Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: ajkRxDjOx4Ne2JuBXieiflMFK5Eb+Jrc2zKwFeoFsJE=
Subject key identifier: 43:36:BB:C2:A4:9B:5D:85:09:26:F2:2C:2F:0F:8D:D7:FD:E6:F2:E5
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 0199FDD8CD2CDEC132982F2FA45C4ABD68BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:07 +0000
Manifest this update: Sun 19 Oct 2025 19:01:07 +0000
Manifest next update: Mon 20 Oct 2025 19:01:07 +0000
Files and hashes: 1: 2MtCsLRfRRVkmWmmR_RgvP_iiYM.roa (hash: HuLQbolqCGZmiUhvPO/wiFvtWi3Okwmgccu/aBpptuc=)
2: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: v47IpzNChdYcRzxpPLmZc6LDlNJAQZ4XOsd9qVhnTwg=)
3: S87qjShx0Cde64tPkPpF-gZYMZE.roa (hash: KfR58Ep5CQd0S3bEgqtjtqAMWmdjTVJqVmZhBaCwNRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:cd:2c:de:c1:32:98:2f:2f:a4:5c:4a:bd:68:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Oct 19 19:01:07 2025 GMT
Not After : Oct 20 19:01:07 2025 GMT
Subject: CN=4336bbc2a49b5d850926f22c2f0f8dd7fde6f2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:87:60:ee:04:e8:c7:38:52:40:51:e8:8b:
1b:ac:f2:b3:a1:97:14:b4:50:9b:09:56:d6:06:12:
bd:1b:51:23:22:33:b1:89:9b:cb:8a:f5:8c:c5:f6:
37:fd:97:c6:35:05:82:71:f9:d6:00:d1:a7:f7:85:
eb:2e:fc:2d:c5:b2:47:45:67:01:00:56:c4:df:43:
9d:fa:48:bc:90:24:dc:5a:a4:b8:6d:a1:11:27:d0:
e0:38:71:63:75:6a:4d:19:7b:73:2b:6e:6d:86:1e:
f7:98:17:5e:db:32:b5:c8:7a:40:17:69:20:66:ba:
ce:a1:59:42:5b:60:b1:75:d1:7e:68:f2:ce:20:5e:
94:74:9e:55:b8:03:52:0a:ab:7a:dc:4e:7d:a6:07:
6f:9e:ee:aa:7c:75:0b:1c:4d:b8:bb:d9:e3:1b:ec:
6d:ca:f5:0d:ad:5e:31:ee:88:b6:d1:ec:cb:80:3b:
26:05:a9:63:a6:a8:ce:51:8f:a3:6b:0d:ab:65:ad:
21:11:ae:3c:da:63:be:1c:21:8c:9f:7a:97:e0:65:
e7:84:dd:2e:69:f8:58:80:6a:09:2c:3d:33:76:b8:
cb:eb:a4:01:52:2a:7e:44:75:e3:a2:5c:4a:59:49:
d9:94:11:90:f2:bd:a5:2f:97:bb:2f:da:77:b2:4c:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:36:BB:C2:A4:9B:5D:85:09:26:F2:2C:2F:0F:8D:D7:FD:E6:F2:E5
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5e:57:56:d1:b3:d1:66:70:06:bf:8c:cd:7e:24:00:ed:71:
ac:90:f1:ca:0b:9e:c9:ef:36:57:97:8a:b8:72:bc:1f:e3:5b:
8b:d0:2c:ae:e0:63:47:25:ea:1c:81:d2:1b:de:2d:4a:68:f3:
23:58:0e:ea:36:24:ee:92:1a:e2:1e:52:b4:da:98:77:f8:1d:
e6:53:93:26:a1:36:18:d1:1f:aa:17:55:7e:ad:e8:d4:62:63:
58:16:a2:a0:49:59:6d:4f:bb:38:c9:64:2e:98:9a:7c:57:8b:
bf:f8:0c:d3:4d:56:bd:bf:a8:20:16:f1:bd:e4:5f:45:26:88:
6c:ca:0c:aa:25:a8:04:42:a8:09:b7:88:93:74:5c:84:1b:57:
cf:8e:8e:65:98:42:30:16:ed:4e:17:97:64:c5:25:73:78:1e:
a9:f1:4e:95:b1:3f:a0:57:08:82:33:53:cf:66:73:f0:19:53:
54:db:b5:18:b5:5f:ea:1a:d9:a1:3d:c2:5d:46:3d:59:4e:37:
55:6c:de:69:df:d9:9b:b5:1a:af:ad:51:8d:85:cb:ea:5c:56:
46:5f:17:4c:c1:df:b8:bf:78:a5:bb:1d:a0:3e:c0:23:b4:36:
63:07:19:02:16:a7:9d:f0:65:f4:0d:f7:14:49:a7:65:00:a7:
e2:c4:37:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:31 2025 by rpki-client