Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
File: 3KonREWCbj15XD7RjCdwDurBymI.mft (raw, json)
Hash identifier: 97pl5Q1Z7FgleMBrWnwulTpdgAhHQU2StnfTgVmT3Bw=
Subject key identifier: 76:BB:07:CB:84:78:1D:7F:E3:25:1F:C9:16:94:04:88:07:E2:3C:95
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Certificate issuer: /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial: 0199FEEBFB0DD4D3555B195D7F32A8C0000A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
Manifest number: 0E1F
Signing time: Mon 20 Oct 2025 00:01:42 +0000
Manifest this update: Mon 20 Oct 2025 00:01:42 +0000
Manifest next update: Tue 21 Oct 2025 00:01:42 +0000
Files and hashes: 1: 3KonREWCbj15XD7RjCdwDurBymI.crl (hash: WK9hkFS+IX9B88mhMfsEpTfWoQi0xoLxjuBgJXRCcAA=)
2: gR7sUG_8lonr2gVlkEM1ADj5WcE.roa (hash: UjAmmUt2kVRUK4S0rWxF0FYuOfHn0p6w6/7yryAGIf8=)
3: x5BcxByiZpVNAIlZM7Ls67DF_VI.roa (hash: JHq7GmHRUBUB9iENpddREelx6fHNpJzwzmpidFpFMBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:fb:0d:d4:d3:55:5b:19:5d:7f:32:a8:c0:00:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Validity
Not Before: Oct 20 00:01:42 2025 GMT
Not After : Oct 21 00:01:42 2025 GMT
Subject: CN=76bb07cb84781d7fe3251fc91694048807e23c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:03:09:7b:ea:56:62:55:fa:b9:ee:0e:b6:
1e:c9:bc:c5:a9:a3:19:cb:b0:60:53:44:91:a2:e2:
10:af:eb:90:5f:27:7b:dd:c2:3c:69:5b:dc:5d:c2:
a7:e3:c4:12:54:2f:dc:84:0c:8b:f0:fa:94:be:1d:
d0:ee:dc:7d:7f:4d:98:c3:fe:b2:b9:2b:d2:62:83:
41:56:9c:70:fb:8a:5c:7a:65:6b:59:65:8e:ec:bd:
cc:c9:a7:80:a4:fb:77:2d:2f:99:59:89:17:fb:58:
f1:63:95:a6:e6:0b:f1:4d:b7:e0:60:b6:67:8a:2d:
82:1d:c0:79:2c:c8:3c:a5:41:68:ff:06:5f:18:f8:
b8:91:62:65:9b:23:70:4c:0f:24:ce:1e:df:74:5d:
8e:0a:63:4c:ae:45:cc:75:a4:2a:cb:f3:54:33:9c:
bf:2a:d9:99:eb:59:7b:10:46:8d:de:f3:33:79:d7:
5f:f3:1b:2b:d1:c4:42:82:a3:aa:78:3c:af:04:a2:
13:34:28:2b:1b:03:7f:70:2e:f1:49:5c:41:68:5d:
2b:cf:60:1d:ea:c6:86:a2:ca:39:c4:49:ed:70:18:
f9:61:ed:92:74:98:63:3e:0b:7e:cb:c8:0f:3f:0a:
e9:97:0a:2c:80:7d:c6:74:a5:36:c5:51:e2:c5:6d:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BB:07:CB:84:78:1D:7F:E3:25:1F:C9:16:94:04:88:07:E2:3C:95
X509v3 Authority Key Identifier:
keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ea:dc:bc:21:a4:c0:4c:ff:96:db:5c:42:f7:e5:04:00:bf:
70:47:e1:53:1c:84:02:81:67:ee:bf:d5:fb:65:7c:2e:04:ec:
ba:75:7c:78:cb:4f:8f:79:c3:46:1c:43:8a:d0:f8:95:08:6e:
57:85:4a:26:73:6e:f9:ac:2e:c2:a0:57:d2:b3:d6:f9:88:ed:
b5:4d:38:30:49:23:a3:5c:d9:2f:ed:58:68:5e:c0:95:e3:50:
98:96:5b:67:f2:1b:86:f1:57:21:ca:d9:3b:e7:26:c2:5e:1f:
ac:aa:17:00:86:b5:79:ef:83:d6:e9:6e:6d:a9:9b:9b:ef:1c:
bb:af:50:7f:39:ac:8a:67:d1:cd:24:74:44:a9:e3:f1:62:f8:
87:6a:63:13:c7:02:30:15:17:f5:05:eb:4f:82:86:17:ff:86:
16:23:80:9e:4c:2d:86:17:18:d5:cb:6b:9b:61:c4:7d:9a:3b:
26:d3:d7:77:f7:68:bd:d0:cf:8e:0c:bd:80:8f:ba:ec:8b:11:
99:12:b1:58:20:74:48:a6:88:f0:17:e0:91:92:91:79:f4:55:
1b:a0:07:e4:ed:71:15:6e:df:42:0e:8c:23:43:a7:08:54:1c:
b2:8b:4b:20:b0:41:7b:77:33:35:07:3b:48:78:75:b3:cf:b2:
b7:a8:e8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:17:35 2025 by rpki-client