Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
File: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft (raw, json)
Hash identifier: IghnEpG3M9lScolMMsc+7yqokLmN9/4AYy5NPpzTICw=
Subject key identifier: 63:41:12:6C:BB:87:7D:C0:2C:CE:FA:7D:69:6C:C2:99:61:2E:4C:12
Authority key identifier: DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
Certificate issuer: /CN=dea85f21668a98d7e81a74183f0cce513086601b
Certificate serial: 0199FBEB83F3A45A14AE5672891BAD2D043B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
Manifest number: 0675
Signing time: Sun 19 Oct 2025 10:02:19 +0000
Manifest this update: Sun 19 Oct 2025 10:02:19 +0000
Manifest next update: Mon 20 Oct 2025 10:02:19 +0000
Files and hashes: 1: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl (hash: Ilaic1GimJxAPonFIOhJH74pNGAltKxuc0PkU6kBxdY=)
2: Vnw9H8iqt-gts3LY3CEVf7p6PaE.roa (hash: s2vDBc3kUppwqWxQSMIljxY/yV7+Xm77EH+5A9yGbgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:83:f3:a4:5a:14:ae:56:72:89:1b:ad:2d:04:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea85f21668a98d7e81a74183f0cce513086601b
Validity
Not Before: Oct 19 10:02:19 2025 GMT
Not After : Oct 20 10:02:19 2025 GMT
Subject: CN=6341126cbb877dc02ccefa7d696cc299612e4c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:d5:5d:f9:cc:70:29:fb:bb:91:95:6e:ab:
94:ed:ad:2d:12:ec:8e:bb:e5:ef:f7:28:14:d7:d4:
49:43:15:8d:15:8b:88:ce:73:ea:9b:86:f4:a8:da:
ca:0d:d0:53:f3:83:94:ce:67:97:87:dd:85:36:fd:
0d:a5:99:9e:fc:e8:ca:6a:24:ea:53:ce:7c:96:47:
2d:f3:14:80:80:d0:32:4f:b0:75:af:01:ca:94:01:
84:cd:45:f9:3b:16:71:7e:9b:c3:9d:0c:17:ba:72:
09:24:71:79:e6:92:4d:02:0b:70:39:11:6b:29:c9:
04:7f:03:02:d8:1a:b9:c9:5e:04:5f:80:08:67:ab:
91:65:c1:b4:41:7b:f1:b2:1d:b2:cf:bf:01:2a:4f:
68:a2:0d:06:5d:99:04:dd:08:2e:33:b7:5a:5f:7a:
e9:ca:e5:f0:6e:eb:4d:23:6e:17:71:6b:f8:c6:5e:
a5:81:af:e5:a2:78:c0:9c:a3:48:b3:69:9a:6f:af:
7f:79:2e:6f:c2:6d:55:1d:55:35:a2:05:c7:4f:88:
08:94:19:84:27:ab:67:cf:e3:5d:a2:f9:32:7c:b8:
e7:74:0b:a4:89:01:28:36:af:06:ec:82:b0:cb:4b:
cc:91:40:fb:0e:39:c7:8d:9d:8e:90:3a:15:a4:a6:
4d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:41:12:6C:BB:87:7D:C0:2C:CE:FA:7D:69:6C:C2:99:61:2E:4C:12
X509v3 Authority Key Identifier:
keyid:DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:26:4e:cd:72:82:7f:a5:5d:bb:cb:62:86:b8:2c:44:2f:1c:
9f:70:8e:6a:71:c4:cb:79:ca:16:43:66:18:50:06:e7:bd:16:
35:e1:92:3a:4c:09:55:00:84:6e:ed:43:31:91:cf:23:1b:c8:
54:5e:49:26:fc:e8:e8:98:79:df:7d:52:b3:b5:c2:46:b0:ae:
a6:39:b0:37:c1:21:fc:d9:8e:35:a3:2a:95:9c:df:15:d5:86:
7b:ff:3c:8a:d7:65:32:b5:4d:c1:81:ea:1b:9b:e8:63:e5:a0:
69:13:bf:d8:ad:21:cb:a2:0d:68:ca:82:a9:46:c9:9a:01:b4:
f7:29:31:26:9a:75:ef:52:bd:c3:89:82:9b:cc:15:4b:c3:72:
2a:bf:a6:09:28:db:ba:4c:b5:43:19:5e:77:02:8e:ea:62:00:
4d:4d:3b:a2:6a:11:64:ce:97:5d:fa:41:de:77:65:08:49:81:
20:e2:21:ad:82:84:c0:1c:83:01:e4:14:9f:2a:da:a1:72:aa:
58:c4:f6:ac:c1:85:bb:34:b5:02:9a:69:35:74:59:8f:ab:1e:
39:13:6b:c7:5f:b5:97:ff:a2:14:0f:63:13:b6:79:9f:9b:5a:
d6:32:07:07:76:47:7f:30:96:89:6e:4b:39:31:8a:eb:5f:28:
48:5e:46:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:55 2025 by rpki-client