
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier: hK8s+1xAYlhV9Vu6NdU4ygz9o8igv4zQ4FERrhdsMKg=
Subject key identifier: A4:DD:CB:D4:D1:4E:DE:F6:FE:E5:F8:24:17:9E:95:0F:0D:E4:D4:49
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 0199FB45CDD5C18E03079201165698E94AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number: 1181
Signing time: Sun 19 Oct 2025 07:01:19 +0000
Manifest this update: Sun 19 Oct 2025 07:01:19 +0000
Manifest next update: Mon 20 Oct 2025 07:01:19 +0000
Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: G49EqqJapJmh36n1nxomwZxiuV1Br0x58Hh7bYkBmuU=)
2: FmBFQOhNzhtYDdGU28d2mOWYxkg.roa (hash: AVAVJ+z2q5E9uU0vpHh6beNWBbBTBuDWNk3vwtJ8KHM=)
3: a8dfbuD_49og8AJXwHhNJcwaxsI.roa (hash: W1ipPbq868Ly393rgOf3eds1bM0F3aTAdVR1mM1YvM4=)
4: ebI6lo6FFyrxH7BnniqczSoCpEU.roa (hash: VWIQku3g+eu08iWePk/+zF+lAvowuzYaw8AhxuX9/iY=)
5: iEjwphsnsCkTvYcagBPKufnt2-g.roa (hash: exQmAtQ6POft9PaSsq76nVkrM+e0e7z6aqVk5GRVWO8=)
6: n11ZJorlH1hZHcOrMkN5woOVejs.roa (hash: qO1znHdZkcnjjGqE4Hx9Dgh/NFBxbtAoTeajvo0zDfk=)
7: rhaUzcqQYW4tC3EdQCdaNLWOPbA.roa (hash: PvCUNKVTR3gGQiqq6yWqtNwJ314FXo4VLynnYKTFbJo=)
8: uEehilTaJNTK6wTZHHdxxqFauYo.roa (hash: tRIraXpN8mX3nJ3uL7fIgHQ/edV3rhiXldnw6ddpk0I=)
9: x6Fr-1VeTypvMg38CuYZL6Aoelo.roa (hash: ajAlNUJcOgM2msZH/aiPOA3cqagu5/2Oq4Xgzqwcm3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:cd:d5:c1:8e:03:07:92:01:16:56:98:e9:4a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Oct 19 07:01:19 2025 GMT
Not After : Oct 20 07:01:19 2025 GMT
Subject: CN=a4ddcbd4d14edef6fee5f824179e950f0de4d449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d0:26:9f:e1:fc:20:d4:e3:43:9a:16:bc:9e:
c9:d4:0e:7e:37:87:39:ef:3e:51:23:25:02:e0:c1:
f5:65:6d:4c:f8:1e:f9:7a:f7:61:8b:a6:85:c0:87:
11:6b:b0:b7:1a:61:1b:68:a6:98:44:a1:11:fb:a4:
15:7a:c7:27:92:01:3d:72:aa:33:90:93:6f:66:ac:
a8:c1:50:87:7e:54:81:2b:ef:d9:18:bc:42:8f:16:
f3:00:02:2c:d0:d3:de:84:49:98:b6:2c:3c:81:20:
13:04:76:f1:4f:60:d7:12:99:8c:0b:a4:52:72:56:
66:34:91:ce:6f:78:dd:9a:1a:68:0e:57:73:7f:cc:
59:68:28:28:8e:f6:38:7d:e0:95:ac:a2:8e:cf:c1:
6d:73:94:ac:33:fa:3b:4d:27:f0:6e:1d:05:c5:08:
03:9f:f5:bd:a2:71:35:5f:7d:dd:6e:1b:59:52:0e:
e9:7d:2a:b6:ee:2e:27:2e:e9:70:f4:14:ff:42:47:
99:a2:b3:87:25:18:61:64:9d:fe:47:d4:0d:a2:4f:
a8:13:a8:e8:0a:18:98:a9:6b:98:04:28:00:3c:23:
d5:4d:45:8c:ce:4c:55:41:ec:f9:8d:06:34:9f:22:
0d:60:b9:c8:42:c1:f1:5a:dd:83:31:ca:4c:a3:5a:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DD:CB:D4:D1:4E:DE:F6:FE:E5:F8:24:17:9E:95:0F:0D:E4:D4:49
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:32:02:1a:90:58:2f:7d:c2:7a:d1:ee:6e:15:8b:96:f1:f2:
50:88:5b:75:b9:5c:83:d3:dc:ca:f8:ac:5a:a3:0e:5a:c2:63:
af:b9:d4:ab:5b:25:04:55:8e:8c:f7:a3:8d:b7:5f:59:9d:22:
d9:2c:c0:ff:01:9e:9f:d6:7e:8d:6b:c4:92:b2:2f:00:96:1b:
60:42:66:25:ed:9a:fd:1f:5d:57:da:e8:99:43:bb:77:ba:7b:
28:0e:a7:19:7c:19:5b:6a:f1:da:3e:86:0d:4d:8f:31:53:5e:
03:ac:fc:56:91:85:18:c9:03:0f:8e:b9:78:c6:bc:09:14:f8:
68:28:84:01:ad:45:3d:21:52:4f:c7:5d:89:5a:89:c7:ae:4a:
13:62:5f:0d:92:69:d6:54:53:f4:32:e4:f6:b5:a5:65:45:b7:
ad:b8:fe:e3:fa:e4:17:2d:fc:9e:fe:bc:a2:16:c6:9b:53:7c:
e7:40:74:68:13:f1:a8:83:57:fc:4f:86:b6:c1:35:33:62:22:
1d:5a:8d:56:10:b4:2b:05:e3:44:99:29:bb:f0:d4:8a:fc:30:
fc:9d:ee:f8:e0:00:9c:c1:20:bb:bf:bb:2a:a2:d4:51:67:b9:
0a:42:71:b5:71:83:26:3e:b0:cc:98:14:65:92:b8:e7:7b:10:
49:d3:6a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:32 2025 by rpki-client