Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
File: r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft (raw, json)
Hash identifier: 9sfh+AN6nq2ri5unuiSVozzzkqsSvwom0MJn1XUhEcg=
Subject key identifier: 26:83:C3:37:43:7F:87:6A:A0:59:42:6B:AB:5E:EE:43:D8:6D:A1:18
Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
Certificate issuer: /CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Certificate serial: 0199FCC6C072812434C3183134558F43A689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 14:01:47 +0000
Manifest this update: Sun 19 Oct 2025 14:01:47 +0000
Manifest next update: Mon 20 Oct 2025 14:01:47 +0000
Files and hashes: 1: N9sOXFw97UnrkSQWGmd4QE2g0Pc.roa (hash: FcVUr7Wqd51Nq1eKBFPb0ZOL/WKLNXNrrGtgMRztb2M=)
2: p6HHOYDEee_YFxcXEQQw4tj_loo.roa (hash: XVgmeoKKw2smz01W8p65Y0a7sBeyS3+sdPmsdrroyxo=)
3: r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl (hash: 8majMGtxwHf6PdJ8Rpku4b3KBc177BeRH51kqK+6ggE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c0:72:81:24:34:c3:18:31:34:55:8f:43:a6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Validity
Not Before: Oct 19 14:01:47 2025 GMT
Not After : Oct 20 14:01:47 2025 GMT
Subject: CN=2683c337437f876aa059426bab5eee43d86da118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:e9:a1:32:0a:78:73:69:d1:ec:25:fc:e4:
33:36:0e:1c:61:50:71:e2:62:0b:96:66:b7:b7:5c:
ab:b0:d6:20:9a:27:4d:e6:a9:35:40:19:16:38:a9:
d1:47:3f:1c:79:3d:d4:c7:ef:54:77:ee:94:89:2d:
b4:ba:ab:ed:1c:0b:f0:4c:e6:53:1c:52:23:09:6d:
b7:e2:01:e8:a2:c3:6d:03:71:dd:27:3e:ac:31:67:
4d:51:77:f4:15:7c:a0:d2:49:39:d2:a7:47:dc:28:
ec:3d:b0:81:c3:2d:65:76:9a:40:d1:83:73:57:9a:
64:f2:61:d5:9e:ef:a2:4b:ff:8f:19:67:ee:3c:f6:
05:13:eb:02:0a:ec:17:8a:97:73:d4:af:f8:b8:5b:
6e:03:10:1b:1c:17:b4:40:a1:d0:8a:83:55:7c:4a:
dc:24:79:4b:09:6c:2f:36:04:1e:7e:0d:8c:25:25:
15:85:9b:8f:26:f1:86:fb:83:6b:01:cf:83:ec:dc:
dd:4f:5d:c9:a9:9a:68:5d:b5:32:1c:63:3d:2f:cf:
d9:e4:37:bc:16:dc:43:ba:f0:ca:eb:b3:26:f5:1c:
65:47:f5:5a:9d:d5:7e:54:4b:b9:aa:0f:f1:3f:d8:
a8:d3:f4:5e:ab:70:e5:2b:d6:95:af:83:54:88:a8:
15:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:83:C3:37:43:7F:87:6A:A0:59:42:6B:AB:5E:EE:43:D8:6D:A1:18
X509v3 Authority Key Identifier:
keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5a:96:91:3f:02:a4:ce:54:f8:2a:24:92:c9:70:f7:97:27:
54:34:0d:c3:ca:f6:7e:39:4b:5d:9f:50:a2:e3:22:51:f8:0c:
87:a8:a1:d4:0f:59:3c:93:60:c0:9a:a0:98:e4:6c:4a:72:b2:
f8:bc:29:5d:4a:1b:dc:7d:63:2b:df:23:89:cb:ca:b4:22:e1:
5c:6f:5e:f6:52:d1:b0:68:ef:7f:57:4e:53:34:39:bc:2f:24:
12:e9:9a:a6:a5:64:1f:08:67:a5:79:ef:e9:29:2f:11:93:a1:
0a:f9:49:ff:9a:26:3a:68:1f:80:d8:b4:5b:0a:42:5c:ff:15:
f7:d5:91:43:67:71:da:b7:60:bf:70:2b:2e:1d:2e:97:2d:a7:
20:c5:3b:52:35:2e:aa:e8:1e:55:57:87:46:ac:14:a9:d9:3c:
73:40:34:40:87:e3:0e:c7:89:96:40:71:1f:42:62:8e:e4:e0:
ed:c5:5a:7e:b2:e7:3a:39:8b:58:10:3b:6f:d4:d3:e8:19:b0:
b7:95:d0:3d:9a:97:aa:b3:57:91:9f:a8:72:d6:f5:1b:0b:98:
09:ff:d3:ba:20:8b:6e:f4:dc:46:ac:f3:d9:55:34:3d:9e:ea:
8e:18:6c:98:0d:b6:8a:b1:53:36:30:f1:00:6b:a4:75:c2:fc:
d1:f6:74:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:07 2025 by rpki-client