
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File: F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier: YHr54tUvX/czo8QiMjenuE6C2aaqOdY9LFicQSjyhoE=
Subject key identifier: B0:D9:99:B3:6E:50:1E:A9:3A:F0:15:6C:B2:CB:92:5C:2C:AC:63:4C
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial: 0199FCFD9ED6FC86EFCB31F3745B993ACCC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number: 0F40
Signing time: Sun 19 Oct 2025 15:01:43 +0000
Manifest this update: Sun 19 Oct 2025 15:01:43 +0000
Manifest next update: Mon 20 Oct 2025 15:01:43 +0000
Files and hashes: 1: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: aaUkIMiiwdY/v4TIB5asLjQ8vR53SnxzxU9LJpVCKCw=)
2: sUbLpeFS3XLLLQIvzdPabGUHzHo.roa (hash: 3V72mhpNF2hyMt7Kyc3iG5tEZ6zvkVberiaxQXV1Hcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:9e:d6:fc:86:ef:cb:31:f3:74:5b:99:3a:cc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Validity
Not Before: Oct 19 15:01:43 2025 GMT
Not After : Oct 20 15:01:43 2025 GMT
Subject: CN=b0d999b36e501ea93af0156cb2cb925c2cac634c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ef:8a:b0:70:3e:8e:5a:9e:29:16:ae:3a:8d:
00:82:d3:0e:8b:4f:09:64:36:bd:f6:c6:ab:92:25:
23:39:05:7e:94:f4:3c:88:3d:bc:bf:f0:f4:55:71:
6c:e3:35:61:1b:25:d8:68:47:57:af:2b:44:32:2b:
d0:4b:ac:f8:e5:9c:91:ad:9b:94:f8:5e:30:ab:38:
80:bb:ec:6d:d9:c1:4e:9b:0b:56:72:ab:da:bc:20:
15:53:8f:a7:ae:c8:b9:04:14:ca:a4:a2:b5:aa:6d:
67:b9:47:03:d5:e0:46:3c:fc:0d:e1:3f:6b:ab:5a:
b1:0d:36:ef:94:05:fd:32:1a:3b:d9:a0:e3:ee:52:
5f:5b:82:f5:e1:a2:a3:56:d2:cf:16:a3:d7:94:45:
f4:56:5a:77:5f:b0:c5:04:f0:95:56:1e:82:38:2b:
69:38:96:f7:47:01:96:87:0d:bb:59:fa:8d:98:03:
08:bb:67:34:32:25:53:70:4c:0f:e6:6a:61:e7:f9:
21:f0:f7:ca:a0:34:aa:96:c2:97:36:f3:f9:08:f4:
8c:76:43:2a:5f:c2:81:02:d7:cc:7e:0c:2f:4e:a1:
9d:27:00:40:b3:ae:7b:cd:f8:ff:d3:32:99:1d:cc:
04:f3:23:52:19:ee:2f:6b:e8:0f:a4:f2:21:ec:d8:
d6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D9:99:B3:6E:50:1E:A9:3A:F0:15:6C:B2:CB:92:5C:2C:AC:63:4C
X509v3 Authority Key Identifier:
keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8d:3e:5f:c4:d8:79:24:a5:cd:3b:83:29:68:7d:d5:88:b8:
ac:5a:5d:01:6a:48:49:66:82:c3:16:3b:3b:01:84:2a:61:60:
d3:18:a8:33:4b:ce:a7:94:5b:eb:03:8e:8b:fb:38:c6:f1:9f:
47:58:f3:50:8c:21:dc:65:bd:7f:5f:7a:33:5d:69:50:a9:d7:
e2:80:2b:98:ff:0d:6c:64:c2:78:56:60:2f:41:da:fc:1a:18:
65:7c:3c:0d:05:26:c0:00:52:23:69:2b:b4:ab:cf:5f:df:b9:
2e:a7:1b:05:49:c6:89:59:3d:ca:76:9e:06:03:96:0d:8a:5f:
f7:96:0b:d1:f5:8b:a3:5c:19:07:7c:09:7c:72:1b:9b:a9:49:
de:68:fa:92:28:1f:3d:1b:bd:fc:a2:ed:7e:5c:c4:3f:2c:41:
7f:c1:37:08:74:de:c5:cd:4b:23:dd:84:e4:a4:4d:73:bc:bf:
6d:e5:0e:0e:c6:c0:cd:fb:43:8c:c6:ba:ce:6c:4c:b2:9a:2b:
06:2e:ce:db:bc:6e:d6:34:4a:66:cf:3f:f3:9c:69:19:b7:00:
d7:fc:ab:4b:30:b4:a3:d2:2d:1f:ba:64:9a:97:d9:e1:c2:bc:
1b:8a:09:22:ae:5a:dc:68:5f:45:c6:f8:37:bb:e9:87:2a:05:
da:04:48:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:00 2025 by rpki-client