Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: IACfj2Berw/xGIZC20hzvC6QyEO+nt7O0QgyiYCI3N0=
Subject key identifier: 83:2A:42:6F:E7:24:0D:B7:7A:D0:FB:96:3E:A0:49:74:54:F6:E1:AE
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 0199FC8FB8C1A13EEA66D4F3838ADC00E47C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 13:01:41 +0000
Manifest this update: Sun 19 Oct 2025 13:01:41 +0000
Manifest next update: Mon 20 Oct 2025 13:01:41 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: ZT4W9+558Ybgs4WfyRIw5SvoA3y6oMExW5cVnNm8hMY=)
2: d-cXZlvvdlyn7ox05EmpqUd6gwY.roa (hash: nBiz8J2UJroitgcJmWpKEDt0TmsVS2dSW257R8wSk2M=)
3: ddyzrC5BC4wxEQNwmkjcZcFPmY4.roa (hash: 0XE307HFpJ7wb9YEVzh633mz+Wdn4W7KWCgB9kPDSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b8:c1:a1:3e:ea:66:d4:f3:83:8a:dc:00:e4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Oct 19 13:01:41 2025 GMT
Not After : Oct 20 13:01:41 2025 GMT
Subject: CN=832a426fe7240db77ad0fb963ea0497454f6e1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:4f:d5:e5:35:25:17:d9:b4:29:7c:70:7e:
af:ff:1f:49:41:54:54:89:3b:67:9e:35:28:37:16:
a4:31:94:7f:dc:d3:54:d4:4d:83:f1:a4:99:87:0c:
fc:c7:c5:2c:e8:49:04:6a:b3:d7:22:09:f3:3e:83:
03:40:6d:79:d3:64:fe:b6:66:db:e2:73:4d:db:82:
e3:57:64:20:ce:d8:39:90:23:38:bb:87:63:57:b7:
af:7e:28:35:02:f0:b5:45:d6:c0:a5:0f:cb:c9:3f:
b9:04:9b:94:a6:41:7c:f7:aa:4e:7a:90:1d:21:56:
34:0f:90:25:70:a3:16:28:c7:1b:36:e6:11:02:17:
1c:a5:a2:e4:48:c7:4a:c9:fc:b5:f3:7d:e4:30:53:
52:2f:e5:ae:67:67:a8:33:31:9d:92:95:47:ff:cc:
61:e8:40:82:76:54:93:ee:94:bc:f9:f8:7d:f4:f8:
81:18:9d:39:e8:1e:ff:2b:db:4c:bd:59:25:9f:fa:
09:bc:12:c0:10:1e:f4:83:bf:6c:f3:99:94:11:43:
e2:6b:72:ce:5d:94:b5:7f:4a:05:01:4d:b9:6a:8c:
ab:ba:c3:f4:9b:82:91:52:88:90:69:94:71:f0:28:
2d:c3:0b:e8:03:c7:09:4e:20:f9:9e:c2:20:66:c2:
0e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2A:42:6F:E7:24:0D:B7:7A:D0:FB:96:3E:A0:49:74:54:F6:E1:AE
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:23:e6:ca:01:c0:24:cc:40:8f:14:0d:71:1c:8e:3f:a9:5c:
6c:96:b5:57:8c:86:b9:fa:48:52:9e:16:c2:70:3c:b6:c1:4e:
d3:97:c3:c1:71:f5:53:1b:ed:5e:f9:b9:c9:93:d7:aa:91:b6:
da:e6:6b:15:74:cb:9b:4f:bb:14:8b:ec:31:eb:40:60:66:7a:
a1:c0:8f:5a:75:1f:12:25:80:b3:24:62:6e:72:9a:3d:0b:25:
2c:a3:dd:48:91:ef:2a:5f:63:e8:c2:86:ef:b1:20:0f:7e:3f:
33:9a:75:b0:a9:49:26:e6:5d:71:6d:5b:99:8b:13:d2:03:d5:
dc:45:19:52:47:bc:80:f3:e3:b2:3f:1d:9f:4a:b1:2e:2f:a2:
ce:1d:ac:8b:a4:57:13:91:31:87:9a:aa:7a:ac:0a:a3:76:c7:
c6:e3:49:01:e9:49:54:9d:26:b7:c4:81:53:4f:28:2a:7b:33:
b3:49:7b:4c:0f:a5:e0:7f:81:cf:3f:17:6e:35:fc:d1:67:12:
07:5e:98:d8:41:01:25:bf:ad:b0:9b:e3:6f:06:d2:db:92:55:
8d:74:2f:3e:63:ca:26:01:7c:e2:a3:ce:5b:87:7a:9f:61:ea:
fe:66:04:ba:0b:ea:dc:11:b8:5c:3b:a7:99:36:6e:a6:3a:b0:
35:97:48:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:12 2025 by rpki-client