Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
File: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft (raw, json)
Hash identifier: 8Yp/faOnFSfTFVfYYXa5eOfNIQK+Jc213r9ZW0ToCqo=
Subject key identifier: 75:68:A4:89:DD:C4:05:B7:EF:59:5A:51:A7:F8:A6:3A:29:5B:A2:C9
Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Certificate serial: 0199FEEC0C59B87C0ECF7D5BA8980E230AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
Manifest number: 1227
Signing time: Mon 20 Oct 2025 00:01:46 +0000
Manifest this update: Mon 20 Oct 2025 00:01:46 +0000
Manifest next update: Tue 21 Oct 2025 00:01:46 +0000
Files and hashes: 1: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl (hash: 0/bkzaeX3yxgLTS7uZp1FLC/n1fJFGWLMM694Lw8u9U=)
2: _Kt_ylx952g7HZhxMZibU4U_S9U.roa (hash: BRXKGTpDPGrVqoVy2fXV55G1/RGVRY4TQXSqB3YxXnw=)
3: bJ6OkDBz35azmUeGZSSY8SRMI4Y.roa (hash: y21BnaoaGpgbQvC0jOtfGrk+wq3H1xWVUYMR7XJq8OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:0c:59:b8:7c:0e:cf:7d:5b:a8:98:0e:23:0a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Validity
Not Before: Oct 20 00:01:46 2025 GMT
Not After : Oct 21 00:01:46 2025 GMT
Subject: CN=7568a489ddc405b7ef595a51a7f8a63a295ba2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:cc:c8:7a:c9:c9:4a:49:8e:8b:79:dc:46:
99:c0:78:70:af:07:9e:7d:3d:79:5f:74:c2:dc:de:
f5:e7:dc:be:5b:23:72:e0:9a:6c:60:44:a7:2a:8e:
0d:5a:43:7b:a0:12:24:5c:d9:c4:71:f1:10:cf:c8:
5c:66:13:b9:3b:5b:a0:6d:ba:92:2a:b9:5a:45:ba:
0d:01:d9:f5:76:04:ed:da:dd:1e:0c:cd:48:0f:e6:
fb:08:d8:8b:d7:7d:80:c3:a0:bc:9b:8b:4a:da:5a:
72:49:b6:ea:20:77:58:75:fb:ca:c9:6b:3f:40:35:
e5:17:c2:b7:dd:ed:2f:d7:ad:d7:d0:9d:81:57:68:
ee:69:ea:92:70:8e:67:ff:6b:9b:ca:d6:67:70:0a:
3b:3b:34:9a:73:ec:19:e7:60:bb:02:16:54:c1:68:
14:ce:01:9d:b5:00:49:b3:6f:e7:89:57:25:06:95:
eb:d7:78:80:de:63:d4:63:66:0f:56:8c:f7:5a:ee:
43:30:4e:cd:8d:13:f6:8e:a3:b6:d3:32:2a:6d:4a:
da:3b:7b:56:9e:a3:2c:3d:bd:c8:80:c9:4c:1c:22:
48:94:50:22:d4:9b:6a:f3:8f:8c:c8:9e:63:b6:00:
2c:3c:65:3a:46:46:3e:fa:c9:da:bc:d7:4e:3f:fb:
fd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:68:A4:89:DD:C4:05:B7:EF:59:5A:51:A7:F8:A6:3A:29:5B:A2:C9
X509v3 Authority Key Identifier:
keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4a:77:4d:5f:72:d0:b4:80:45:e0:27:56:dc:67:88:31:fc:
e4:4a:8a:ff:bb:95:aa:38:6c:a7:de:31:a3:8f:c5:94:29:b6:
d5:eb:33:9c:41:c7:24:df:ed:ef:36:f5:df:35:e7:e9:d5:88:
b1:99:b2:5a:37:0b:33:84:66:ce:14:77:b5:93:50:c0:0c:0f:
f2:37:5d:6d:cc:86:bb:06:8b:e7:bf:de:f6:ed:50:7b:09:a7:
7d:68:62:9e:7f:6c:be:d6:8b:a7:4b:b4:e5:5d:68:94:f1:8d:
3e:6f:d9:e7:30:4e:67:7a:32:18:cd:c0:bb:85:f2:c3:55:0a:
2b:fe:66:4d:f1:6c:a3:88:a2:e7:68:9e:b1:a5:c9:c7:41:a3:
6e:64:20:f7:5d:2d:2a:bf:1a:10:0a:68:d5:fb:5c:6f:75:47:
50:c4:45:30:06:a7:ad:da:fe:14:93:62:dc:e1:a5:7f:67:dc:
3a:50:1f:21:ab:f2:b8:67:fc:a8:9e:1b:32:4c:d0:e5:50:44:
b8:b8:c1:ca:63:31:10:39:93:75:96:2d:a3:45:fe:f0:d6:c9:
09:6c:33:b0:fc:78:ce:71:f0:19:b0:dc:4c:17:65:2d:18:28:
5c:fd:7f:eb:89:9a:98:e6:d7:61:91:bc:6f:d3:30:63:df:93:
e7:9e:49:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:59:04 2025 by rpki-client