
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
File: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft (raw, json)
Hash identifier: 5vlRpea1fMUvUjB07Ktz5oT+BIXUKZz/ja5ehFYJ1Bw=
Subject key identifier: 04:31:3B:3B:F9:89:1E:AB:C0:65:4C:5A:CB:F8:47:EB:DB:AE:F2:73
Authority key identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
Certificate issuer: /CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Certificate serial: 0199FBEBF6C11ACE46E753B2DA9BD89B8103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
Manifest number: 03C3
Signing time: Sun 19 Oct 2025 10:02:49 +0000
Manifest this update: Sun 19 Oct 2025 10:02:49 +0000
Manifest next update: Mon 20 Oct 2025 10:02:49 +0000
Files and hashes: 1: fxlFgI3EysiECIF3mL-wg3P66gA.roa (hash: WG+Wf/XaXu5fK/R90C0HW02K/9LIUpQXBf5GmZqFRDg=)
2: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl (hash: z6bpdQqJH3lm1gnQei7f326luC1Kc66f9H7GRSVeVMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f6:c1:1a:ce:46:e7:53:b2:da:9b:d8:9b:81:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Validity
Not Before: Oct 19 10:02:49 2025 GMT
Not After : Oct 20 10:02:49 2025 GMT
Subject: CN=04313b3bf9891eabc0654c5acbf847ebdbaef273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:43:e2:7d:00:b4:7d:61:97:b0:aa:00:d7:
bb:25:a3:5f:72:ec:8e:2e:31:1e:64:2c:d3:1b:ce:
a0:31:c4:9b:d9:41:33:b9:9b:75:c9:8d:cf:86:9b:
ec:c2:04:bf:5f:d8:4e:57:9b:03:5b:78:bc:4c:9e:
16:23:ee:b2:1c:b5:df:31:ba:bd:8c:4a:7e:38:1e:
6f:3b:95:7d:8d:73:a2:cb:fc:a1:ea:c2:a7:4c:5d:
f7:f4:49:a3:80:a5:d2:bf:ad:36:6b:12:5e:6c:60:
f6:95:60:f5:ae:11:56:ab:60:45:29:0b:d8:ae:cb:
5b:45:bc:91:3a:7b:64:87:ca:ca:13:28:a4:95:35:
6a:a7:31:ce:94:7a:3e:4e:72:3a:5f:e2:d6:d7:98:
f8:c3:27:aa:8e:cd:d5:97:64:32:3f:04:cc:af:ea:
40:6a:83:23:39:46:64:2d:d0:ab:07:f0:38:78:d8:
85:33:23:4d:f0:80:da:14:b3:d2:3e:70:62:24:d2:
df:fd:7e:ba:da:78:8e:a2:5f:1a:48:23:9c:03:a0:
aa:ca:85:55:d6:db:84:8e:cf:0d:32:93:c3:8c:a2:
90:17:ff:98:9b:f1:e6:eb:a8:f3:78:0e:50:72:e8:
c3:ba:36:45:ca:ba:c3:20:d9:30:6e:7e:38:c3:f2:
81:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:31:3B:3B:F9:89:1E:AB:C0:65:4C:5A:CB:F8:47:EB:DB:AE:F2:73
X509v3 Authority Key Identifier:
keyid:95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ea:ae:43:ff:33:31:40:47:d9:65:9d:fd:1c:bf:05:03:1f:
92:54:90:f5:28:32:38:03:dd:30:46:fc:17:ab:c0:be:40:c0:
7b:de:5b:9c:ca:d6:6f:f4:29:7d:0b:40:94:13:dc:cc:f4:a2:
9f:1c:4b:f4:f9:ee:e9:27:d0:fe:99:5a:f3:37:90:9b:19:e0:
17:ee:6f:c7:6a:cc:58:8b:dd:21:2b:09:7f:47:5d:6e:c5:5c:
13:7a:ea:e7:56:03:3b:c3:fa:92:5d:cc:f7:ee:bd:32:04:59:
f9:47:28:68:2b:11:37:9c:07:1b:f4:f8:6d:9d:b2:b4:b3:58:
e1:82:e2:54:61:7b:fa:cd:a4:40:32:ff:d0:ec:3e:ea:70:3b:
02:60:9b:2f:87:60:54:7d:33:11:32:99:7e:b4:b0:05:ca:0a:
40:06:45:d4:39:0f:d6:b1:fa:f8:56:91:d3:62:5f:72:d8:ad:
37:6e:b0:5f:90:ed:1a:1e:0e:d9:5f:12:8b:95:a0:b9:1b:6c:
c7:90:20:ae:09:99:d0:b2:37:b6:53:f5:7e:cb:fd:87:eb:2e:
2e:1c:b6:b5:bf:ed:4a:4e:b0:1e:a4:1d:9c:ac:fc:67:c5:69:
da:fd:6a:c5:e2:6e:32:b9:7c:c1:95:b0:ac:6f:65:80:2e:54:
9b:0f:7a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:38 2025 by rpki-client