Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
File: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json)
Hash identifier: nDsm1DBOgmSwvJ27akE2mVc4O2EilH3v597+0fwK/Lk=
Subject key identifier: 04:70:D1:CC:DA:F5:A1:E3:1F:9C:5E:31:B9:5F:DD:D4:D0:CF:97:05
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial: 0199FCC620E440334FBA56CC4E18A4C4EE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
Manifest number: 0C8F
Signing time: Sun 19 Oct 2025 14:01:06 +0000
Manifest this update: Sun 19 Oct 2025 14:01:06 +0000
Manifest next update: Mon 20 Oct 2025 14:01:06 +0000
Files and hashes: 1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: q5mu2nhqWkFyBgcxHS6up0+K02EpdK97JBeI9h2mIwM=)
2: IWr6TuTrJyjayPLvTxSMqZtzabw.roa (hash: rtpLNLVSn8Vjv4N/NCkqAqr/rBVi4ck/ZAOnbXB0Ovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:20:e4:40:33:4f:ba:56:cc:4e:18:a4:c4:ee:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
Validity
Not Before: Oct 19 14:01:06 2025 GMT
Not After : Oct 20 14:01:06 2025 GMT
Subject: CN=0470d1ccdaf5a1e31f9c5e31b95fddd4d0cf9705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a1:8f:48:8e:3f:41:af:a3:10:8f:fd:88:57:
bc:64:89:6d:01:8e:4a:de:31:ed:d2:76:bc:ab:2e:
06:e7:1e:a4:b8:7d:00:9b:9d:ab:dd:e6:68:26:58:
4f:8d:61:9d:91:51:79:9e:9d:2c:8e:ab:64:45:99:
df:f4:fd:27:cf:dd:05:ea:a1:64:11:04:8b:80:88:
2e:38:84:1a:ac:bc:d1:8a:76:e4:e9:41:39:3c:d1:
71:ac:07:af:03:04:7e:e6:d7:08:6d:cb:d5:46:14:
1d:ee:13:ab:ac:37:31:a4:c9:54:ea:54:58:84:62:
15:32:4b:9a:7e:f4:dc:ad:3f:99:a1:94:3e:e5:67:
bd:d2:03:58:5c:c5:75:7b:5a:f7:e3:cf:9b:a6:55:
1c:60:9c:67:be:d6:06:16:78:f2:2c:c2:c1:39:3f:
f9:f1:a8:96:8e:8b:27:ee:1b:f2:91:54:7c:b3:60:
fd:af:17:b3:3c:5e:f3:bc:0e:54:b2:b8:a5:9d:7d:
9a:bc:06:f9:2c:0a:bf:4f:55:22:45:26:b2:68:24:
8f:c5:76:77:bf:66:13:34:f7:e1:6e:1d:e7:8f:ae:
fe:3b:4f:cc:1e:cc:8f:3c:65:20:0f:9c:59:6b:0f:
99:5e:45:34:46:2b:5d:df:f3:2a:0e:31:b9:bd:5d:
dc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:70:D1:CC:DA:F5:A1:E3:1F:9C:5E:31:B9:5F:DD:D4:D0:CF:97:05
X509v3 Authority Key Identifier:
keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ca:7f:c4:3a:73:00:78:71:f8:e6:17:50:50:5e:3e:d6:c9:
db:54:08:3a:d3:5e:26:20:3a:55:68:71:b9:3b:71:c0:08:c2:
ea:00:49:ef:2a:72:1c:49:55:ed:fa:24:b3:59:e9:22:b8:9e:
cd:e7:ec:e2:46:f3:e5:2c:c4:45:05:8c:f9:33:9e:df:29:45:
1c:20:fd:f8:c9:f2:d1:7d:0a:31:5f:3c:21:7f:ed:eb:86:2f:
3c:00:b9:f4:43:bf:87:86:83:7e:31:e4:81:ef:53:d9:1c:c1:
98:d3:30:a4:2d:e3:99:72:ba:92:76:a3:10:cd:0f:d4:8d:55:
3f:54:3c:fd:d5:03:72:7d:97:9a:72:db:18:71:4c:22:40:81:
ad:7a:8e:45:53:d2:af:ab:f6:db:2b:b8:11:cb:94:68:ba:f7:
dc:b4:db:9a:6a:9d:fa:47:b8:d8:8b:bf:7c:05:59:08:d2:3e:
2d:0c:f0:13:2a:ef:64:80:aa:7b:22:6c:00:7c:4a:2c:5a:16:
2e:18:da:ff:33:4f:2e:d7:56:04:5a:1d:d6:fa:e8:8c:ba:22:
ed:61:8e:09:c9:17:29:b2:64:4f:56:d7:76:12:97:3f:f6:fa:
ef:75:e8:f2:4e:3e:b6:79:6e:04:2d:b6:b1:d0:62:07:1f:95:
91:4e:f7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:47 2025 by rpki-client