Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier: +N22E4a8pW5SbEVyJTfN/ytT0LWHuy+bwOCWGWFXbKk=
Subject key identifier: 3A:20:3A:88:F6:30:BE:6E:EF:21:77:69:D3:2A:9F:68:BC:D4:8A:6F
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial: 0199FC8FB9711B26B3B0B69A640927DC12A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number: 03DB
Signing time: Sun 19 Oct 2025 13:01:41 +0000
Manifest this update: Sun 19 Oct 2025 13:01:41 +0000
Manifest next update: Mon 20 Oct 2025 13:01:41 +0000
Files and hashes: 1: cutf0Yk4GqOLANVUSKcxrSdUxug.roa (hash: Q8Q4U3gD48zecWRmDv6Pw0MZwpRvb60BHrR0/Xs/Hmo=)
2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: y3rt4plNkHF42T+Wn1LoVvkvxjH8r8+3XXPzO2sugYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b9:71:1b:26:b3:b0:b6:9a:64:09:27:dc:12:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Validity
Not Before: Oct 19 13:01:41 2025 GMT
Not After : Oct 20 13:01:41 2025 GMT
Subject: CN=3a203a88f630be6eef217769d32a9f68bcd48a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ba:f3:fb:c2:17:de:40:07:8a:23:f7:47:f2:
d8:c1:79:ad:66:10:88:2f:be:aa:1c:0a:bb:8a:c7:
1a:08:4c:e4:a0:fd:8c:23:a9:5b:d3:1c:25:07:90:
70:00:43:91:46:db:16:9e:a9:3f:a4:19:db:63:2b:
18:97:85:58:79:81:2e:63:23:03:df:94:aa:77:77:
8a:15:7e:9a:6f:56:3a:69:97:10:ab:a0:fc:af:6f:
1b:9a:f0:79:ed:92:7b:91:98:9f:e0:66:a8:c0:84:
bd:4c:17:6a:1b:60:18:05:f0:60:c4:ed:c3:c6:54:
51:d9:e8:26:a3:6e:ad:22:a6:9a:f7:92:34:84:28:
05:3b:5c:04:c8:77:74:55:04:a1:e8:e6:d8:be:30:
bb:4d:ec:05:dd:29:53:07:3b:31:86:b5:e0:42:09:
38:97:09:81:5c:b5:b6:52:75:70:14:46:7f:2c:97:
cd:f3:2f:a5:2d:cc:db:f9:99:2d:35:93:2f:ca:29:
df:ac:bb:85:a1:ac:ca:39:ce:9b:ef:3a:e6:53:fc:
4d:e7:cd:27:51:dc:d8:6e:4f:a6:3a:1c:5e:b5:de:
47:24:e8:3a:e6:fa:12:d6:ae:d1:88:c2:60:13:15:
91:36:2a:22:34:5f:07:2a:46:ed:f0:7d:17:a3:59:
1d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:20:3A:88:F6:30:BE:6E:EF:21:77:69:D3:2A:9F:68:BC:D4:8A:6F
X509v3 Authority Key Identifier:
keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:aa:f4:2b:cd:e6:00:33:9a:7a:d9:f2:ac:3d:d3:fe:0d:47:
8f:60:65:d9:31:d5:24:69:c4:5e:c5:3a:30:31:05:00:54:31:
c9:d3:bf:d4:b8:a4:2c:52:bf:77:f5:00:f6:5d:d6:ab:6b:4e:
87:3b:88:8a:39:5f:a6:da:ed:81:e8:e1:d7:69:2a:16:2a:99:
f2:9c:fe:4d:67:84:3c:36:be:83:02:e1:7b:b6:2a:2d:80:33:
90:fe:67:7f:53:40:36:1b:38:f0:c6:eb:7b:65:ab:6f:02:26:
b8:0d:20:46:14:3c:9b:55:ea:01:f9:aa:25:14:aa:ef:fc:18:
b6:2e:5d:cf:67:fc:f7:2e:7a:6f:72:18:77:11:f5:50:b7:ce:
4e:08:80:23:e4:9a:88:71:b9:cf:37:bd:e4:16:f5:93:09:1d:
0f:94:8f:0c:c4:18:4d:69:f6:8a:a7:c9:1a:db:7e:63:cb:da:
f9:52:29:94:04:42:98:2f:f0:bb:d0:cb:7a:34:87:a8:e8:44:
70:f7:f5:04:1c:28:fc:00:bc:eb:37:3f:ed:83:14:56:f2:07:
e9:77:e4:83:08:49:fb:3f:42:69:9c:bd:d6:c5:e8:b6:57:19:
58:5b:48:ac:a2:6e:ac:ff:53:80:b8:88:83:3d:6b:5d:0b:02:
42:75:af:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:49 2025 by rpki-client