Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
File: H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft (raw, json)
Hash identifier: mQQ+KwgcJJ6RaQF44z3VYnFPeFDpIm1wmPQBIYcK1oE=
Subject key identifier: 4B:FC:38:E4:67:B8:98:08:A4:F7:D5:0D:EE:08:A9:66:0F:9E:F7:E4
Authority key identifier: 1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
Certificate issuer: /CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Certificate serial: 0199FC8F269D4B546A1D3574AA5366551548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
Manifest number: 0AFC
Signing time: Sun 19 Oct 2025 13:01:03 +0000
Manifest this update: Sun 19 Oct 2025 13:01:03 +0000
Manifest next update: Mon 20 Oct 2025 13:01:03 +0000
Files and hashes: 1: H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl (hash: 7dgCVsBNkv6XF5IOSWLBgyZZtkbGWCp4SFaUHWgjC6w=)
2: iHSrTbxet8j5uaWQ6yDr02jRxjY.roa (hash: oCfYmcjvyzUP7DhCDsHSSh72gSgXxnVFLGRLc0v5Xfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:26:9d:4b:54:6a:1d:35:74:aa:53:66:55:15:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Validity
Not Before: Oct 19 13:01:03 2025 GMT
Not After : Oct 20 13:01:03 2025 GMT
Subject: CN=4bfc38e467b89808a4f7d50dee08a9660f9ef7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7c:49:45:95:a0:df:f7:b6:80:9f:86:de:77:
39:e1:bb:b4:e0:46:b8:6d:26:b1:49:fb:e9:57:ba:
c3:17:f5:63:60:60:d8:23:69:ac:3f:65:36:66:93:
74:b4:03:45:d8:2c:4b:c4:4b:3e:ef:d2:fa:67:98:
dd:06:bc:f7:11:31:4f:1b:78:ec:d9:5b:2e:7f:07:
02:5d:1c:d7:27:5c:06:85:7b:6c:c5:06:a3:d3:e2:
ac:35:81:5b:c3:f3:77:3d:96:3a:e5:da:d3:ed:4e:
22:6a:c8:91:c0:b3:d0:37:e6:36:b0:35:c5:79:10:
53:7f:66:14:22:64:60:5c:46:0e:bc:98:29:a0:f1:
83:ca:c7:83:6d:5b:b2:20:9a:0a:44:cc:46:3a:48:
32:c2:da:1c:d7:5c:f3:e0:5d:95:5c:00:3c:be:b2:
9a:a0:a3:b0:18:02:81:4c:4c:7e:c0:f4:56:85:ea:
e5:ae:bc:84:8f:22:f5:31:a4:09:49:d6:05:75:59:
80:71:78:fc:7c:65:41:75:c5:de:65:eb:cd:0d:48:
37:48:d7:38:01:8d:65:d2:51:7f:49:0d:a2:c5:b6:
39:61:f8:8e:b5:44:77:4f:08:92:6a:0b:86:4a:ef:
43:8f:a0:90:7f:10:35:0c:e0:41:a1:b4:f2:aa:21:
1b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FC:38:E4:67:B8:98:08:A4:F7:D5:0D:EE:08:A9:66:0F:9E:F7:E4
X509v3 Authority Key Identifier:
keyid:1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:34:a9:79:45:a4:2a:48:98:eb:10:eb:97:16:a3:01:d2:a9:
50:9e:fc:15:6f:41:a5:d1:13:8f:1a:9b:8e:49:fa:ec:20:6d:
d2:9a:eb:77:b8:6b:83:0b:e8:e2:4a:28:91:fe:c5:52:52:8f:
aa:d6:49:30:70:08:0c:6b:2f:41:74:65:4a:47:04:3b:0b:c8:
66:b8:39:69:f2:b7:a1:3c:d1:04:76:1b:0f:6e:e2:c9:59:89:
fd:92:1e:0d:6c:f6:1b:8f:99:05:e8:ef:e2:ce:b6:53:a6:d7:
39:b1:33:6c:b5:85:f2:70:da:ac:2b:24:82:40:ba:1c:c7:7c:
e2:9e:0f:bf:de:6b:58:71:f0:10:a7:54:e1:69:a1:38:e6:04:
9c:05:01:0a:76:2f:cf:85:53:66:d2:a2:11:0d:72:98:d6:51:
67:41:fd:95:32:75:c6:13:70:12:5e:5c:ef:6a:8e:90:e5:fc:
a9:f3:39:f6:95:0d:d3:b0:2f:e0:77:b6:b1:01:20:6d:61:f9:
0c:ae:be:a9:45:25:95:19:f3:c2:2b:58:41:52:ce:ca:09:88:
65:97:1d:7d:f4:98:9e:3b:d0:9c:15:8c:6f:88:01:8e:c0:50:
3c:8b:df:93:da:b6:37:42:11:b3:13:2f:e8:1f:47:e2:91:53:
43:b9:d7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:27 2025 by rpki-client