Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: XTHqoWQOdAXYtTbroxL0TAve+/xcGBQ1Xoc7bBxn+Mo=
Subject key identifier: 4F:CB:2B:5A:63:61:C3:B9:FF:39:98:24:15:D3:1D:8E:97:3F:FF:59
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 0199FDD9C819EF1211ADC7FF43DD92E84B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:02:12 +0000
Manifest this update: Sun 19 Oct 2025 19:02:12 +0000
Manifest next update: Mon 20 Oct 2025 19:02:12 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: mtSJ306B4k5NSozh8b8QVauJ+Si14/vZaoe8RBXqDLc=)
2: VU0FkvZgVaRI8EGkm-qXkP1h2_c.roa (hash: FXgImtBv7FeA5blXsKdg5pD7MuiscFVJi0Lfx25h6e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:c8:19:ef:12:11:ad:c7:ff:43:dd:92:e8:4b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: Oct 19 19:02:12 2025 GMT
Not After : Oct 20 19:02:12 2025 GMT
Subject: CN=4fcb2b5a6361c3b9ff39982415d31d8e973fff59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:60:d7:4d:67:9f:af:46:df:1c:8c:c5:b7:51:
46:c6:70:3f:42:95:3d:e8:d3:34:a8:b9:a2:ae:4d:
3a:30:48:f6:c0:4f:00:5c:e4:e9:26:60:d2:eb:ef:
dd:9a:7d:c0:87:75:dc:73:55:9c:e6:da:1b:34:81:
f2:c4:b7:68:af:63:42:a3:8e:36:03:8f:bc:57:dc:
73:0a:39:a0:f0:6e:29:b6:b7:c4:ee:76:bd:79:dd:
d7:76:34:22:13:d2:69:49:e6:ea:5e:8c:db:03:84:
42:03:f1:7d:91:f8:07:96:a9:1a:22:d0:0c:31:c4:
e5:01:fe:eb:c3:a1:cc:42:f3:a4:15:9c:56:6e:47:
1b:66:7c:ed:98:cc:ce:4c:81:53:31:ca:f8:4a:21:
74:a2:0d:b0:ef:d2:09:22:ba:f1:ed:58:f4:23:12:
ef:4f:c9:cc:a0:70:0e:82:de:0c:ca:80:10:88:56:
e0:c1:1c:63:98:09:ad:f6:fc:7b:fc:21:88:73:43:
5a:9c:0d:d8:b4:d5:c2:eb:0a:b0:0c:bc:16:44:16:
eb:30:60:62:13:07:56:44:14:f0:57:cd:26:b1:4e:
3c:85:0a:80:af:15:6a:ae:01:5e:2b:3b:11:81:d3:
bf:8b:90:84:f3:7a:17:19:ae:7d:ba:93:8f:4d:80:
7f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CB:2B:5A:63:61:C3:B9:FF:39:98:24:15:D3:1D:8E:97:3F:FF:59
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:f9:07:6b:11:e2:b2:ae:ad:bf:a9:e4:82:15:6b:b5:92:27:
ac:23:8d:ce:4e:f0:f7:44:8b:0b:80:66:83:91:ea:40:2b:c2:
20:d1:3c:86:92:b4:fe:76:5f:f4:8a:07:60:72:e7:b5:d8:db:
43:ba:ff:31:1e:0b:c6:b1:88:81:8f:69:53:0c:12:aa:f5:b9:
c3:7c:f2:27:08:e4:d5:5b:f4:cd:8d:e0:9a:b1:fd:c2:4a:20:
1f:ae:a5:dd:ba:f2:21:ed:e7:63:56:16:a4:ad:c0:da:38:b5:
c6:13:c0:cb:9d:15:60:99:ee:5e:c8:01:25:f2:5f:0a:82:f8:
2d:0d:96:df:ed:ba:8f:90:c9:a1:98:01:d0:73:07:17:0b:32:
ba:22:1e:67:2c:72:38:52:b4:4c:e9:b6:4e:10:ec:be:96:b9:
0d:a8:8f:55:f5:3e:f9:36:88:60:e3:b3:60:1f:5b:07:e6:e4:
16:3d:4a:a9:46:4f:91:d2:37:21:d3:9a:23:81:0c:40:b8:0e:
fd:6e:d7:ae:e1:92:53:7e:82:2b:35:15:2a:6e:4a:8f:96:e7:
50:5a:44:3d:6b:cd:c8:93:82:fb:65:ac:78:fe:76:dd:aa:fe:
34:c3:a2:0e:c7:b9:ac:bd:7f:e8:96:e1:66:c6:2f:e9:33:0a:
e5:3f:60:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:13 2025 by rpki-client