Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
File: 3KonREWCbj15XD7RjCdwDurBymI.mft (raw, json)
Hash identifier: dx+z9tKRcYQZAxWMY3xnJdSJAguee0oz7hborwgTUzo=
Subject key identifier: 34:22:6F:3E:2E:88:77:09:AA:61:E8:16:5E:89:C7:3E:25:18:D5:CA
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Certificate issuer: /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial: 0199FCFD623EDE3DFEE3B1435574A8F7EF8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
Manifest number: 0E1E
Signing time: Sun 19 Oct 2025 15:01:28 +0000
Manifest this update: Sun 19 Oct 2025 15:01:28 +0000
Manifest next update: Mon 20 Oct 2025 15:01:28 +0000
Files and hashes: 1: 3KonREWCbj15XD7RjCdwDurBymI.crl (hash: cS7/QL1lvraHrbNWO2XiLHeGX9LLZG+QQPbI7JffMtA=)
2: gR7sUG_8lonr2gVlkEM1ADj5WcE.roa (hash: UjAmmUt2kVRUK4S0rWxF0FYuOfHn0p6w6/7yryAGIf8=)
3: x5BcxByiZpVNAIlZM7Ls67DF_VI.roa (hash: JHq7GmHRUBUB9iENpddREelx6fHNpJzwzmpidFpFMBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:62:3e:de:3d:fe:e3:b1:43:55:74:a8:f7:ef:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Validity
Not Before: Oct 19 15:01:28 2025 GMT
Not After : Oct 20 15:01:28 2025 GMT
Subject: CN=34226f3e2e887709aa61e8165e89c73e2518d5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:52:b0:92:4b:90:9c:44:a7:47:9e:75:99:
31:d9:a4:08:16:e1:1b:f2:56:8a:a7:0e:db:ef:d5:
59:52:cd:74:2e:11:f7:e9:f4:61:0f:45:20:88:d9:
4e:b0:e0:78:07:17:6b:14:fa:28:81:37:b0:65:0e:
04:13:7b:af:af:cf:36:a7:c7:c8:74:e9:24:49:88:
e5:d5:2c:60:4a:40:1d:f5:be:de:91:89:32:65:1f:
b8:68:f0:a1:73:c9:0a:e4:3d:96:d9:f2:05:df:1b:
7e:8d:65:76:ab:ec:6a:c0:b9:55:bc:71:8d:74:85:
1f:23:ad:32:af:5a:10:ee:87:25:91:81:15:f6:6e:
3a:f7:a0:cf:6c:d4:1c:e7:27:d5:72:2b:d0:06:85:
c3:7b:07:65:1d:4e:1d:f7:aa:56:c8:2a:ae:c9:38:
59:92:6e:54:af:98:db:03:11:be:90:34:bf:e2:33:
94:cc:8a:cb:45:82:a3:7f:8f:a7:e4:d3:43:6f:5d:
57:9a:aa:bf:d2:b4:cd:68:1f:3e:c2:49:1e:6e:7d:
45:e6:38:21:41:a5:f5:58:b2:dd:61:00:15:7b:90:
62:88:a8:e5:68:f7:6f:13:65:27:28:65:e2:3f:02:
80:be:f4:eb:dc:e9:1c:57:86:7d:ba:a3:fb:6a:48:
28:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:22:6F:3E:2E:88:77:09:AA:61:E8:16:5E:89:C7:3E:25:18:D5:CA
X509v3 Authority Key Identifier:
keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:08:ac:dc:38:00:16:a1:0f:ae:7e:a2:50:29:6c:9f:0e:2e:
18:57:99:b7:ed:ef:3c:14:09:93:7a:d2:9d:66:ac:6d:b6:be:
d6:1f:5c:16:b8:7a:38:9c:8d:c7:7a:f1:bc:ca:77:b2:6c:0a:
10:d7:fb:b6:4e:0f:6f:3a:57:a2:d4:44:f1:3b:56:19:e4:13:
2c:06:c1:bd:c1:84:fe:3a:33:47:44:7a:a5:71:39:80:ad:28:
0a:c8:fb:14:76:e7:37:1e:0e:fe:94:8a:a3:17:36:f3:41:eb:
75:c3:8a:74:1d:58:4d:93:12:c3:2e:88:b1:ab:46:5a:67:d7:
ee:be:68:ae:3e:bf:ea:5c:d1:a0:01:00:26:dd:e9:a2:0a:2b:
e1:c3:b3:ba:32:52:77:cd:6f:59:37:c0:db:f5:c0:d1:cc:48:
fa:48:c6:71:89:eb:a1:be:f8:15:83:00:8e:68:32:4a:27:bb:
ce:49:57:0e:2b:8e:59:92:49:6b:3f:7c:e5:35:73:a2:33:27:
86:3f:e4:5e:46:65:ac:79:4b:17:60:4d:b3:8f:c3:8e:2e:d5:
6f:35:3d:1f:54:11:47:a5:b8:75:c1:23:70:8f:7a:e9:5a:fa:
67:30:c2:b0:33:12:7d:f7:48:7a:17:ca:c3:43:2a:5f:f0:14:
f9:84:58:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:37 2025 by rpki-client