Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
File: 3c6wiktA8fheTroXzcfIPke7WX0.mft (raw, json)
Hash identifier: vkwYRpGEWAKHr1B7iTe/+QfAiEczH57fYeTbEDLY+JM=
Subject key identifier: 68:7F:64:34:B0:B5:72:9C:82:56:33:44:CF:31:8B:28:54:96:07:12
Authority key identifier: DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
Certificate issuer: /CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Certificate serial: 0199FC8F4CC07CA446510826520951BB5FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
Manifest number: 0C57
Signing time: Sun 19 Oct 2025 13:01:13 +0000
Manifest this update: Sun 19 Oct 2025 13:01:13 +0000
Manifest next update: Mon 20 Oct 2025 13:01:13 +0000
Files and hashes: 1: 3c6wiktA8fheTroXzcfIPke7WX0.crl (hash: WTzE28qFsnSlyOZetK7iazm/jVtJIo6jaYraTYT+Yx8=)
2: wkcnsTzQjgo9eEySS50APSZKqWQ.roa (hash: SKv++65s2nAU0vbkJDBqrGiZUMw6xX7YKBnglQkJRuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4c:c0:7c:a4:46:51:08:26:52:09:51:bb:5f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Validity
Not Before: Oct 19 13:01:13 2025 GMT
Not After : Oct 20 13:01:13 2025 GMT
Subject: CN=687f6434b0b5729c82563344cf318b2854960712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:e4:2b:8b:23:01:b8:99:20:37:7f:b0:3e:
df:e1:7e:83:a0:b2:ab:42:81:9c:2e:05:f6:7d:57:
c0:ee:fc:a7:bc:e1:3e:21:46:f6:da:ce:51:33:3e:
06:4f:8c:14:a8:47:c3:fc:29:6b:5f:ce:a5:ce:cc:
7a:4f:10:fa:3e:f6:11:8f:05:94:19:b8:47:85:cb:
b9:a6:69:6f:6d:91:b5:06:f7:fa:d8:f2:08:b7:e2:
44:cd:99:78:f5:5a:0a:f4:a8:73:8b:47:5b:7b:c5:
76:ac:f7:30:7f:4a:eb:ef:12:7a:30:d4:7f:9a:22:
7e:01:5b:41:64:b4:2d:a0:18:6c:a5:e6:c9:68:d0:
42:48:bc:7c:52:0c:23:f1:1a:a7:6d:24:84:f2:a4:
fe:e8:55:3e:97:b8:8f:83:cd:be:ce:d7:c2:d9:08:
a4:cc:95:3d:d5:70:4c:98:1e:79:1d:d6:91:e9:6c:
ef:88:58:1c:73:68:73:66:d4:79:dc:35:a6:49:1d:
23:70:b8:2b:50:25:4d:12:f9:82:19:34:ac:4b:12:
e9:91:5a:e8:2d:f2:cd:75:61:9d:55:29:61:df:64:
d6:81:12:2c:ee:15:9b:20:68:03:02:22:c9:a6:fe:
2b:e7:93:1c:7e:88:cf:ae:6c:b3:2f:ec:09:52:10:
f5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7F:64:34:B0:B5:72:9C:82:56:33:44:CF:31:8B:28:54:96:07:12
X509v3 Authority Key Identifier:
keyid:DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d0:3f:7e:f7:d8:49:23:e9:af:b7:e1:23:66:84:37:aa:1c:
19:75:46:94:a5:c7:48:a9:ce:6d:da:62:72:6b:e3:22:50:d0:
51:47:f0:57:7c:7e:5f:5d:28:99:5b:e5:c6:7c:a4:a5:3c:03:
f5:74:6e:0e:e9:91:7a:e1:2a:6a:a3:50:fb:37:f0:90:69:1b:
b6:6d:f0:dc:f8:4f:d9:00:9e:59:23:50:42:25:e1:0a:0d:ce:
66:0f:4f:da:ae:4c:19:3f:7d:ec:f1:9b:42:d5:25:99:0f:28:
4d:f1:27:a8:4d:65:f7:b3:cd:3f:d3:65:e4:ce:24:68:2d:c4:
ad:49:37:22:04:50:56:d1:1c:fa:23:b0:5d:92:6f:be:61:13:
29:5e:18:5a:18:e6:6f:7e:84:37:eb:cd:23:86:b5:91:44:3a:
01:bd:90:4e:49:11:e2:d0:63:be:89:3e:02:85:1c:48:32:2c:
ae:8b:6d:53:4f:f6:db:a5:f3:5b:e1:8b:15:bf:8c:d3:fd:3d:
a4:3a:ab:98:ad:e4:77:07:49:ca:12:ab:c0:99:e9:66:30:49:
7c:58:3f:61:9e:da:ff:16:7b:65:ca:fa:48:a3:67:65:5f:46:
58:d6:83:77:84:91:c0:d7:95:90:c5:3c:64:f9:1a:05:33:fe:
e3:93:ba:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:50 2025 by rpki-client