Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
File: 3fCc-W5fyHTuk5CXxWUci9hC5q0.mft (raw, json)
Hash identifier: 9PtQISq0GDIFvpGaPhhJbpb3nk2wtfQGq8c5ePIAMDM=
Subject key identifier: D0:E5:5A:14:80:18:BC:AA:71:03:CF:5D:28:72:E4:34:37:A3:89:CF
Authority key identifier: DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
Certificate issuer: /CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Certificate serial: 0199FE4784F172C4992C7789EED10055FDFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
Manifest number: 0416
Signing time: Sun 19 Oct 2025 21:02:03 +0000
Manifest this update: Sun 19 Oct 2025 21:02:03 +0000
Manifest next update: Mon 20 Oct 2025 21:02:03 +0000
Files and hashes: 1: 3fCc-W5fyHTuk5CXxWUci9hC5q0.crl (hash: hr8ONuq5c8nHeBdELP3k42StW7pT9Rw0lKfwNlNhEMg=)
2: 4QrqTeH17AXNTy8pbTdrujVUbQI.roa (hash: FZeq9SJr8r+vs6lCOy39Gvb+wDR+3HmqIg9DlvmdZfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:84:f1:72:c4:99:2c:77:89:ee:d1:00:55:fd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Validity
Not Before: Oct 19 21:02:03 2025 GMT
Not After : Oct 20 21:02:03 2025 GMT
Subject: CN=d0e55a148018bcaa7103cf5d2872e43437a389cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:d4:94:83:69:91:5e:a0:13:3e:42:31:33:
67:b2:bf:e4:00:3e:49:dc:ee:92:4a:f0:db:1a:12:
11:f8:c1:d1:25:ac:6d:f6:84:73:30:cf:cf:9c:6b:
3a:6c:cd:01:c3:ab:e7:f7:7e:ce:a7:8c:bb:6b:be:
95:d2:c2:b3:1c:9c:e6:96:99:dd:8e:1e:71:84:af:
19:8c:f8:19:a3:fc:0b:94:9b:7b:41:72:8d:bb:62:
1e:80:fe:7a:31:79:91:5a:9a:00:45:85:e6:32:d0:
e6:69:76:04:94:31:2c:d6:26:71:2a:ea:7b:1c:5c:
e6:7a:2e:71:85:01:6b:66:15:5d:ff:86:1b:2e:66:
a8:d3:4f:dc:24:ce:78:0f:a6:d6:c3:a8:b4:b1:d1:
f4:11:9e:2c:de:ab:7d:94:62:3d:8b:96:49:de:11:
8e:bc:f3:c3:80:d7:61:db:a4:98:d4:99:48:e7:96:
e4:74:39:64:84:d7:d4:01:c3:96:60:c4:96:42:b8:
07:e4:eb:88:97:e9:70:42:24:45:34:7c:9f:a2:49:
09:d7:3b:7c:ec:ce:26:79:56:8f:5e:43:31:75:74:
c7:4a:21:fa:13:74:70:04:70:7d:49:6e:e2:35:ab:
13:52:26:b7:56:e9:a5:19:13:87:6a:3f:35:40:ae:
2a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E5:5A:14:80:18:BC:AA:71:03:CF:5D:28:72:E4:34:37:A3:89:CF
X509v3 Authority Key Identifier:
keyid:DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:12:85:e8:b6:88:a9:95:4f:e8:2b:d8:96:cd:f5:4c:50:b3:
93:a5:ff:7a:12:33:b2:3b:56:2d:26:33:f9:8d:c7:8b:b5:2a:
b1:13:32:0f:4a:68:51:ec:4d:11:31:f5:9f:42:e6:66:bb:be:
3a:9c:28:47:76:f8:e5:62:35:7b:0f:b0:2f:1c:a8:31:99:ac:
58:af:b2:5b:4b:5f:85:1f:2c:97:07:ea:5a:52:28:2e:09:09:
da:cf:c2:c1:7b:c2:59:53:db:c9:76:93:b3:c1:33:11:0e:ff:
b6:e6:70:2e:79:d6:e0:2f:e5:35:9a:34:96:36:09:47:4a:3c:
f6:7c:30:7f:9e:c0:e3:3f:dc:c1:d1:e6:bc:62:b9:d6:32:d1:
fc:4b:06:56:f2:cf:63:5b:c4:87:b9:42:29:e3:98:68:40:44:
6a:00:57:e9:58:ab:78:4b:de:44:8a:f8:f2:9f:9f:f2:c3:c3:
72:9c:77:13:69:87:83:cf:17:39:a0:38:c8:82:bc:ed:5a:82:
28:d1:54:91:fb:85:18:25:33:48:6e:92:dd:32:52:3d:d5:d8:
29:d2:97:69:c1:09:4d:1a:23:ff:e1:27:1a:50:17:67:e0:37:
fb:5d:bc:40:34:4a:b4:95:4d:99:b5:cc:2d:65:1c:14:f9:31:
2a:5b:17:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:08:54 2025 by rpki-client