
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
File: s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json)
Hash identifier: im/eMUZp9vVG3b0EuvNF84y7/2taJkLTjvcc835pVqA=
Subject key identifier: 69:39:DF:25:FD:2E:38:F9:4F:96:07:43:72:7D:5A:55:E6:9F:2D:73
Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Certificate serial: 0199FBEB7D0D9887F890B73B581D7AD8018B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:02:18 +0000
Manifest this update: Sun 19 Oct 2025 10:02:18 +0000
Manifest next update: Mon 20 Oct 2025 10:02:18 +0000
Files and hashes: 1: JlKwrg5m2lqERiKY6JmlhVBin6Y.roa (hash: BkRh9N3Osfkv0XYuGUi4VGfe9yFTNu672Q4bahAacS8=)
2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: /NBsmk4FKveMORQpV/pG1YQ0ej+bDv4DTrBEcOhLZ5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7d:0d:98:87:f8:90:b7:3b:58:1d:7a:d8:01:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Validity
Not Before: Oct 19 10:02:18 2025 GMT
Not After : Oct 20 10:02:18 2025 GMT
Subject: CN=6939df25fd2e38f94f960743727d5a55e69f2d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:c9:f9:10:60:9f:10:93:52:62:63:34:4a:
6e:d4:ea:77:87:5f:ab:57:57:45:1c:b7:84:ac:41:
17:12:58:1b:43:fe:f3:dc:61:ba:36:05:29:f6:98:
44:3a:92:c4:f3:d7:1d:5c:e3:da:f7:27:e1:eb:2d:
a5:94:28:b5:8c:f5:70:cf:f4:57:ef:c6:87:86:c4:
fe:85:bc:57:06:72:2c:eb:80:a2:0e:28:78:87:e3:
2c:1f:12:a4:01:0e:9a:ce:ba:c1:cd:b2:ab:88:d6:
ce:f0:29:f0:83:7b:47:5b:a4:69:e9:75:a6:52:cd:
f1:f1:ae:a7:71:85:84:4b:a8:c5:21:07:a1:dd:42:
63:06:59:f3:70:b8:18:99:cf:71:af:83:e2:d1:d4:
c5:db:11:33:1d:9b:6d:0e:f8:33:8e:86:a3:c0:60:
f6:68:d6:ac:49:2f:6b:df:b1:3c:a1:cd:a7:53:c6:
59:d8:0d:9a:9e:8a:91:d3:1d:2f:6c:5b:db:42:b7:
c7:82:a2:54:49:89:49:7b:c7:d5:0f:3d:45:36:07:
3f:24:b9:72:81:49:dd:f3:7e:93:f5:db:ac:f8:d0:
ea:2b:0f:b0:dd:1f:90:e5:02:59:d1:eb:27:b6:06:
43:8c:90:64:f9:e6:cc:ef:75:78:97:13:23:f2:97:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:39:DF:25:FD:2E:38:F9:4F:96:07:43:72:7D:5A:55:E6:9F:2D:73
X509v3 Authority Key Identifier:
keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:39:0f:c8:bb:2c:21:b5:e5:24:77:87:54:dc:5c:3b:ca:5b:
db:36:bb:1d:4d:d7:d8:cb:0d:20:f0:b2:84:15:31:c5:5e:34:
76:08:f2:c9:32:a5:8b:80:39:af:0d:d2:4a:6e:54:74:1a:c7:
df:b1:fd:5e:d2:3c:1e:e6:b2:e5:8b:7e:eb:ee:f9:56:c0:0a:
24:cd:47:81:04:dc:d2:53:65:a0:05:6e:ff:37:9f:6b:23:54:
4a:fd:08:6d:37:09:84:2c:06:9d:2c:44:79:0a:02:e0:e6:d0:
38:8b:4a:ce:79:b2:41:37:66:d7:4d:b2:a0:6b:d7:40:88:74:
38:33:61:36:78:3c:b9:df:07:a5:1f:71:6d:bf:0f:8c:08:ae:
f0:8d:21:9b:7f:3f:2a:f9:fa:a2:fb:07:cb:11:25:0c:90:27:
69:d4:1d:63:4c:96:a9:85:75:8c:7f:41:0d:c9:dc:cd:b1:ad:
da:b1:51:4d:a5:58:e5:11:4f:37:63:0d:7b:9b:6c:84:69:c7:
52:14:39:17:86:a2:7c:76:1b:4f:e7:42:d4:a5:e7:9f:41:57:
82:78:d8:7a:d3:24:9c:27:e1:f6:18:3c:c1:37:8f:c0:b9:f1:
9a:a8:eb:e0:c2:ae:7a:63:99:20:4e:3d:15:d9:ae:8d:7c:df:
b4:11:97:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:23 2025 by rpki-client