Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
File: 3f2U67jLmKHb31C9zWncwpFEiJ4.mft (raw, json)
Hash identifier: 0aR1IHEyoQYYMDvJkwcIYb38jUxcZWfBB9x8pTYir2Q=
Subject key identifier: 2B:9D:A6:C4:FB:E4:CB:0D:24:45:52:DA:CA:E8:F1:B8:0B:E6:49:C0
Authority key identifier: DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
Certificate issuer: /CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Certificate serial: 0199FFC7F3393ECA2704CCAC0B9F475E8EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
Manifest number: 0DCB
Signing time: Mon 20 Oct 2025 04:01:57 +0000
Manifest this update: Mon 20 Oct 2025 04:01:57 +0000
Manifest next update: Tue 21 Oct 2025 04:01:57 +0000
Files and hashes: 1: 3f2U67jLmKHb31C9zWncwpFEiJ4.crl (hash: kaUruwuDhXuPp+Z1ebryWvKoNxv6m2MkEnB+xLGWNUA=)
2: OMnuxUeA0haC1p_KDdRfwFA8Q2s.roa (hash: cDQVnRaiJ+Kb9nhkJ6FSjxN3vz7jN+QBdbH8z93gYFM=)
3: yOI7tiSRDXgdskD_bs5AhIY61n8.roa (hash: jCxGB8CWsOl2EvkB0hTjOgeBy34atnE5kB7r6h+CCmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:f3:39:3e:ca:27:04:cc:ac:0b:9f:47:5e:8e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Validity
Not Before: Oct 20 04:01:57 2025 GMT
Not After : Oct 21 04:01:57 2025 GMT
Subject: CN=2b9da6c4fbe4cb0d244552dacae8f1b80be649c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:6d:c2:85:00:a0:43:2a:6a:de:a9:7f:a2:
f6:00:5b:62:7d:fb:9f:aa:8f:cf:e1:d0:81:93:51:
39:a4:70:13:72:26:7e:be:4e:8f:0d:a4:8e:da:8d:
84:c7:23:a7:ba:55:60:f6:ef:cf:e8:46:93:63:49:
83:66:75:46:95:7f:4f:99:21:1f:15:3c:89:80:38:
88:d7:fe:4f:01:84:9e:79:7a:ab:bd:e6:5f:12:d8:
1a:ae:fd:9a:a9:d1:32:d9:65:75:5f:27:cf:cf:29:
56:6a:c8:71:0e:b6:ef:63:86:f1:23:2a:68:4c:31:
91:ba:52:f2:fc:15:a2:fa:e2:9a:32:ee:8b:1a:ee:
20:6a:f9:70:13:31:19:64:49:0a:15:7b:6e:28:2f:
c9:73:3c:00:8b:2b:c6:f4:9c:ba:2d:3b:c5:46:e9:
01:23:04:31:87:83:d3:64:1b:55:2a:6e:42:d9:b8:
0f:f7:8b:e7:33:63:37:0e:d9:9b:80:6a:3f:ec:03:
73:72:2f:9a:1f:b1:fc:70:b1:29:cf:4e:b0:18:84:
fb:20:fa:20:1f:fd:a8:87:3f:f6:b8:60:b0:07:64:
70:c8:1e:5c:c1:5a:57:a4:04:9a:9a:73:88:b0:e7:
7c:f1:73:6d:8c:a7:79:d6:1c:2b:e4:d6:db:e2:59:
8d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9D:A6:C4:FB:E4:CB:0D:24:45:52:DA:CA:E8:F1:B8:0B:E6:49:C0
X509v3 Authority Key Identifier:
keyid:DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a8:2b:d7:c6:55:f0:66:45:4b:01:d6:de:a3:57:99:c8:2d:
f5:06:03:f5:1c:2a:6f:eb:07:ed:90:d5:f2:bd:ab:a3:98:12:
b3:61:f4:84:a3:27:82:a7:9a:95:ff:d5:15:01:7c:11:80:c8:
23:18:09:56:e0:3a:90:d4:ee:7a:d2:c6:8d:a1:7d:ed:65:f9:
58:64:d4:ed:64:2d:94:ac:f0:77:2a:8c:a6:a0:6f:ad:8d:3b:
a7:e2:75:c8:1c:02:dd:c7:34:d9:48:6b:16:fa:e9:63:08:53:
ee:2e:4d:ed:5c:d2:e2:38:3e:cd:27:5d:f1:1b:89:4a:dd:95:
75:b6:c3:43:05:94:f6:11:73:9f:c2:a5:56:68:30:72:6f:e2:
f7:f3:d3:0b:53:b4:07:11:6e:1f:cd:9e:64:a9:af:55:7b:e4:
a7:9f:de:8c:8f:e1:ae:aa:57:38:64:90:84:10:8d:32:c6:36:
b4:2c:f6:89:52:6c:92:ff:57:1e:3e:65:9f:21:5d:67:1a:c8:
a0:28:cb:50:27:7f:cd:b4:b6:08:a1:5c:59:82:18:82:e1:1c:
cb:c5:2f:16:c0:54:06:da:c4:fb:d9:e6:87:f4:88:3b:5b:17:
ae:52:da:94:77:aa:9e:37:12:2e:ee:4e:69:92:bd:54:8c:0f:
84:c0:f1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:32:22 2025 by rpki-client