Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
File: F__uJQUsCqv2yzcePy4Hb0T8HDw.mft (raw, json)
Hash identifier: jwgU4cUqtadD8YMszXCUbcSNlUnQkn4iF9AtsNEn+do=
Subject key identifier: 3F:07:04:80:39:E5:9C:02:BB:CF:0D:EA:EA:68:DA:B9:6E:21:42:B0
Authority key identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
Certificate issuer: /CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Certificate serial: 0199FE468F9CABB4E0875D1C514E93E383B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 21:01:01 +0000
Manifest this update: Sun 19 Oct 2025 21:01:01 +0000
Manifest next update: Mon 20 Oct 2025 21:01:01 +0000
Files and hashes: 1: F__uJQUsCqv2yzcePy4Hb0T8HDw.crl (hash: BDnRV5ezxLSSlSy04TcAR7jKy5eBdyXL3mUpe4oHXUA=)
2: ZPoCpq3pmnhAPIwck7l7sD56f3g.roa (hash: zMHDyTabQ6MFQ9QbuOgdVnq/gWPOmwSEqWlxMKx33/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:8f:9c:ab:b4:e0:87:5d:1c:51:4e:93:e3:83:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Validity
Not Before: Oct 19 21:01:01 2025 GMT
Not After : Oct 20 21:01:01 2025 GMT
Subject: CN=3f07048039e59c02bbcf0deaea68dab96e2142b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:67:8e:ea:5c:bb:3d:e1:be:53:59:a0:7d:
66:05:6b:42:85:04:2e:3d:83:4d:a5:cf:af:c5:e1:
4d:bd:16:ca:73:28:f0:b1:dc:72:64:15:44:d6:14:
14:1d:5c:61:92:fe:67:12:ec:18:e8:7c:bf:8c:27:
bd:04:29:d4:4f:04:e8:b9:1b:cf:55:33:9a:6a:72:
51:04:f7:e4:9f:bb:4a:95:2d:68:66:ed:1a:46:d6:
ef:45:55:1a:23:4c:16:91:b0:51:39:2d:16:8e:e9:
ad:a8:7b:51:75:c2:8a:ed:79:32:18:24:b8:5b:80:
7e:8e:a3:67:8a:0f:96:d1:4b:0c:30:d0:53:e3:92:
92:e9:b4:67:af:fa:fb:e4:eb:28:d4:80:5f:fc:84:
74:94:a4:19:10:bf:ac:22:6a:85:38:92:3a:88:18:
f9:7c:3e:f4:a6:37:04:ea:ff:8c:2b:3c:1f:65:d2:
8a:52:74:d5:b3:fd:51:88:f7:1b:62:86:ca:c2:81:
09:d5:7a:2e:55:89:57:66:d1:14:55:4c:3f:b7:4a:
d0:77:ce:aa:8d:4c:57:4c:0e:f9:8b:08:fe:05:a7:
fc:9c:7e:d1:80:fb:08:af:40:95:d0:e6:e6:40:64:
89:80:4b:5e:0e:64:eb:8f:15:8a:6e:83:f8:96:cc:
ca:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:07:04:80:39:E5:9C:02:BB:CF:0D:EA:EA:68:DA:B9:6E:21:42:B0
X509v3 Authority Key Identifier:
keyid:17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8a:02:64:7d:4b:2b:19:dd:c5:28:97:8c:fa:d6:07:f2:56:
48:5d:74:a0:64:fd:fe:00:e8:57:28:de:64:b7:e7:a3:8e:fe:
cb:ca:2f:0e:01:da:6c:3a:ad:7c:b1:d7:37:51:d2:b5:96:bc:
35:8e:27:4b:1f:4d:67:4c:2a:ad:9e:7e:f2:de:16:e0:94:b5:
d7:58:81:de:0f:76:70:e2:42:47:ab:3a:d4:78:0b:b3:46:ea:
13:73:de:e3:c4:9a:07:8b:f9:52:8c:47:6b:d9:74:9d:aa:73:
ca:a3:92:c6:72:1a:9e:c5:b8:49:e4:d6:64:b4:a4:75:55:7f:
32:66:4e:e5:f3:1c:13:eb:ee:35:ba:fe:b7:14:6a:c8:10:16:
21:66:84:69:fb:4c:e6:a3:18:ba:31:56:7c:93:7a:e9:84:f8:
5d:60:d7:69:41:a4:59:45:da:9c:1a:bc:ca:46:69:88:1b:1d:
cd:45:83:09:7a:04:0d:34:1b:2c:0a:02:bb:52:20:14:e6:48:
2e:2e:2d:15:56:a4:d1:4a:89:77:68:bf:73:46:ac:25:a1:06:
02:50:5c:61:e3:dd:a1:c2:e9:9d:da:1f:96:b2:0b:f8:a7:bd:
76:3a:ed:0d:94:e1:f7:9c:3b:2a:df:6e:a4:28:05:42:aa:d0:
1b:12:67:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:13:58 2025 by rpki-client