Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
File: 3SSW_v-ZEna9G4Uza3aXqYAPhME.mft (raw, json)
Hash identifier: nScoa6EMcYKyvVhvsTnB919J8d3Gs5zRWIihDUT23Dg=
Subject key identifier: 37:36:C8:32:12:66:89:25:41:90:27:91:9F:F5:88:AF:56:8E:0C:29
Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
Certificate issuer: /CN=dd2496feff991276bd1b85336b7697a9800f84c1
Certificate serial: 0199FD6B0F66A6005B79F597BC8022BAA7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
Manifest number: 14BC
Signing time: Sun 19 Oct 2025 17:01:15 +0000
Manifest this update: Sun 19 Oct 2025 17:01:15 +0000
Manifest next update: Mon 20 Oct 2025 17:01:15 +0000
Files and hashes: 1: 3SSW_v-ZEna9G4Uza3aXqYAPhME.crl (hash: SyHFMJPV+6/PT3E5+XBKdINLft9jT2BjEsMRqSH07QI=)
2: _TZfk1Rmeyf1zvc7aTw1N_o9jl4.roa (hash: YhjRwkXWYnkbx6aMihX7dtN/B/p9Fk3n2XWBk8oSMZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:0f:66:a6:00:5b:79:f5:97:bc:80:22:ba:a7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1
Validity
Not Before: Oct 19 17:01:15 2025 GMT
Not After : Oct 20 17:01:15 2025 GMT
Subject: CN=3736c83212668925419027919ff588af568e0c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:ef:60:9b:e0:9e:b9:5f:fb:8d:0c:84:e0:
a4:bc:a0:71:f2:b4:26:ef:54:09:82:c0:bd:96:a0:
a8:5b:17:53:54:e7:c3:07:ca:b7:62:72:0d:98:86:
2f:87:df:eb:2b:ed:5d:02:0f:13:cd:42:8b:7a:22:
f8:30:7e:79:04:e5:95:e6:65:77:bf:41:be:0b:cd:
09:12:c7:5a:38:bf:18:7e:dd:d1:8b:37:ef:99:72:
b6:2a:3e:27:e0:9c:b6:aa:58:4d:76:ce:f7:53:88:
3b:79:e1:92:63:0a:e3:69:aa:6f:aa:3e:3e:ed:ff:
da:94:fa:0f:a0:5d:d0:60:3e:9a:b9:26:4b:f0:f7:
8e:bb:dc:ec:01:a0:41:6d:f9:b9:f9:bf:7c:95:6e:
ea:51:22:77:99:9c:08:e5:19:cd:c5:8c:4d:1a:05:
9f:e6:6e:ef:31:88:77:c5:5f:2f:e6:6f:ef:93:ad:
e1:91:92:6d:dd:f2:69:95:d2:2b:af:0a:b9:06:17:
07:a6:f6:a6:14:58:77:72:46:20:34:82:91:60:4a:
15:fc:1e:8b:c1:6a:ba:72:77:1d:6d:e7:89:e5:22:
14:e6:6e:ac:ac:10:eb:f7:29:4f:c7:eb:25:6e:f6:
09:12:2d:7b:b2:b2:b6:76:b5:f1:75:82:8f:f0:f5:
3e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:36:C8:32:12:66:89:25:41:90:27:91:9F:F5:88:AF:56:8E:0C:29
X509v3 Authority Key Identifier:
keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:19:4a:6c:5e:1a:70:fe:30:b9:66:25:e6:93:50:ae:36:8e:
1f:e0:dc:f8:a8:20:65:03:f7:82:b2:29:c1:d7:ec:c1:c2:45:
14:49:fd:78:8c:94:60:68:16:c3:a2:d4:c4:b4:34:60:cc:d9:
a3:e9:da:61:12:7c:1e:b1:fc:b8:f8:37:b9:95:65:9f:9e:08:
f5:88:b5:f5:a3:d9:34:54:60:00:dd:c9:bb:42:ab:e8:50:c6:
26:f7:03:27:1d:a5:38:50:ab:5a:7a:b6:c5:07:17:a0:14:de:
41:b2:1b:24:27:bc:05:49:aa:79:35:a0:c7:04:e5:ab:3c:7f:
b4:33:ab:72:fb:04:7d:30:4c:5e:1f:de:bf:2e:6f:7f:5d:6e:
9a:a4:3c:92:db:bc:97:54:bb:78:4f:a6:76:08:0e:8e:9a:61:
ba:a7:bd:a8:e9:04:78:8d:ef:39:d1:d6:fa:d4:20:67:ef:e3:
5d:5f:50:9a:83:55:14:fd:c8:05:b7:47:51:8a:a7:b3:4a:8f:
d9:e2:f0:31:5f:7e:11:78:b3:4e:03:20:ac:44:a8:b1:9b:eb:
37:71:52:6d:1a:1f:21:3a:ce:1e:b0:e6:1a:34:67:18:18:d7:
46:66:66:a4:39:96:bb:4c:93:89:2a:64:f3:f5:33:46:c4:86:
e6:74:45:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:02 2025 by rpki-client