Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
File: 3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json)
Hash identifier: HZmY3vUpp6tfwWv4ybZDTBNFEDwceU0xXbU6YTHOsro=
Subject key identifier: AF:9B:19:17:3A:1C:42:55:2B:48:39:AF:28:8C:7B:EC:DA:3E:A1:1E
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Certificate issuer: /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial: 0199FFC7B94B2E884445822FA0D2DE979089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
Manifest number: 16F5
Signing time: Mon 20 Oct 2025 04:01:43 +0000
Manifest this update: Mon 20 Oct 2025 04:01:43 +0000
Manifest next update: Tue 21 Oct 2025 04:01:43 +0000
Files and hashes: 1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: qpbcp+ScuLpbR7InoIJZvT3EmFt0T+y7nAkyy8dpi9g=)
2: I3GFCz8gt6Rki8DJxRT45IEltuo.roa (hash: uBBouPhKhyaXIv9GSGFn2zrE6uv7a/jKMDEUQeG9Dfo=)
3: RoNUSsRbSgnW76cSNeAr425YYHY.roa (hash: ty/WAAmbUm3G9276dnnVRYAsJCuw7HHC84siWPb6a6o=)
4: j06EmkksF4YrV0BvXtZ5BQd7X_0.roa (hash: W1w1cQpGhDndwAuyI1OFa9FFiGMVh7oMpQVYkrYTonk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:b9:4b:2e:88:44:45:82:2f:a0:d2:de:97:90:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Validity
Not Before: Oct 20 04:01:43 2025 GMT
Not After : Oct 21 04:01:43 2025 GMT
Subject: CN=af9b19173a1c42552b4839af288c7becda3ea11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:3a:c3:a0:07:01:62:68:db:00:1b:78:1b:
0c:93:bd:11:11:1c:e7:0e:ea:ba:29:7c:9f:03:a7:
d0:70:7e:4e:91:c5:85:ad:6a:0c:46:ac:a9:93:21:
a6:54:91:77:20:e0:45:44:7d:e6:cb:6c:09:02:32:
0c:95:af:e8:3f:f0:86:0a:32:9e:95:d0:8f:fb:c6:
a5:fe:69:18:2b:c8:3a:b9:40:1c:fd:59:ce:49:df:
9e:20:db:2d:8f:09:25:41:e1:b9:67:d8:a6:da:6a:
38:25:68:86:03:bc:6d:f8:2e:34:53:21:eb:80:d3:
46:68:2a:22:99:91:e0:bb:ec:96:2c:39:cc:a1:4e:
65:9e:eb:76:3a:12:32:2c:40:6d:f5:76:f9:35:6f:
c3:b4:b7:05:d0:38:4a:ac:17:c0:05:0c:55:7c:80:
03:22:2f:55:08:98:43:4c:a6:fc:9b:1a:94:b3:cf:
39:88:87:f8:df:ed:18:03:45:e6:01:02:6d:ec:ac:
1c:ef:88:a1:e8:cd:21:c9:a3:78:b1:1a:10:75:a1:
51:f3:d1:ee:9a:61:ae:cd:5a:b5:b2:18:eb:c0:70:
c9:03:6c:88:1f:f8:c5:cd:21:e6:8d:12:68:8c:ba:
08:9b:e1:07:5c:15:c4:50:e0:05:d8:c9:9d:dd:54:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9B:19:17:3A:1C:42:55:2B:48:39:AF:28:8C:7B:EC:DA:3E:A1:1E
X509v3 Authority Key Identifier:
keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:5c:8a:9c:08:12:32:50:1d:35:40:4e:d4:59:fd:78:f3:48:
27:63:4f:85:a9:fa:ca:16:b1:b5:24:8d:4c:2f:df:a2:c5:7c:
6f:04:10:1d:5f:ac:52:51:36:50:ef:cd:39:46:de:ea:0b:49:
83:d0:12:05:7c:fb:a0:15:6c:56:13:9f:e4:b4:fd:3a:d7:e8:
6f:1c:2d:f2:f6:60:1f:12:ce:f3:4b:26:6e:15:b6:20:d3:fc:
87:06:d3:ce:da:b2:5f:79:9c:5a:c0:15:f3:5a:d5:58:39:84:
3d:84:bd:03:ff:e5:bd:4c:11:5c:09:6d:48:7e:3c:44:a7:f6:
ad:9c:22:3a:43:08:45:e9:86:b2:97:32:93:a7:cd:3f:2b:66:
43:c8:66:3f:af:a2:b8:2f:ae:09:18:37:06:6f:aa:87:dd:29:
c8:92:87:56:c0:30:c0:4c:9d:76:ec:20:56:82:be:71:49:b8:
fb:f5:d5:d2:20:e5:2f:0d:4a:2d:09:8c:01:0b:b5:8c:24:47:
89:6a:54:3f:32:9d:5c:c3:d7:bd:10:30:ee:ac:9f:ab:ae:5a:
8a:32:d2:5e:4c:c7:fb:09:ad:b2:67:6c:6b:bd:01:86:5c:da:
e1:51:a3:b2:a6:69:44:ff:71:bc:84:f4:a4:e6:9d:38:72:1d:
a4:2a:3b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:15 2025 by rpki-client