Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier: jje7I6jSQKbRpBrlYFX/JkqHVh/fsf1A6+la6BFRLPQ=
Subject key identifier: 17:38:7B:E7:12:34:63:D5:30:B6:52:94:6E:EB:C5:7C:25:51:E2:76
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 0199FE0FDA3AEC367936EDB6E71C0B9DB913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number: 10C9
Signing time: Sun 19 Oct 2025 20:01:15 +0000
Manifest this update: Sun 19 Oct 2025 20:01:15 +0000
Manifest next update: Mon 20 Oct 2025 20:01:15 +0000
Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: qEfl5T/kcLL1b4wvw3iSy5Vs7mFEDRrqeqcRSQ/1PVk=)
2: HbrG3H8i4MVchy7ux-rBNewfgN4.roa (hash: ZEnkqludW6ORRLo4vaUnR4azLQNvPJWfXdiBq5telHQ=)
3: eqT6wyPQANegQWczS_E8NsRIGH0.roa (hash: uVTDWyi87OupvvigMLyo7l17Ar6OD8Dv20/y/RB28lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:da:3a:ec:36:79:36:ed:b6:e7:1c:0b:9d:b9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: Oct 19 20:01:15 2025 GMT
Not After : Oct 20 20:01:15 2025 GMT
Subject: CN=17387be7123463d530b652946eebc57c2551e276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e0:e2:8b:40:8c:e8:9f:a1:3d:f8:6c:af:ed:
83:b5:76:2a:dd:38:ea:6d:d1:40:5a:27:f4:a6:5e:
4c:36:e5:6a:36:5a:d2:c4:ad:dc:01:1a:35:83:17:
d6:2d:a5:0c:7c:20:cd:1f:e0:49:1e:f8:4c:cb:f5:
c3:fd:8d:20:09:ae:d5:10:ce:33:4f:3b:db:85:ba:
16:ca:3b:a0:97:60:11:2b:84:0e:a5:28:ad:fd:34:
6c:29:79:27:14:55:75:80:93:47:b7:e9:3a:8e:5b:
0d:17:cf:45:85:26:3f:8e:e2:71:32:64:e0:63:28:
d0:d8:cf:5e:da:e9:2a:f9:58:63:84:e7:5f:1f:82:
ce:41:2d:53:4a:4a:6e:d7:55:9b:7b:f1:d1:30:de:
bd:3b:ac:3f:c9:e9:45:91:ef:2a:f5:e0:37:6a:30:
30:b6:ad:c8:db:c4:08:4f:71:a4:fc:cf:0b:4d:02:
5c:65:99:2e:63:85:bc:71:ce:77:8b:3d:00:15:a0:
22:1c:13:d6:08:3e:f8:92:e7:a4:21:77:fc:b6:e2:
47:d1:2e:4a:19:4e:78:68:b6:18:ea:82:cb:24:61:
08:41:b5:49:24:97:91:4b:d2:5d:35:e6:f4:40:15:
3e:b0:85:92:b3:07:a0:8f:b0:1e:2a:20:6c:28:09:
b8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:38:7B:E7:12:34:63:D5:30:B6:52:94:6E:EB:C5:7C:25:51:E2:76
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d2:a3:15:af:a4:b7:25:39:af:01:26:b1:70:c4:69:fc:19:
b0:6f:ff:76:c7:ff:75:8c:66:f3:e6:73:3b:da:50:88:22:c7:
03:30:4f:97:82:0a:46:da:ef:99:05:e2:ba:b0:4c:49:54:dc:
9b:ee:48:cf:52:58:4b:ee:f0:76:ee:f2:d2:64:b3:c4:9a:8f:
5f:af:38:67:cb:e3:a0:74:1d:af:c5:53:f5:e5:a0:2a:6e:b2:
c9:fa:a2:d5:45:09:e0:af:c3:93:ca:aa:a7:9e:8e:d6:92:e7:
9a:e7:a9:f5:36:d7:e3:29:f0:2f:89:15:e2:c1:dc:28:40:03:
4f:2e:cf:b7:e9:01:d0:41:c8:2c:5e:4d:b7:c2:4b:41:04:52:
44:3f:63:af:47:20:65:9c:4e:6f:ea:1b:0e:ce:9c:a9:b1:93:
73:c6:83:fa:a5:59:42:bd:7c:58:7e:c5:7a:c4:23:41:41:a3:
63:4f:29:2e:17:22:be:63:7e:62:1d:d8:e7:e4:18:19:a8:53:
37:f7:e1:b7:59:3c:6f:97:3c:61:1b:21:90:ee:8c:23:f1:08:
e3:d2:c3:9c:d6:ec:71:2c:08:0b:d0:48:5c:f0:03:02:59:74:
30:bf:59:5f:91:b0:29:0c:a6:31:aa:9f:45:e0:cc:8b:ab:b5:
fe:da:12:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:11 2025 by rpki-client