Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File: F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier: S+8k3g9UdfPgjL3qtNpsub2LozFEm7LvA4LjG5Jbbuo=
Subject key identifier: 61:5B:D8:2D:2F:50:0D:B1:1D:3D:EA:9A:08:8E:E2:64:F6:73:E8:20
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial: 0198D960CD826DC55144ADF5754E74AE2210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number: 0EA9
Signing time: Sun 24 Aug 2025 00:00:56 +0000
Manifest this update: Sun 24 Aug 2025 00:00:56 +0000
Manifest next update: Mon 25 Aug 2025 00:00:56 +0000
Files and hashes: 1: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: 7COEnxg+fFSh0e7GhDzVYT+FHQQfRlqgHg8+A75Z69M=)
2: sUbLpeFS3XLLLQIvzdPabGUHzHo.roa (hash: 3V72mhpNF2hyMt7Kyc3iG5tEZ6zvkVberiaxQXV1Hcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:cd:82:6d:c5:51:44:ad:f5:75:4e:74:ae:22:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Validity
Not Before: Aug 24 00:00:56 2025 GMT
Not After : Aug 25 00:00:56 2025 GMT
Subject: CN=615bd82d2f500db11d3dea9a088ee264f673e820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cf:3e:5d:75:18:09:5f:7e:d6:a6:c0:e8:3a:
8b:28:e7:96:3b:f2:72:49:1f:1f:dc:96:f7:66:24:
89:32:98:79:16:96:ba:84:cc:a3:f0:78:48:98:9a:
d1:4d:fb:8f:94:0b:92:cf:8e:2c:f2:98:1f:58:de:
e3:7f:1d:7e:f6:aa:c8:27:44:4c:a9:01:e4:69:46:
9d:b3:f0:45:9b:60:5d:a5:97:d6:d7:a4:db:20:e8:
77:5c:d0:50:64:1c:73:77:16:fe:23:9b:06:be:21:
63:12:7b:80:f7:bb:d3:72:93:89:9e:f2:3c:7b:ab:
3e:52:b5:df:52:d2:e9:ec:1f:fb:85:e8:b4:02:b0:
ab:8a:ea:d8:e9:7b:9a:a0:1e:89:e3:2a:7c:81:29:
fb:b2:55:6a:84:90:2b:9d:02:ec:2a:cb:d7:76:42:
13:b9:f6:f7:ef:f9:f3:c6:a7:76:41:f6:2d:d2:80:
5a:3b:12:0c:e7:ef:35:86:ed:c6:8a:88:ed:cb:97:
46:20:a3:08:da:7c:2a:d3:e4:f8:f2:49:3c:38:b1:
9a:89:75:40:77:fe:5f:09:9d:41:19:ba:38:7e:62:
73:34:11:f5:01:d3:95:12:eb:5a:89:76:b2:be:ee:
cc:43:8d:4e:a3:a5:14:cf:b0:f3:0d:3d:ca:38:4c:
45:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5B:D8:2D:2F:50:0D:B1:1D:3D:EA:9A:08:8E:E2:64:F6:73:E8:20
X509v3 Authority Key Identifier:
keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f3:b5:f0:da:1f:8a:54:63:44:68:c8:3c:18:65:14:b1:9c:
3d:56:17:16:dd:1d:18:3a:25:28:69:63:53:af:d5:d6:83:20:
36:dd:d9:1c:49:68:59:60:14:91:18:4f:30:7f:2a:95:c3:04:
fb:2e:f2:95:a7:35:19:14:16:eb:31:ba:18:9f:04:fc:06:d3:
72:00:b6:eb:5f:40:57:28:9e:1e:76:6d:84:e0:5a:d1:d0:06:
8d:e7:24:b4:8b:93:62:9b:fa:8d:45:db:6d:0f:b3:18:bd:ed:
e8:98:79:f2:01:47:cb:6d:8b:44:46:a3:fc:f2:92:b8:6b:f2:
eb:88:26:01:d7:f2:1b:7e:80:e9:04:2a:5a:58:e7:1a:2e:b5:
bc:9b:20:a4:d2:d6:8d:3b:15:a9:27:9b:ab:69:04:fe:92:62:
8e:44:b6:b6:f4:60:3e:84:e8:1c:52:65:88:f7:66:a9:7f:93:
83:e0:6d:2f:8a:13:42:8f:ff:31:36:62:1e:dc:fb:60:92:47:
de:a5:57:84:a6:11:c5:9c:cb:83:69:f8:d7:82:7a:59:27:47:
a0:96:a5:54:66:84:dc:7a:7a:e9:6e:55:9c:6d:26:e6:2b:4a:
36:c4:c3:9b:96:f6:bc:a9:b4:7f:21:94:b8:78:ac:6c:cb:44:
75:86:4b:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjZYM2CbcVRRK31dU50riIQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzliOTVkOGE1OGZjY2E2YTgxMmU3NzdlN2VmNjk0NTNm
OGFjOTgwHhcNMjUwODI0MDAwMDU2WhcNMjUwODI1MDAwMDU2WjAzMTEwLwYDVQQD
Eyg2MTViZDgyZDJmNTAwZGIxMWQzZGVhOWEwODhlZTI2NGY2NzNlODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh88+XXUYCV9+1qbA6DqLKOeWO/Jy
SR8f3Jb3ZiSJMph5Fpa6hMyj8HhImJrRTfuPlAuSz44s8pgfWN7jfx1+9qrIJ0RM
qQHkaUads/BFm2BdpZfW16TbIOh3XNBQZBxzdxb+I5sGviFjEnuA97vTcpOJnvI8
e6s+UrXfUtLp7B/7hei0ArCriurY6XuaoB6J4yp8gSn7slVqhJArnQLsKsvXdkIT
ufb37/nzxqd2QfYt0oBaOxIM5+81hu3Giojty5dGIKMI2nwq0+T48kk8OLGaiXVA
d/5fCZ1BGbo4fmJzNBH1AdOVEutaiXayvu7MQ41Oo6UUz7DzDT3KOExFRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFb2C0vUA2xHT3qmgiO4mT2c+ggMB8GA1UdIwQY
MBaAFBd5uV2KWPzKaoEud35+9pRT+KyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iM2MwNjUtZWQxYy00NTg1LTk5YTYt
NDA3ZTNmZTYzOTQ1LzEvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9iM2MwNjUtZWQxYy00NTg1LTk5YTYtNDA3ZTNmZTYzOTQ1
LzEvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfO18Nof
ilRjRGjIPBhlFLGcPVYXFt0dGDolKGljU6/V1oMgNt3ZHEloWWAUkRhPMH8qlcME
+y7ylac1GRQW6zG6GJ8E/AbTcgC2619AVyieHnZthOBa0dAGjecktIuTYpv6jUXb
bQ+zGL3t6Jh58gFHy22LREaj/PKSuGvy64gmAdfyG36A6QQqWljnGi61vJsgpNLW
jTsVqSebq2kE/pJijkS2tvRgPoToHFJliPdmqX+Tg+BtL4oTQo//MTZiHtz7YJJH
3qVXhKYRxZzLg2n414J6WSdHoJalVGaE3Hp66W5VnG0m5itKNsTDm5b2vKm0fyGU
uHisbMtEdYZL3A==
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:11:22 2025 by rpki-client