Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: RHqPjHv9vJetSjCCAtQ8MgfYi8Ce4eTTSsiIinkP8gE=
Subject key identifier: 38:36:AE:B7:48:6F:E7:AF:A5:A7:6A:83:27:1C:A7:A9:3F:1F:CE:EE
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 0199FAD7F6A6EB3A02A919F9CA7F56C7D9A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 05:01:21 +0000
Manifest this update: Sun 19 Oct 2025 05:01:21 +0000
Manifest next update: Mon 20 Oct 2025 05:01:21 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: iduOpADibyCBXENuaGhyiiFfxd3W5lLAEMARV0x+R+s=)
2: sHHovkPcLVWIMQ_tboQIdcTBHy0.roa (hash: fYwK2GNfLuzV598M+4d1qnmBbMriSVB83QSoeu+hALg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:f6:a6:eb:3a:02:a9:19:f9:ca:7f:56:c7:d9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Oct 19 05:01:21 2025 GMT
Not After : Oct 20 05:01:21 2025 GMT
Subject: CN=3836aeb7486fe7afa5a76a83271ca7a93f1fceee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:b0:44:5c:68:d4:5c:fb:ec:52:ed:93:02:
02:da:89:9a:fd:61:29:db:ab:bb:d6:28:77:28:d0:
bf:e7:b0:86:41:43:fd:0b:99:23:96:85:f6:0f:c5:
81:1c:71:70:fb:e1:4c:cd:1b:6b:c5:5b:2a:f6:c6:
09:a2:a4:3c:96:b9:05:ba:19:de:5c:7d:3d:a6:20:
b1:50:7c:ab:b1:e9:d5:cd:b8:f1:83:ae:e4:c9:cc:
d4:b0:a6:78:c4:c4:e0:9a:bb:ab:47:91:f4:a4:5e:
5f:f7:d3:e1:69:5a:6d:33:51:a0:3e:cb:ca:c0:ae:
e9:0c:10:34:18:e3:a0:df:94:d5:87:7a:98:05:e1:
98:91:03:97:2f:3a:32:08:b7:98:c7:21:7f:bd:38:
82:4c:7c:f8:d4:46:7b:40:dd:07:04:32:c3:51:26:
fe:dc:32:47:17:e8:e1:6c:1b:bf:6e:32:ca:40:cb:
4b:bc:38:44:97:68:b5:9f:27:b6:be:a7:c3:07:03:
41:fc:a6:8a:18:a3:ae:cc:9f:c6:30:d3:a5:9b:24:
e9:54:98:c3:b7:9b:7d:99:d1:36:70:c4:ec:86:9f:
88:ca:c9:e9:96:e6:9b:b0:f4:ee:67:96:7b:a8:3e:
c5:ee:03:9b:96:f2:af:e2:05:14:b7:8e:1e:16:53:
db:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:36:AE:B7:48:6F:E7:AF:A5:A7:6A:83:27:1C:A7:A9:3F:1F:CE:EE
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:db:e1:90:5c:76:ab:6b:61:fb:0c:62:01:14:7d:45:4b:15:
57:57:55:4f:7c:f0:c3:96:da:2b:de:96:1e:ac:6b:7e:1a:2c:
39:f0:a7:da:7c:4f:c2:f7:e0:73:f7:d7:77:4d:32:f3:23:58:
5d:38:1c:4e:d2:f6:a6:01:02:f9:77:b9:10:a3:8c:ab:5e:ce:
e5:f8:dc:b0:93:36:d0:4e:6b:f3:9d:a3:bb:9a:e5:42:68:e8:
aa:8c:7a:27:95:31:72:f8:6b:df:a9:7e:6e:20:bf:17:83:dc:
18:88:8a:a2:28:5c:c2:02:42:0c:35:9f:8c:96:c8:4d:d2:fb:
52:31:7f:66:38:2a:e5:20:a7:2f:a7:55:ca:b2:38:4c:9d:88:
92:12:7b:4f:c8:f3:7b:55:db:5e:cf:96:2e:6b:e5:f1:9b:ae:
9a:84:99:72:63:5b:54:63:b1:3e:52:b4:37:05:f0:72:24:b6:
74:a3:fa:35:67:26:e0:de:0d:78:19:32:56:21:5b:e1:f5:9c:
7b:75:15:01:a8:63:77:e8:d3:89:6a:98:d5:da:47:17:f0:2b:
89:9e:b3:22:57:66:ac:b0:e6:d5:b8:53:70:21:76:8b:70:e9:
68:2c:cc:42:18:f1:0c:8c:27:f9:49:04:8a:d2:9b:eb:c8:e3:
cc:86:c8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:01 2025 by rpki-client