Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
File: 3ILSx-tfpUPjLx7uGc01pWc8-uY.mft (raw, json)
Hash identifier: bR/ywjWVhQ+Bm2KGXQwuYsD0nckQJPPVVgRa4GavRcc=
Subject key identifier: 8A:F9:36:A0:39:AF:1A:BB:36:3D:FD:13:FA:14:3D:96:96:F2:1C:B6
Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
Certificate issuer: /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Certificate serial: 019A04117BD10773F91BD2D22F81B66D7BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
Manifest number: 05B1
Signing time: Tue 21 Oct 2025 00:00:45 +0000
Manifest this update: Tue 21 Oct 2025 00:00:45 +0000
Manifest next update: Wed 22 Oct 2025 00:00:45 +0000
Files and hashes: 1: 3ILSx-tfpUPjLx7uGc01pWc8-uY.crl (hash: z12NrnG2JdE/ldkEmtFyQwjyeFXS52zScm8jVcd5Kn8=)
2: Mvk_oqElVRdnhvvvd2d0ON2M6O0.roa (hash: h/FNSiffcYfhZT3VlgEkLi4vidisAmOMBIjfYdnqCDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:7b:d1:07:73:f9:1b:d2:d2:2f:81:b6:6d:7b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Validity
Not Before: Oct 21 00:00:45 2025 GMT
Not After : Oct 22 00:00:45 2025 GMT
Subject: CN=8af936a039af1abb363dfd13fa143d9696f21cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:6a:de:ad:9a:0a:31:3a:10:d0:7c:99:b9:
0d:57:b4:ad:65:0f:c3:e1:a7:9a:fe:43:16:4b:33:
3a:cd:76:fd:06:52:8d:b8:30:f0:99:2e:0d:82:26:
f3:b4:51:46:25:d8:61:4d:c3:5a:99:49:7c:a0:fe:
57:b3:52:e8:17:80:81:9c:49:f2:70:d8:c9:7f:d2:
be:e5:2e:a7:59:8e:01:ba:c0:1c:fd:c6:61:61:83:
61:5c:35:f1:97:cb:5b:0d:18:8a:45:9b:1c:ad:89:
25:cb:8a:b0:9d:3e:73:cb:46:43:37:ad:f4:7c:08:
b6:51:f3:3e:68:6a:5b:1c:b9:e2:25:f7:01:96:33:
3f:5b:28:eb:59:22:78:93:b3:4f:7f:3f:2a:4f:06:
bc:f7:0b:eb:b2:90:a7:e3:d9:39:35:c1:d4:d8:83:
b5:67:cc:c8:ce:6b:1f:fd:21:27:d1:67:fa:13:1e:
f2:90:ba:66:a6:56:64:82:d0:4b:5f:20:e2:26:24:
8c:1a:c1:01:86:2a:cd:7f:95:f3:dd:48:bf:32:fa:
15:77:8f:7a:3e:cb:ed:9c:c8:a9:ea:90:2c:50:eb:
91:ea:1e:cf:93:3a:66:9d:bf:db:be:84:8d:23:79:
5a:5b:3a:f5:8c:85:c1:dc:52:49:59:ff:52:af:0c:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F9:36:A0:39:AF:1A:BB:36:3D:FD:13:FA:14:3D:96:96:F2:1C:B6
X509v3 Authority Key Identifier:
keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:89:48:8c:97:e5:0f:dc:8d:d4:23:de:5b:78:5b:16:ca:07:
40:cf:95:8f:8d:9f:aa:97:6f:74:25:94:3b:9c:75:0f:80:19:
e9:34:61:a0:15:cd:8d:25:38:c6:de:4f:16:64:95:8a:43:13:
ed:83:ca:70:61:65:bb:ed:7a:32:a1:80:c3:fe:0a:0c:7a:f1:
4a:e7:3e:6d:da:a0:ec:e2:ca:2a:7b:9d:9a:41:82:7a:58:b3:
80:5a:1d:a6:b2:70:cd:00:8e:ff:fe:9d:ba:2f:c1:18:bc:c4:
7f:75:aa:b9:b3:bf:26:1a:41:2a:ac:fb:3c:49:e7:3a:79:fb:
18:cd:be:93:33:fd:9c:1d:29:1d:72:49:8e:ee:e5:c3:27:0e:
0f:02:ea:02:17:07:b6:36:cc:52:7e:95:13:8c:fc:b4:bf:d9:
09:6a:38:b8:a2:e4:cc:ab:02:26:3b:29:e7:64:79:96:8f:64:
08:c9:5f:00:10:8e:e4:fc:06:41:22:c7:b2:ca:7a:ff:2b:23:
49:9c:01:10:f6:c8:4f:a3:86:e8:38:4b:ad:fb:25:a2:8f:59:
4f:1b:9b:bb:12:05:c1:23:e6:90:01:4e:8c:e1:97:82:3a:06:
6a:54:6e:4a:e4:af:b1:ef:af:83:75:1f:3f:b8:34:2f:17:e1:
03:be:c5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:22:10 2025 by rpki-client