Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json)
Hash identifier: vQw8LYIU+vI8sXcL4/7uCzOdTtEIbFMkeDLL3YSTDkc=
Subject key identifier: 9F:82:ED:E7:22:31:6A:74:53:02:04:0A:55:B4:B7:E0:7F:27:E0:E7
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 0199FAD807C4BD6855BE6C9E691F232C9A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
Manifest number: 0D58
Signing time: Sun 19 Oct 2025 05:01:25 +0000
Manifest this update: Sun 19 Oct 2025 05:01:25 +0000
Manifest next update: Mon 20 Oct 2025 05:01:25 +0000
Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: NW2v65Vey979JOtgJt091vYK9752M8OfnSyKRYMHeVI=)
2: 7d2ToMhT-5ZAU4qsYQXruw_MoIU.roa (hash: vm5X1sab9HJagyLFII3df7BekSqzu2gNn9apIe4J5uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:07:c4:bd:68:55:be:6c:9e:69:1f:23:2c:9a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Oct 19 05:01:25 2025 GMT
Not After : Oct 20 05:01:25 2025 GMT
Subject: CN=9f82ede722316a745302040a55b4b7e07f27e0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:7d:5d:c8:e4:2e:d1:63:39:a8:aa:39:ff:
3b:79:e5:dc:6c:b3:1f:c8:49:e9:54:76:ca:05:3a:
5c:57:6a:22:81:27:8d:41:b8:13:55:e1:f4:d9:7b:
d1:ed:3b:f2:90:1d:88:a4:26:f9:3c:c5:85:bb:d3:
84:de:be:3b:3f:a1:a1:46:7f:b0:60:93:58:66:5a:
4b:51:47:10:6a:09:36:68:15:64:f6:5e:b6:3a:42:
5a:79:80:5d:59:31:0d:22:f2:0e:ad:2d:6e:a1:0f:
85:b9:90:ad:17:e3:49:8e:6f:dd:17:d1:37:97:7f:
dd:57:3a:10:d7:0b:4f:1d:b0:2e:28:1d:97:04:b7:
35:08:8a:4b:d5:46:f6:7f:f0:b9:02:05:f9:15:60:
e1:b6:13:ea:23:ac:2c:bf:75:de:73:42:24:7f:47:
a2:2f:25:ed:45:76:f9:7b:55:4f:a0:46:d8:56:8f:
55:cf:71:9c:7b:cc:a4:8e:75:f3:43:a9:f2:67:9b:
6e:c7:0b:ea:61:19:60:ad:2c:15:1f:d7:f5:97:54:
1a:da:26:ae:0e:74:6d:06:98:04:c4:42:8f:b3:1b:
af:e8:8d:d9:37:bf:b6:b0:0e:a0:23:4f:3d:8e:70:
39:59:e2:ae:25:c2:7c:e2:85:53:46:30:4c:53:1c:
41:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:82:ED:E7:22:31:6A:74:53:02:04:0A:55:B4:B7:E0:7F:27:E0:E7
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:3d:a1:87:9b:5f:c3:69:10:54:d8:ed:e3:23:c2:3c:a0:15:
c9:58:42:73:e0:98:57:0d:88:b5:66:db:3b:8a:cb:f5:76:96:
3a:a7:15:e0:d3:a9:34:55:d7:9e:1d:b8:29:c8:57:e6:3e:a3:
f8:1a:d3:ab:92:96:da:8f:4a:5c:42:b2:48:aa:90:11:36:38:
20:68:9d:8d:e2:a0:0c:57:e2:c7:1c:31:43:c7:16:eb:fa:45:
11:77:e3:cd:5c:5f:51:dd:fe:da:19:7c:35:90:45:96:06:55:
3a:c0:b7:34:8c:ee:32:fd:1e:ec:10:4c:06:28:34:09:3e:1b:
25:78:5f:37:e1:e6:4a:ba:35:3f:61:a8:5c:88:a2:53:47:bd:
6e:f7:12:6f:ed:50:c7:81:2f:c9:42:d4:30:db:4e:11:98:3d:
7d:ae:4e:c8:c6:7a:b4:55:cd:fe:bb:4c:5d:2d:86:0e:95:f6:
ef:95:f2:d4:92:3b:83:84:3c:91:a0:e8:16:09:d7:17:af:6f:
e3:86:0d:39:e8:39:0f:f6:7d:a9:44:4b:69:76:b6:ec:99:62:
3e:39:52:42:ae:62:ef:d9:1c:d6:5d:12:b1:d2:92:07:27:c4:
c7:4a:96:2e:c6:7b:d5:2f:bd:9f:21:d7:16:64:6d:a5:16:a7:
53:6a:9a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:11 2025 by rpki-client