Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: OOoFTm6bFGHIy+COsqXy9iOPN42uq4TRO4F2uI1/sWU=
Subject key identifier: 35:6D:04:BB:27:2B:D6:C5:FB:5E:7E:0F:6B:94:3D:9D:AA:DE:E7:E2
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 019A01B4D61FD3EB67B9E65F9AFD1DF6F333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 13:00:19 +0000
Manifest this update: Mon 20 Oct 2025 13:00:19 +0000
Manifest next update: Tue 21 Oct 2025 13:00:19 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: Jeu7XEpmdW/e6PNADJ18fuBdvTyKulZENnsTSPbySUU=)
2: O3I8fzz4GA8viyeptOfjUJ2mnRw.roa (hash: MhSpfjBUjJxXqy4aU0rHbneKVULz0h6JWSZvHTRBN24=)
3: ovS3rx1XoRtGLlvdJ72CyzvNZcw.roa (hash: lov3tLPiy71ecc5+P9JXxH2Fu9PCJbxZNtxQg4EVWM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:d6:1f:d3:eb:67:b9:e6:5f:9a:fd:1d:f6:f3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Oct 20 13:00:19 2025 GMT
Not After : Oct 21 13:00:19 2025 GMT
Subject: CN=356d04bb272bd6c5fb5e7e0f6b943d9daadee7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:6e:ff:ad:1d:7f:94:1f:2b:dc:47:fa:fb:c8:
47:ca:31:c7:77:96:89:dd:80:c6:79:97:44:a9:b4:
be:4a:53:bc:b3:0a:51:36:3a:db:49:6b:a3:1c:12:
17:69:cb:a6:94:87:24:04:58:e5:70:c8:04:7a:92:
3c:f3:5e:d5:aa:24:2c:6e:76:35:47:72:81:79:16:
2a:5f:e4:ad:d6:77:27:96:eb:f7:30:b5:82:0e:65:
fb:fc:6d:82:5d:59:cf:1c:52:c9:c6:0c:48:ed:c0:
e3:4d:02:1c:41:76:f1:40:1c:e3:96:f7:05:c3:11:
56:c8:95:08:5a:e5:4f:3c:53:35:b7:f3:7d:34:f7:
89:cf:a9:8a:aa:8a:48:8e:a8:fa:f3:63:a2:89:a7:
8a:73:0d:cf:72:1a:c3:77:f8:87:d8:f3:b9:67:c1:
d5:19:38:84:50:64:4e:03:de:84:56:51:7d:d4:91:
df:d3:4a:96:28:45:45:60:d3:cc:0a:75:b4:5c:32:
3b:b3:0b:6e:88:39:2d:eb:dc:64:60:0f:82:27:3b:
be:cc:72:f0:ac:8d:7e:e1:1f:c5:c2:73:a4:ad:5a:
e7:ae:ec:bb:aa:d2:cc:8c:61:ed:71:1f:12:bf:dd:
62:62:07:87:6b:9c:15:96:9b:a9:be:3d:7a:0d:f9:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6D:04:BB:27:2B:D6:C5:FB:5E:7E:0F:6B:94:3D:9D:AA:DE:E7:E2
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:1d:b6:2b:88:a9:cc:e3:fc:e4:fa:ba:0a:7d:5e:a2:f5:a5:
0e:b5:04:c9:ba:66:48:0b:37:0f:aa:cc:94:af:38:52:43:ff:
75:ba:72:52:ad:a8:ed:d8:89:e9:90:c0:1e:83:fe:cc:92:ac:
a8:62:8e:b2:02:5b:1b:31:0a:33:82:9b:d4:2f:df:fa:33:7f:
e5:64:2c:30:77:0a:aa:27:c5:4f:fd:ab:c6:d5:f6:e8:61:c4:
82:4d:32:6f:72:2f:09:aa:d0:6b:d3:ea:f3:1e:82:c3:ca:c1:
76:69:70:86:70:b1:26:cd:19:db:6a:f3:f7:fb:b4:fa:d0:4c:
88:a7:e3:69:41:ac:b3:fa:83:b4:f8:ca:dd:c3:b4:e1:ef:b8:
b6:16:27:20:5f:d4:a0:e9:9d:60:3e:b8:08:00:14:fd:5a:75:
c9:77:6f:a4:a5:03:6b:6a:04:2f:c0:1b:b5:88:1b:47:d7:1d:
25:8b:8e:17:35:78:f7:29:6e:b0:5b:26:5d:9d:c5:b7:4d:d2:
95:6c:47:f2:13:0a:45:f3:95:6c:8b:60:e8:08:42:14:c1:11:
99:b4:e4:53:a3:cf:fc:c7:b0:42:ea:00:32:cd:a7:f4:9a:80:
2c:a8:e9:d3:db:ae:f7:1d:22:34:ce:7a:3d:9f:b7:1a:aa:8c:
19:36:d0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:24:04 2025 by rpki-client