Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
File: RFc3PhpobWtZ7oXcN4mdBlMThuU.mft (raw, json)
Hash identifier: iWur4QLZQQSMJJoITTHcrxl+r67Z/RUE3Gma3gpCRCk=
Subject key identifier: 70:2A:70:F1:F7:97:52:2B:65:CB:C7:F4:7F:E1:22:DF:54:04:70:18
Authority key identifier: 44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
Certificate issuer: /CN=4457373e1a686d6b59ee85dc37899d06531386e5
Certificate serial: 0198D5838B6184DBC203EAB4410C342DCCFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
Manifest number: 03C9
Signing time: Sat 23 Aug 2025 06:00:24 +0000
Manifest this update: Sat 23 Aug 2025 06:00:24 +0000
Manifest next update: Sun 24 Aug 2025 06:00:24 +0000
Files and hashes: 1: RFc3PhpobWtZ7oXcN4mdBlMThuU.crl (hash: 94G202+fV+pN44bwL0j87knoKbJ0gaaAnitlciaE40I=)
2: XMirD3qG50TrikmGR0PujWf3jjs.roa (hash: iR/AZzWdddK7a5E0N2BfP3yz4LyY5Uji67zQAihWnBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8b:61:84:db:c2:03:ea:b4:41:0c:34:2d:cc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4457373e1a686d6b59ee85dc37899d06531386e5
Validity
Not Before: Aug 23 06:00:24 2025 GMT
Not After : Aug 24 06:00:24 2025 GMT
Subject: CN=702a70f1f797522b65cbc7f47fe122df54047018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:fa:24:37:e7:71:13:29:8f:3a:40:8d:98:
70:2a:12:91:ba:01:57:cd:70:cf:86:aa:d0:87:f1:
2f:1d:4b:0a:10:cb:d2:01:d0:2d:a6:98:b6:42:1b:
de:a5:d4:8d:01:8b:56:29:5d:d4:8e:e6:d6:dc:d8:
9e:bd:74:79:39:16:9b:e1:be:8c:28:e1:87:00:40:
38:1d:fc:b0:dd:9a:d4:23:cc:49:10:f3:b2:b1:b3:
7f:e2:4e:4b:02:4a:49:f3:98:74:13:33:42:f5:45:
f9:65:6e:dc:dd:9f:fe:0f:11:44:c5:b1:dc:07:13:
46:2b:ce:e3:66:57:6b:d2:50:f3:6a:05:e8:6e:a4:
e0:6f:19:a2:1c:3e:e3:d7:44:7e:8e:d7:e4:ba:28:
35:35:18:77:c4:88:08:52:3d:61:d4:3b:eb:2d:45:
db:16:c2:62:4a:f3:98:d6:0d:b8:5c:d0:61:75:51:
4a:19:8b:ff:c2:af:93:6a:87:45:00:84:d1:a9:52:
c4:74:ab:cc:e9:c4:02:b7:f6:0c:e1:41:74:a0:b0:
4b:ea:13:19:ea:0a:b9:fd:7e:89:12:6f:bb:a5:af:
00:88:2e:4e:d6:03:12:26:fd:74:f2:1f:68:82:1a:
d2:1d:fd:42:b8:43:89:af:99:a7:c5:47:66:51:db:
22:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2A:70:F1:F7:97:52:2B:65:CB:C7:F4:7F:E1:22:DF:54:04:70:18
X509v3 Authority Key Identifier:
keyid:44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:33:cd:ca:91:00:dd:a6:59:d3:ad:c9:ab:16:25:5a:c5:af:
7d:1e:69:31:33:33:05:b9:c3:ca:af:28:97:d0:7d:da:b4:d2:
5e:0f:33:d4:39:82:7c:b5:44:f8:27:17:a7:45:95:91:3f:a2:
37:cc:62:01:26:1d:28:2b:a1:59:ad:82:67:4f:3c:22:84:5d:
66:b9:78:0e:29:38:7a:a7:24:21:9c:0d:e4:47:a9:97:f7:c6:
6d:22:45:6b:c3:a1:4b:59:96:b1:0a:e4:f6:fd:47:3a:88:d6:
f5:23:a7:2b:70:01:3a:42:22:e9:66:9b:76:df:6f:52:d5:a7:
71:c9:d3:87:e4:02:ed:c7:ea:b3:f5:4b:f6:f1:7d:96:da:2d:
42:98:45:9d:e5:22:7f:fb:58:c8:5f:7e:77:e5:2e:ce:d7:7d:
7f:26:25:c3:28:9c:79:19:33:4b:8e:e9:ac:e5:e1:3e:4e:9d:
be:69:d0:b4:77:56:b2:a4:b8:94:12:30:86:ee:6d:83:7b:2e:
07:c3:8c:73:e5:ec:a3:47:80:50:0a:0d:d8:f4:88:c9:61:df:
a2:23:f2:2a:82:f5:9b:f8:dc:08:8a:d0:0a:9a:3f:e6:3c:08:
01:23:5c:19:55:70:30:b4:eb:43:2c:6f:ae:74:ee:5a:82:e7:
eb:45:87:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:31 2025 by rpki-client