Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
File: F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json)
Hash identifier: 2FSBA+RnBXUwqrw87XSxIZFX4bvu1Y49SqipnOdAudo=
Subject key identifier: 5D:00:DC:07:E4:FC:18:49:5F:15:F8:DD:29:91:54:74:DA:67:0B:69
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial: 0197B6A0D0F2FC17EC04DC92BA93854ED4BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
Manifest number: 0E86
Signing time: Sat 28 Jun 2025 13:01:21 +0000
Manifest this update: Sat 28 Jun 2025 13:01:21 +0000
Manifest next update: Sun 29 Jun 2025 13:01:21 +0000
Files and hashes: 1: 7fUo-oGUyRn9-9ANdyLLV4IAEzs.roa (hash: WPPCtKBHs3yDruufjrRdI5i0kryHgilSWp2pBoxruxg=)
2: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: 0PyzaKSqsrU/BTi84gIvL8xk/M9AC5ekmqbFJA1K64I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d0:f2:fc:17:ec:04:dc:92:ba:93:85:4e:d4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Validity
Not Before: Jun 28 13:01:21 2025 GMT
Not After : Jun 29 13:01:21 2025 GMT
Subject: CN=5d00dc07e4fc18495f15f8dd29915474da670b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:de:e1:ec:6c:94:13:4b:8a:94:4e:98:12:
2a:91:03:f8:63:16:2a:47:a8:22:89:2a:94:05:7b:
ad:62:f6:92:13:7c:12:c6:1e:2b:0a:c0:d4:35:b7:
50:e6:c7:e2:06:3f:fb:9e:8e:c3:5d:f1:54:af:58:
d3:b0:81:e4:82:c3:c5:5a:1f:e3:22:12:03:87:37:
83:11:3d:03:88:02:c0:3e:a7:ed:9e:f1:ad:fb:aa:
ee:d8:87:8d:3f:6e:11:f0:f3:4d:cf:52:e9:70:59:
9b:31:62:8d:54:98:59:86:fc:44:81:2c:17:83:c1:
01:ea:39:71:e0:ad:69:d0:dc:84:ba:f5:83:5d:9b:
38:86:8b:15:bc:ce:ab:e0:5d:7b:c8:cf:62:24:c2:
70:b4:b9:38:69:dc:f0:b7:4b:70:d6:6d:fe:f5:ba:
4e:19:46:a8:f7:95:2e:a9:67:87:e9:1d:a3:64:0d:
88:6b:c3:e9:cf:65:c2:28:e1:0b:8e:bd:b5:f8:c5:
a6:14:5a:02:47:af:52:91:6c:8e:f3:d7:54:f5:a4:
30:2d:3b:5c:2d:a9:e7:f3:81:ba:08:6d:ac:b1:fa:
7e:26:8b:09:2f:89:eb:37:d2:cf:db:9a:67:3d:a5:
f4:a8:fb:a5:20:81:5b:70:81:38:d8:94:06:5d:85:
62:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:00:DC:07:E4:FC:18:49:5F:15:F8:DD:29:91:54:74:DA:67:0B:69
X509v3 Authority Key Identifier:
keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:79:bb:5c:af:2e:04:a7:0e:23:7c:f0:56:99:c5:b4:b2:85:
84:28:45:9f:a2:57:11:8e:06:08:c5:53:9f:82:e3:39:da:84:
0f:56:46:c0:51:b8:14:61:2a:89:67:cd:47:dd:41:31:f7:08:
30:c1:73:0f:3a:46:32:1a:97:fa:18:39:38:1a:b4:f7:49:f7:
60:97:00:1c:50:57:6a:cf:11:9b:79:41:d6:43:89:20:bb:2a:
aa:ed:6e:32:42:72:c5:b3:44:a8:ff:1f:fe:a3:a4:8c:3c:2a:
df:5f:95:de:c5:df:28:fd:3e:ac:07:56:50:42:ab:9b:78:83:
ab:13:da:9e:5d:c0:f3:2f:7b:16:d0:be:29:60:a0:ba:0c:74:
03:76:d8:ad:a0:fe:e4:69:22:f6:1d:1d:da:b0:07:60:4a:7b:
2d:42:6c:1b:44:cf:34:38:f7:6f:a4:04:af:ee:8c:c7:a0:8f:
3c:1c:41:71:60:1e:63:16:45:16:a9:09:f3:ab:93:f0:15:45:
14:46:27:5c:e8:c2:3b:fa:77:25:32:eb:25:85:67:7d:4e:89:
1f:e4:49:34:81:74:12:43:b2:5e:25:df:b8:2d:3e:41:6a:5d:
ab:64:79:21:42:4b:7a:ea:eb:e9:2f:ce:75:71:55:23:ea:9c:
31:27:9b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:05 2025 by rpki-client