Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
File: 3BCJyUK2gDNoO03VBsDDb3S-DqM.mft (raw, json)
Hash identifier: TYhuqJARRjlaEADCmlIwb9KfhiFKaQWBApP8kHYbvxo=
Subject key identifier: FB:3F:28:43:59:B9:41:E5:C1:23:68:45:40:DB:C0:80:C6:83:2A:95
Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Certificate serial: 0199FCC6368AE13FDE7C809694624E87BCFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 14:01:12 +0000
Manifest this update: Sun 19 Oct 2025 14:01:12 +0000
Manifest next update: Mon 20 Oct 2025 14:01:12 +0000
Files and hashes: 1: 3BCJyUK2gDNoO03VBsDDb3S-DqM.crl (hash: a3l9QJhphEIlr/2KA/Ia2DFZKvZtvPSyWk7fwskxBS0=)
2: 57HaC7393494-Kydk1JdAp5sP5I.roa (hash: MC5zLYnL7jsECqxeDtP30qM0sWScy6N43eUhfx207aw=)
3: m5gUSNnJ2hKaiWTW0ODmWqqDw-s.roa (hash: EE2S7AYIPyyJZqEsdRi77q99LaNKBqMzcLpUq4bS+A8=)
4: nX1l9uEaP3hKft0f6nr66330FaY.roa (hash: Ify3evSlWibc6XFuSTIlXp6BEPgQD/cUtILAv8sgqKU=)
5: rYOTmI6zBWy0_qXug-7vEbI5-NE.roa (hash: WCnXAEMnH2mCY9gWHiuKlZ1HO6eQUoArgriFfc+fAVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:36:8a:e1:3f:de:7c:80:96:94:62:4e:87:bc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Validity
Not Before: Oct 19 14:01:12 2025 GMT
Not After : Oct 20 14:01:12 2025 GMT
Subject: CN=fb3f284359b941e5c123684540dbc080c6832a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:66:78:ce:42:eb:a0:2a:12:a2:5a:f8:64:
bd:8f:70:58:6e:5b:20:53:6f:5b:f6:f0:97:00:0a:
8e:94:15:c2:d5:ca:bd:8f:c7:df:b7:ae:76:9e:e4:
23:24:a3:d7:ce:4b:75:9f:c7:7b:15:78:5d:93:4e:
82:6b:21:a7:f3:f6:56:89:af:03:ef:55:05:ed:ce:
1a:bf:b3:99:a0:2d:b7:e4:f0:8f:87:5d:76:95:0e:
94:2a:6f:0b:69:66:6b:c4:c5:11:17:8c:51:78:0c:
81:5d:80:41:07:fd:4a:b2:2b:7d:28:7f:da:49:96:
9d:67:ab:80:70:46:12:f2:29:ad:48:27:fe:e5:19:
e0:e0:b3:7c:3b:b1:3e:7c:dd:a6:0b:f5:21:22:61:
fe:af:18:5f:81:33:66:50:81:53:f9:16:ce:28:03:
f9:95:51:e8:b7:83:20:55:54:b8:47:56:69:25:24:
60:26:32:66:12:12:a6:89:b3:f9:c9:fb:99:e0:a5:
37:34:f7:fb:66:09:6a:db:9f:25:22:d9:92:7c:0d:
ef:df:ac:2f:b7:94:ac:bb:30:b9:42:e5:45:ec:01:
2b:02:74:bd:76:d7:53:1b:b5:a9:c0:af:92:81:5c:
71:b0:8d:ac:32:f5:a5:9a:1e:ef:4d:fb:1c:51:e2:
87:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3F:28:43:59:B9:41:E5:C1:23:68:45:40:DB:C0:80:C6:83:2A:95
X509v3 Authority Key Identifier:
keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4d:f6:e0:39:d1:cd:56:86:3c:8f:85:4f:e4:17:5e:cd:e7:
09:1d:4d:ea:30:f7:7b:66:7d:0c:dc:10:b6:48:cf:0b:61:43:
02:5c:15:0a:62:9c:33:55:86:29:35:ba:b4:5b:60:4d:60:d8:
8f:8d:61:75:c9:26:8a:7d:2e:46:2d:ef:c9:70:c8:69:01:09:
91:49:0c:25:f4:04:01:9e:e2:5e:53:54:6c:de:be:e4:c3:5b:
a2:e0:2e:2a:91:db:4c:e6:11:36:19:12:b4:0e:dc:13:85:03:
28:1d:cc:fe:7c:79:21:fe:55:dd:ee:f0:23:c8:53:19:19:c3:
64:c8:9a:db:49:33:98:81:58:d1:ce:45:8e:02:88:3b:bd:0b:
5f:7b:9f:50:5b:5f:7b:71:cd:58:1f:17:a3:d3:34:4d:8e:de:
7a:1c:a4:2d:a8:bc:e4:12:05:2e:54:f3:63:92:fb:4d:08:9c:
34:a8:1b:73:1f:d9:a8:93:fa:ca:c3:ab:29:62:60:53:1f:2e:
12:43:39:b1:cc:75:91:db:cc:45:3e:19:71:bd:69:d1:80:19:
23:e8:79:ff:92:7c:38:93:c2:19:cc:2d:54:96:28:cb:a9:29:
f5:d9:3c:d8:c9:cd:19:2a:30:50:68:f1:68:63:5a:a3:f4:f7:
3b:f3:83:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:19 2025 by rpki-client