Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
File: R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft (raw, json)
Hash identifier: BpHZHjpBhJWbuSLYQV5hDRh6iWvdjoLf8DOxVy/eu0E=
Subject key identifier: 1F:97:9C:62:B8:89:76:DC:57:FC:C5:0D:9D:27:F4:6A:26:16:08:4F
Authority key identifier: 47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
Certificate issuer: /CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Certificate serial: 0199FC21B1B8A57110646E588E14B568CF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
Manifest number: F2
Signing time: Sun 19 Oct 2025 11:01:30 +0000
Manifest this update: Sun 19 Oct 2025 11:01:30 +0000
Manifest next update: Mon 20 Oct 2025 11:01:30 +0000
Files and hashes: 1: EshCzxO86qcL07tz5uc1JfugV7o.roa (hash: LPE3JzJOmXyXyccfoQvv4I0FBt2vRf2Wt20kp5/Xotw=)
2: R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl (hash: 5ncKRWsUaP+OM1QSYWj4RTmUnUaUsWdnOm9zTBBKEhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b1:b8:a5:71:10:64:6e:58:8e:14:b5:68:cf:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Validity
Not Before: Oct 19 11:01:30 2025 GMT
Not After : Oct 20 11:01:30 2025 GMT
Subject: CN=1f979c62b88976dc57fcc50d9d27f46a2616084f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bc:57:29:29:f9:10:9b:17:b5:49:00:30:89:
d2:29:7b:e8:d9:74:71:8f:c0:10:1f:ab:5f:61:b9:
4c:11:6d:5b:9d:51:36:a0:bc:b6:86:0a:c6:98:ed:
f4:35:00:43:a1:7d:44:c4:e9:6d:c7:1b:cc:ed:94:
b2:3e:17:06:b3:30:cd:10:a3:ea:4d:85:41:78:31:
5a:9c:0b:91:09:88:98:27:f1:da:44:0f:43:db:e8:
16:cb:28:7d:e7:7e:30:28:77:92:35:78:26:f4:1a:
d8:c6:4e:80:88:97:8a:1a:e8:c1:89:07:10:de:5b:
1e:d7:03:55:07:d3:b9:a7:28:7d:c8:db:a9:a2:5a:
4a:f8:ef:9b:67:34:af:73:10:25:c0:86:c2:17:97:
f8:70:9c:f1:56:8f:32:4e:87:65:85:eb:16:1a:5b:
89:e4:0b:6a:fc:fb:49:17:2a:49:d8:e7:de:ac:7b:
3f:22:3e:70:d6:08:16:dd:41:c3:07:b3:f2:ed:4c:
2a:fd:b6:74:37:4b:45:39:ed:ff:54:98:be:ae:07:
dd:c9:0f:ad:6f:a8:f8:2c:84:3d:4d:b1:1a:da:a3:
36:d6:98:16:8e:3d:46:0b:71:23:2b:47:f3:d9:a4:
65:2d:ef:f2:fe:16:b6:2a:40:8d:24:5b:8c:f1:21:
ba:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:97:9C:62:B8:89:76:DC:57:FC:C5:0D:9D:27:F4:6A:26:16:08:4F
X509v3 Authority Key Identifier:
keyid:47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:eb:a2:1b:9b:a7:a3:4a:a2:49:f0:f3:44:87:03:2c:31:ca:
30:19:1c:91:69:a1:db:7e:71:d9:1a:9f:f3:0a:89:ec:7e:00:
e7:d9:fa:9f:1d:8f:10:45:e7:92:c3:d8:2c:26:b0:e5:87:31:
04:19:60:34:59:cb:df:c5:d1:5e:78:ca:e0:ec:01:75:dd:90:
51:51:03:89:7e:a6:f2:e0:98:1a:34:de:22:6b:a6:8d:99:f5:
75:5b:a7:7e:b7:1d:ae:c6:b5:53:7c:78:72:fb:8c:22:61:78:
c9:cf:7f:ef:49:ed:77:ab:82:36:bb:e0:ba:e5:15:d8:7a:9a:
ab:d7:d3:2b:bd:85:1a:8a:e2:ae:f1:29:3f:ac:2d:33:70:ea:
d3:20:f2:7b:a8:58:12:61:8b:9b:84:80:28:d6:2d:95:9a:e7:
88:c4:87:ad:7d:94:e6:20:2a:1f:15:b1:5b:e7:c6:7f:02:4d:
cc:af:26:bc:3c:03:4e:c5:24:12:11:10:30:f1:16:f9:23:2e:
c7:a4:f9:ca:b2:45:4b:4f:5a:0c:47:29:99:7b:40:11:3f:bd:
26:a6:40:72:bc:5e:23:79:2d:e2:83:ea:3d:f5:27:cd:23:a7:
7c:3d:b0:41:05:14:c4:86:5d:4d:b0:23:90:40:ed:b4:66:2a:
88:7f:cd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:03 2025 by rpki-client