Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
File: 3EtKGKfhUaN9peTM2qnn29iOnZM.mft (raw, json)
Hash identifier: uKAHp97jIUC3SqE4fcmWV+d4CTfLn1soduO/e4tMqhE=
Subject key identifier: 7E:EA:9E:A9:4C:AF:D6:2F:A9:08:25:E3:9A:58:A4:4D:FC:06:59:02
Authority key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
Certificate issuer: /CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Certificate serial: 0199FCC67065085E38A5522C37A6009BB5BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
Manifest number: 068B
Signing time: Sun 19 Oct 2025 14:01:27 +0000
Manifest this update: Sun 19 Oct 2025 14:01:27 +0000
Manifest next update: Mon 20 Oct 2025 14:01:27 +0000
Files and hashes: 1: 3EtKGKfhUaN9peTM2qnn29iOnZM.crl (hash: LI8C/j/IUJ5XDVF5OLLLo2X/nYNXPVfQzmqI/sWFs+4=)
2: Q6We2_Kzknmf_FU65X_ThS9Li9U.roa (hash: T5kdvis2FcaJDZX7ZiymCfqr46qyRqmHtR1xf7wekhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:70:65:08:5e:38:a5:52:2c:37:a6:00:9b:b5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Validity
Not Before: Oct 19 14:01:27 2025 GMT
Not After : Oct 20 14:01:27 2025 GMT
Subject: CN=7eea9ea94cafd62fa90825e39a58a44dfc065902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:73:0d:c2:29:94:51:5b:45:8c:3d:a6:97:
b0:9d:18:7c:ec:bf:72:98:d4:81:d5:98:f9:1c:2d:
6d:63:7b:69:b4:28:12:00:4d:96:0f:92:51:ad:66:
2f:81:43:0e:b2:16:4e:18:45:96:0e:9b:db:2c:77:
d8:80:32:6a:d0:71:6b:59:92:e7:3a:db:3f:8f:3e:
8d:f0:05:b3:a6:ff:0b:15:ec:d5:b9:1d:e5:f9:86:
42:fd:bc:7d:96:80:c4:c4:a8:a9:20:eb:e6:84:93:
27:5f:1e:7c:2b:b6:e2:cc:ec:56:e6:c4:de:ae:7d:
1a:8e:b7:3d:35:65:d9:71:1b:f7:e7:bc:57:76:8a:
70:84:8e:7d:02:a0:01:2e:90:5b:65:ba:cb:03:e4:
0c:2b:01:67:d5:03:58:55:eb:1d:83:fa:7d:be:24:
bd:7b:1d:ac:77:7a:3c:81:39:c3:d5:ce:30:19:2a:
f2:f5:05:8c:19:75:9f:ae:8a:2a:64:f5:1d:ce:60:
36:e2:91:1e:63:26:8f:2c:46:b4:93:b4:ac:68:4f:
ee:db:af:e5:f7:86:a1:70:65:43:a7:65:2e:40:ee:
4b:87:31:e9:da:c2:9b:28:90:56:a8:9d:b7:38:4e:
09:b5:81:87:49:6f:16:1b:8c:67:54:f8:9b:dd:dc:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EA:9E:A9:4C:AF:D6:2F:A9:08:25:E3:9A:58:A4:4D:FC:06:59:02
X509v3 Authority Key Identifier:
keyid:DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:18:47:0c:25:2b:58:99:ac:bb:36:25:aa:06:69:ee:a3:fd:
fa:c6:20:cd:12:66:b7:8a:03:14:34:f9:ac:a3:8c:89:67:a6:
63:12:2e:3b:dc:bd:7f:4e:3a:ab:bf:ba:d6:91:22:b4:ad:96:
45:55:84:f3:0d:17:81:aa:b5:2c:18:66:29:d9:a8:96:34:48:
ed:1c:77:cc:9b:7f:26:dc:86:4c:dd:eb:27:cd:fe:3f:b9:36:
b3:01:3c:34:e6:5e:c0:a9:3b:4d:7a:c9:4e:7e:6b:1f:df:46:
a3:dc:dc:38:db:03:c5:c3:7d:25:62:0b:8a:e2:ad:1e:3c:08:
c2:48:c5:59:de:f7:0a:8c:4e:2c:1a:41:c3:b2:fa:d9:a1:d3:
1f:7b:1b:49:c7:73:29:9c:61:bf:a5:ef:f7:03:61:46:13:78:
c0:59:0d:df:94:af:0d:ba:35:2d:7a:d3:20:50:7d:5c:84:e7:
35:b4:4a:b4:19:b1:de:6f:09:63:6a:d3:fb:ac:3e:3e:94:88:
ed:e2:3a:cb:f5:52:2f:df:66:ca:12:41:a4:d1:f0:d0:2b:4a:
0b:27:0c:34:9f:da:ef:2e:d0:ee:c6:22:16:8b:de:b2:75:8b:
0b:bf:a7:d9:8d:2c:c9:0f:3d:62:0c:e0:43:86:ad:78:ed:90:
c0:74:42:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:25 2025 by rpki-client