Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
File: 3SppXEEiHdjt3PxcS1zAt4nLlTs.mft (raw, json)
Hash identifier: Wjs3qxgrWxL270bvMQ5rDVdT2Z2+NzmuGtMb01f2kaA=
Subject key identifier: D3:24:AE:6B:44:2B:9D:C3:22:9F:54:A3:B6:11:17:4D:97:BD:5D:1D
Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
Certificate issuer: /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Certificate serial: 0199FCFD82DDFDD2C4976E5934CA6D2BB0B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:36 +0000
Manifest this update: Sun 19 Oct 2025 15:01:36 +0000
Manifest next update: Mon 20 Oct 2025 15:01:36 +0000
Files and hashes: 1: 3SppXEEiHdjt3PxcS1zAt4nLlTs.crl (hash: uHGGb1oNHUlD88Uop7sxIpuF1vwULxerOsebzg9X0dU=)
2: ZxKbEdzKxauu7o-Y7eoipbP5kS0.roa (hash: bVgUBiwiMttSarotQ+bYBGzvg0m/rWkM8yb5LV2CZwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:82:dd:fd:d2:c4:97:6e:59:34:ca:6d:2b:b0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Validity
Not Before: Oct 19 15:01:36 2025 GMT
Not After : Oct 20 15:01:36 2025 GMT
Subject: CN=d324ae6b442b9dc3229f54a3b611174d97bd5d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:1e:96:94:b1:66:f3:84:0e:d5:f7:74:4d:
f8:31:15:ef:02:ae:f5:a3:ea:33:4f:f6:0b:8f:42:
56:bc:6e:1e:3a:bd:1a:66:d7:ae:81:6e:7f:d4:7d:
96:38:7f:42:5d:cc:74:54:b5:d9:65:0b:d9:f1:c0:
dc:28:58:7e:4f:b6:d5:21:a8:32:44:07:85:53:ef:
a4:4c:b4:c9:b5:ab:4f:2d:bd:ca:aa:33:59:a2:e5:
3e:43:e6:b7:8e:f7:6f:b8:96:ab:34:9d:14:38:d8:
3c:f2:70:43:05:41:5f:89:0a:6c:a1:68:77:5c:0a:
d4:af:0b:66:65:b1:4c:d6:d2:78:14:06:80:c0:a0:
75:32:e2:14:33:3f:67:cc:7d:10:62:90:89:c8:d7:
2f:76:45:bd:ae:16:19:5f:2d:55:be:7c:89:ec:72:
ee:e0:86:85:59:7c:3f:78:24:66:9e:ab:30:5b:8e:
49:30:64:86:e9:76:06:ab:7a:36:5a:08:14:fd:e2:
35:93:de:78:33:51:a6:c3:b3:9a:f9:37:5e:02:ff:
d2:5a:b9:69:11:d0:d3:3e:2f:c3:23:a9:1e:8a:43:
f9:ce:b3:c9:b6:c4:f5:fa:aa:f5:f5:ec:b2:ed:3b:
36:16:74:9d:c9:71:7a:2d:c8:d0:14:04:bc:ef:c8:
33:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:24:AE:6B:44:2B:9D:C3:22:9F:54:A3:B6:11:17:4D:97:BD:5D:1D
X509v3 Authority Key Identifier:
keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:41:d2:37:1b:39:2b:33:cc:f7:35:29:9a:5b:21:b1:21:53:
5f:43:5b:04:b2:4e:14:bb:ce:b9:8a:31:99:6b:4e:f5:63:e5:
c9:b1:00:e5:23:c8:27:90:ac:ea:24:6f:5a:5a:ac:e2:00:fb:
ca:40:0c:18:b2:46:89:05:54:fd:aa:37:72:6c:85:82:31:e3:
36:2c:e8:b2:99:1c:91:35:37:fb:51:27:65:d0:ce:c6:87:62:
1d:d6:d2:61:78:1a:74:e5:69:19:2d:15:a8:7b:b9:32:61:11:
94:04:53:fc:af:bd:6d:31:62:b9:df:a4:a7:57:d8:20:8c:9c:
72:bf:f4:a0:01:75:4a:59:4a:b2:c7:f2:d3:33:1b:57:9c:3d:
27:1c:32:81:43:9c:13:f0:02:69:a1:79:b7:64:0c:5f:5a:30:
0e:1c:83:75:2a:51:b1:19:3b:80:70:e3:4b:18:7a:34:c8:75:
a0:9d:0b:79:c7:5e:93:b0:69:c1:ab:ce:0a:db:c3:b1:14:ba:
65:c8:64:b2:b5:31:1b:9c:e8:3e:e3:1b:ec:92:7a:88:cf:76:
0b:b3:e1:f1:ea:f5:1d:09:4a:b9:cc:9c:c9:1e:70:2b:70:92:
7d:75:23:32:07:52:57:b8:ea:50:5f:1a:62:60:4f:eb:c8:e6:
1d:78:59:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:36 2025 by rpki-client