Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: /YGPnTRsEvEHN4DIrBtlSW4HrbjguXjlB+DIweExrmM=
Subject key identifier: ED:BD:0A:6E:82:9F:84:11:75:0D:7F:98:63:D0:44:AB:DA:04:69:DC
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 0199FDD9BD88B3616B1F2341B3BC7345D82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 0925
Signing time: Sun 19 Oct 2025 19:02:09 +0000
Manifest this update: Sun 19 Oct 2025 19:02:09 +0000
Manifest next update: Mon 20 Oct 2025 19:02:09 +0000
Files and hashes: 1: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: JcQQhHuPcAcyvIHIVwsK/nNC+kz58AJNtsJAw2mn4Xk=)
2: W8Dpmpt_1-01qSbotVM15n3GSek.roa (hash: 8bMbdbcHjYf7KXHu+ym0lwgv0cPY/hCCrTp1Qv0O4sU=)
3: d-If6rwOnPiVqU22C8IZzGvMPvc.roa (hash: giLRuwy5wW+MIOBjFAF7Pd0PEoYtI2K0pgdHGw83fkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:bd:88:b3:61:6b:1f:23:41:b3:bc:73:45:d8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Oct 19 19:02:09 2025 GMT
Not After : Oct 20 19:02:09 2025 GMT
Subject: CN=edbd0a6e829f8411750d7f9863d044abda0469dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:97:83:1e:ac:db:52:58:5b:25:d0:b9:53:a5:
22:4c:7c:76:8f:50:14:06:c1:ce:e2:64:21:2b:7a:
d0:3c:66:35:bb:13:09:b8:52:93:22:42:54:4b:25:
8c:9e:23:d5:0b:e3:ec:41:75:5b:c8:bd:ab:80:77:
c0:e9:21:77:97:bc:e3:72:bb:8f:24:90:25:9a:75:
bf:09:60:63:b2:ab:6c:9c:23:90:2f:3d:fc:66:61:
89:33:8b:08:2b:4b:5b:53:a1:be:bb:63:76:5a:9b:
e8:5d:95:32:8b:b6:a9:7a:38:49:47:f3:10:97:b6:
53:54:18:a0:36:c2:d8:fb:c1:05:62:61:95:92:03:
d4:44:c0:f5:1a:79:fa:cb:05:2a:f9:9b:22:18:49:
1b:02:a6:af:b8:29:bd:17:cf:40:f1:81:1d:4a:a8:
20:18:ab:ce:c6:94:e8:71:be:51:1c:95:66:6f:ab:
de:62:9c:c8:a8:1b:db:65:49:b7:f9:9d:d7:16:1a:
d8:47:7a:c1:c1:91:62:a9:ed:cd:e3:c4:b0:a1:d5:
45:d9:d4:63:6a:eb:fa:8d:0f:12:d1:07:9c:90:50:
78:a0:66:f9:28:a2:80:92:96:1d:35:55:3b:61:0a:
55:fd:9f:30:68:1d:4f:6b:1a:32:ec:61:12:1d:38:
d8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BD:0A:6E:82:9F:84:11:75:0D:7F:98:63:D0:44:AB:DA:04:69:DC
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:78:b6:cd:ee:5e:31:e8:5f:68:61:82:30:99:7e:77:e3:fc:
a6:e2:9c:3e:d4:4f:a7:b1:d7:d5:3f:ce:88:2e:bc:41:09:94:
4f:b5:21:5a:28:81:58:19:79:da:d9:41:eb:e5:cd:12:25:31:
51:ce:00:3c:f6:42:c9:b3:19:60:3c:d7:72:62:95:f3:7e:5d:
97:c1:57:41:98:fd:9f:59:11:d5:9e:3f:85:86:5d:75:17:7d:
4d:f8:47:ca:ed:18:22:af:ef:3f:12:cb:a8:38:33:57:69:19:
a2:b8:fa:a1:76:98:db:d5:19:64:a1:0b:79:e7:21:50:ea:3e:
80:ac:2d:fc:c3:5c:5b:70:c7:d3:89:7d:db:0f:2f:b8:1c:f1:
76:9e:1b:46:d5:1e:5b:aa:81:6b:2b:b5:91:f4:98:e3:b4:e3:
31:e7:f6:53:e1:19:07:63:66:17:a5:61:90:7e:d3:be:87:c1:
ed:e9:28:38:3d:9c:a6:55:46:17:7f:42:77:d4:3d:75:6a:a3:
a9:24:09:fe:94:20:8f:8b:17:e5:f4:e8:5c:e8:47:41:2d:7d:
cd:95:0c:7f:fb:55:32:a8:9c:91:e7:44:b3:9f:e7:d3:d6:c2:
46:0d:28:12:cd:fa:df:28:cb:77:d7:11:56:57:69:d6:92:c4:
fb:94:3f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:41:28 2025 by rpki-client