb:73:12:df:3e:63:b1:c4:d1:5b:40:
4b:44:5b:df:9f:6a:ef:cd:f0:6a:4b:33:52:50:9f:
bd:da:2b:fc:cc:34:fd:9a:a1:85:b6:fd:c7:13:a4:
1f:30:fa:a7:30:90:bc:01:87:a7:2b:36:62:cd:a7:
29:b4:fe:0e:b4:bd:fa:b7:cc:22:23:b3:58:5b:ab:
4b:14:b8:16:06:f3:aa:23:15:c7:09:b6:e3:fc:36:
cd:a2:5a:5e:e6:6a:c0:34:bb:8b:c8:df:8e:1a:10:
87:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A1:60:A6:1F:9B:C3:A8:01:DE:81:98:D7:05:6D:14:7D:EF:93:18
X509v3 Authority Key Identifier:
keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f2:c9:cf:ca:4f:f1:51:56:df:7a:f0:8b:ca:f5:1e:9a:55:
07:29:33:cc:79:c8:ae:e9:b8:a4:d4:67:6e:a9:5e:66:d5:ca:
31:a1:65:08:f4:b5:1d:98:4e:99:60:8f:26:c3:2b:10:41:d3:
fb:f9:22:13:4d:7a:5e:6b:05:12:58:c6:7e:8e:35:e7:7a:88:
ba:73:0c:9d:cc:b4:86:83:49:b5:ae:36:ca:0f:95:f4:fa:4d:
d1:e3:63:a8:11:e7:40:0e:02:27:13:5d:31:f4:44:ab:84:f6:
a3:e1:ed:9d:b7:29:b7:1e:a3:f3:40:08:18:78:40:df:96:c7:
20:29:18:ae:07:a8:95:82:e2:9f:ec:af:5f:c8:1b:54:db:fc:
fb:b3:94:9a:b6:41:9c:88:00:18:6e:08:4e:16:60:59:85:c0:
2c:2f:1d:05:c0:73:65:2e:d9:d8:81:3e:0e:67:a3:86:b7:72:
6b:85:cf:7b:6e:6a:cd:0a:68:7d:13:67:ea:a6:32:a4:c5:83:
81:59:8a:18:5e:ce:ed:1e:72:3b:10:74:0a:28:f0:d1:b5:f6:
98:cb:0d:0e:a2:1a:e4:44:d0:27:cc:68:88:45:78:f7:cd:ea:
12:ab:84:9b:cf:8f:a8:db:e3:30:5a:65:2d:12:3d:61:95:6d:
94:b8:16:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:03 2025 by rpki-client