Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
File: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json)
Hash identifier: yj4J8oYg8wcHX3KVMKDGK0IKDWSpK+DF08qjGg9YONA=
Subject key identifier: 79:29:C9:93:65:1D:AD:D8:77:E0:AA:E7:A5:30:A6:90:61:4F:04:77
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Certificate issuer: /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial: 0199FEEC06BEC88088960866E30964241B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
Manifest number: 136C
Signing time: Mon 20 Oct 2025 00:01:45 +0000
Manifest this update: Mon 20 Oct 2025 00:01:45 +0000
Manifest next update: Tue 21 Oct 2025 00:01:45 +0000
Files and hashes: 1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: tFpfGplz3TncUvWKP3E1ZHUnhH+8QUdes4NWGUiJNNU=)
2: _iwCmsjTAlw634BVcFH9x4y6od0.roa (hash: sGzYd7+zk4VbbBPH9QI8yNwz1RatcjDRVrzAv9yiEMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:06:be:c8:80:88:96:08:66:e3:09:64:24:1b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
Validity
Not Before: Oct 20 00:01:45 2025 GMT
Not After : Oct 21 00:01:45 2025 GMT
Subject: CN=7929c993651dadd877e0aae7a530a690614f0477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7b:a9:ec:50:ee:62:dd:41:f8:c9:89:70:f2:
ab:4d:49:97:16:a9:d1:07:f3:b6:fa:c9:49:10:66:
c8:01:3b:a6:45:6f:75:f9:18:7b:47:0f:a7:83:ce:
b9:2f:29:c9:1c:8b:52:2b:9b:bb:73:7b:ed:40:2b:
df:e0:65:c1:5e:51:21:f8:fb:3f:01:4a:89:89:16:
24:2b:ef:8c:3e:33:06:b3:8a:cb:5d:b6:61:fc:ac:
ff:ed:13:98:90:f6:fb:09:07:d8:75:4f:24:f4:ac:
cf:86:df:99:ca:58:18:de:1a:ed:5a:88:8e:aa:a4:
c5:16:81:90:c9:14:30:a3:39:32:14:c3:b4:15:d1:
4f:86:91:8e:b5:f8:86:67:89:25:cc:28:c9:b5:7e:
8c:2f:c5:70:2f:85:0b:eb:9a:51:b2:a5:00:21:18:
16:3b:c5:05:3c:f8:8d:01:74:a6:ed:cf:e8:03:b4:
97:9d:9b:4e:3e:6e:53:04:e8:ec:2d:a4:3a:af:60:
54:4e:b4:6b:fd:b6:a9:07:84:10:39:c7:12:e6:58:
c8:da:6e:3b:bd:1c:45:cc:cb:37:e7:df:60:3f:87:
63:70:48:20:d2:08:2e:6d:0b:00:88:6d:23:59:94:
0a:96:ae:ca:13:bd:6c:b1:a8:85:8b:87:37:e8:53:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:29:C9:93:65:1D:AD:D8:77:E0:AA:E7:A5:30:A6:90:61:4F:04:77
X509v3 Authority Key Identifier:
keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0d:68:75:43:fb:6a:4e:8e:26:5c:f7:cc:60:e0:40:0a:5e:
8b:1a:b8:49:7c:45:bf:29:36:c9:88:66:0e:c4:16:63:55:51:
d2:1d:fb:1c:db:19:54:70:a9:cc:95:29:b4:34:34:23:ed:af:
5b:46:52:cb:dc:35:4b:c4:68:78:9f:88:7f:68:60:a0:1a:d1:
8b:7d:dc:84:03:35:13:61:54:ce:d0:78:c1:ae:86:ec:0c:59:
91:32:79:c0:af:35:0e:d3:d1:f1:2e:82:d7:ca:ef:68:6b:36:
86:02:e3:ad:a3:83:1e:22:cf:3f:08:b2:92:7b:9d:db:f7:c3:
bc:8d:c6:af:82:c1:cc:94:6f:a7:61:ce:1f:3b:44:c3:6f:04:
83:1c:7a:d1:75:fc:e9:93:67:0a:4c:e0:36:f8:a0:b0:e3:64:
7a:fd:85:ce:a7:5a:40:66:e8:fe:47:48:0a:eb:9f:26:39:ad:
e8:09:86:61:c2:37:8d:f7:fd:e3:b4:e4:f4:5b:bc:e1:74:64:
ab:73:3f:eb:ed:31:12:98:cf:83:7c:a5:e3:e5:9b:fc:cb:7a:
4e:2b:85:c1:3d:7a:54:68:8f:07:9d:99:12:ab:35:47:8c:b7:
ef:b2:d1:f7:ff:fe:a8:7f:09:77:a7:a3:fb:60:94:2d:9c:66:
f5:08:8b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:23:38 2025 by rpki-client