Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
File: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft (raw, json)
Hash identifier: o5oqNUOb6NyZWG3MtHGuHOdRDU65Shtk05mhbyx+XFA=
Subject key identifier: 1C:85:4F:2D:63:6E:38:AF:04:DC:8B:51:26:A2:FA:FD:BF:EC:94:34
Authority key identifier: DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
Certificate issuer: /CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Certificate serial: 0199FB0F3888E9CE9044DB190B903819F473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 06:01:42 +0000
Manifest this update: Sun 19 Oct 2025 06:01:42 +0000
Manifest next update: Mon 20 Oct 2025 06:01:42 +0000
Files and hashes: 1: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl (hash: CbDY4BWTq96WKBP5eb7BTYSeYbDMhvUWxRX0vCvOHoU=)
2: fl1IqJ22OZD_5WNed1aOqRFU-dQ.roa (hash: Kuo9lPYONUc1nk6pXtWGALeHz/jfanabaBDCbZ+GeWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:38:88:e9:ce:90:44:db:19:0b:90:38:19:f4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Validity
Not Before: Oct 19 06:01:42 2025 GMT
Not After : Oct 20 06:01:42 2025 GMT
Subject: CN=1c854f2d636e38af04dc8b5126a2fafdbfec9434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:57:04:4a:93:ea:c4:05:d7:fb:8a:e7:22:
2c:8a:b3:63:8f:2f:09:67:54:fc:58:e2:54:fe:90:
aa:29:fe:55:96:3a:12:e7:41:4b:68:59:36:79:e8:
f9:c7:a9:4b:13:b0:8d:00:dd:b0:dd:26:06:1c:71:
10:9f:bd:75:c4:67:f6:6b:63:90:a1:b3:1e:7c:95:
3f:4d:10:f6:4d:05:cf:c5:11:ab:4d:f2:f8:74:5b:
6b:5d:be:93:7c:99:a0:4f:a0:59:21:a4:a4:b1:c0:
cd:8f:2a:0d:d9:52:b3:25:d6:72:fe:51:7b:de:2f:
5c:f0:cd:a3:66:4c:20:c7:f5:28:66:d6:3c:7d:7a:
e1:f1:4c:29:89:dc:c7:50:73:b8:f8:99:00:44:0c:
cf:26:06:d6:c7:d7:53:34:e2:c3:7f:22:1c:62:ff:
42:f0:94:25:99:98:65:3a:22:dc:fd:3e:1d:a6:34:
4c:47:1a:78:68:a6:9e:16:e5:58:fb:c5:94:4c:ac:
9c:7c:64:cd:35:e1:81:99:5a:84:d5:56:c3:d3:f8:
1b:55:35:cb:71:31:17:f5:15:c8:1e:60:48:13:42:
c8:0b:ca:65:19:c0:4b:9a:69:a2:b2:83:5b:d2:08:
8c:37:90:07:69:8b:4c:5d:ef:eb:cd:26:59:61:37:
86:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:85:4F:2D:63:6E:38:AF:04:DC:8B:51:26:A2:FA:FD:BF:EC:94:34
X509v3 Authority Key Identifier:
keyid:DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:e0:31:cf:90:4c:90:c2:53:1d:e7:9b:47:f8:91:9a:97:42:
33:65:66:4f:11:0b:e6:ab:99:99:f0:22:d6:5d:91:b5:5c:ec:
ce:9e:67:3a:3c:b1:09:34:34:46:1d:4d:d0:e8:27:8b:04:35:
0e:81:f1:52:8a:b1:90:30:46:ec:27:0d:30:21:7c:2e:92:53:
4d:0a:27:d2:76:b0:dd:f0:11:5d:cb:ef:12:98:a7:91:14:a2:
19:ad:4a:8a:42:c9:53:95:e5:56:73:ce:4f:78:29:5a:03:3a:
eb:8d:8f:0e:19:1d:32:7b:f8:e0:ea:5c:6e:a8:66:a2:2c:84:
7c:d6:3f:c9:ea:50:2f:06:49:22:46:3f:6a:b6:42:61:f6:15:
f1:16:bf:f5:1f:2e:59:48:83:0e:bf:c6:02:b9:f7:b6:61:cf:
22:21:26:c8:f1:61:2b:39:5e:1a:c1:53:a5:fa:3c:cc:6f:a3:
f8:96:f5:66:6b:8c:13:4d:de:57:cb:87:f5:7c:7b:9d:a3:b8:
b2:4d:6d:3c:fc:53:b2:21:1c:1e:a5:37:28:f6:4e:2a:25:25:
5f:c8:cb:d1:00:41:9f:15:cb:75:ac:d5:08:cc:c1:64:a2:da:
8b:f3:a7:f1:9b:e3:91:42:e3:8c:30:0a:f6:90:c7:dd:04:13:
67:eb:86:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:26 2025 by rpki-client