Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier: izSD88Ki6o+ZUne2awK34OnknmH3bzyxWv7a3BBKpZc=
Subject key identifier: F5:B8:45:60:13:36:33:71:D3:A5:F1:B8:59:37:83:AD:08:AC:FB:8B
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 0199FC590472EF828EEB1C68D9236383C67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 12:01:56 +0000
Manifest this update: Sun 19 Oct 2025 12:01:56 +0000
Manifest next update: Mon 20 Oct 2025 12:01:56 +0000
Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: nPOhykRoBVzPFU85DrvFyLT78zCdRCxE5AByEiIX3so=)
2: KC65iLduV38Y-_4YeZcOkvub1x0.roa (hash: 59wDbBZd77QyRnr9wiaIVyjbp4l+GRhLfxwyuRW0y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:04:72:ef:82:8e:eb:1c:68:d9:23:63:83:c6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Oct 19 12:01:56 2025 GMT
Not After : Oct 20 12:01:56 2025 GMT
Subject: CN=f5b8456013363371d3a5f1b8593783ad08acfb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:04:d1:0a:17:1b:41:fe:d2:74:b6:d6:5e:
0c:3f:8a:e2:1b:88:0b:cf:6f:32:74:14:ca:be:6a:
9e:30:23:9c:87:70:3a:39:b1:f5:e2:40:77:5d:a9:
30:2f:ff:5d:5c:00:79:f5:17:78:d6:c9:0e:f3:d1:
54:e5:d3:77:d1:9a:23:25:76:a6:be:0c:a6:27:c4:
c0:2e:ef:35:d7:20:2c:9f:eb:14:02:9b:9b:41:25:
db:4f:6f:00:ea:45:ac:81:2e:26:49:75:7c:57:bd:
a9:0a:f8:ba:d0:6e:e1:e2:0f:bf:a5:29:21:78:6c:
b4:da:a2:23:33:3d:2a:bb:b8:e8:25:2a:ab:54:6d:
13:b6:4a:7d:a6:eb:b7:ef:1b:3f:0a:11:f6:f0:90:
19:bf:9f:5b:09:60:f7:25:85:54:ee:40:ea:20:ab:
41:89:d6:fa:af:2d:87:37:35:21:5f:7f:ff:39:25:
85:a5:67:f4:68:15:05:88:1f:66:76:99:62:53:b3:
ad:2b:41:a1:5e:bc:83:b7:9a:15:d7:02:31:9b:4e:
ad:fb:f8:e1:2a:04:eb:95:c0:9e:ce:56:3b:3a:e0:
d3:07:c1:bd:1d:64:f7:8f:d2:5c:66:fa:98:1b:50:
c0:9b:19:68:f6:4f:4e:a9:e5:77:59:ed:ea:a8:be:
cb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B8:45:60:13:36:33:71:D3:A5:F1:B8:59:37:83:AD:08:AC:FB:8B
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:33:75:00:eb:4e:44:7b:db:11:5a:e3:91:bb:8b:de:fc:c0:
05:52:3e:11:44:3e:21:53:de:a1:d2:b9:85:f4:83:16:76:98:
7a:c1:13:e1:ec:de:34:b4:cb:eb:6d:8a:36:62:ba:41:d3:eb:
18:4a:0c:f7:da:57:94:c4:90:09:29:d7:d2:29:c3:af:f5:d4:
f4:03:db:b3:fa:bb:f1:5a:0f:cc:0f:6b:4c:86:2b:f5:de:68:
22:66:61:8b:d1:3a:4a:38:41:08:2c:66:47:d4:d2:fc:92:16:
ba:82:51:28:69:02:fc:3b:ec:05:ed:7d:c0:0e:90:af:2b:73:
99:46:2d:a9:c0:8b:2c:7a:6c:a7:5c:1a:25:52:60:08:de:e2:
44:30:2b:be:72:21:88:d6:cf:63:75:71:39:35:0f:73:1a:0f:
13:65:dc:a4:e0:6d:73:d1:8d:30:fa:cd:6b:91:fb:0d:ee:e1:
ae:97:bd:2d:36:de:a9:d6:bf:f3:60:3d:da:c7:7a:63:e6:58:
9a:4f:23:44:6a:66:c6:7d:06:86:79:1e:fd:65:c7:c6:87:d6:
57:71:ab:e1:e1:29:84:14:91:86:5a:15:77:c3:f3:ef:96:fc:
ad:0a:f4:7f:b4:ca:9e:00:68:f8:1d:89:4d:c6:39:6f:d8:1b:
7f:e7:43:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:50 2025 by rpki-client