
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
File: II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json)
Hash identifier: R/b8LL7a1fopSgV8txiCHkvkIz4jgr3wymSYEeCg6UE=
Subject key identifier: F2:D7:91:1B:35:B4:BD:DB:D6:E9:C4:C1:F8:7F:77:E7:75:F8:22:4D
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial: 0199FC8F9C592098C597B2C685ABE9979901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:34 +0000
Manifest this update: Sun 19 Oct 2025 13:01:34 +0000
Manifest next update: Mon 20 Oct 2025 13:01:34 +0000
Files and hashes: 1: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: /5A9EzBGLC+9NSvqiiKUinv89XOZ3UQzCvTkjJ53q/c=)
2: Sv8c63xNahZnEUX6sxkZS1Ry2Mw.roa (hash: jrXo/rmKfJlmke1E58p0Fv3ALUTTjd9LLG6tbA+jiaw=)
3: V04OCx0o1Bg0TgD8MO6kNsFMhog.roa (hash: 3a02UAIxWYHpz8tUKE7mHvONTRM/Wnqwu/RQszMGhpw=)
4: js9oNFtAP6uoXkguET2ifOtGxFk.roa (hash: xlI8bBSGf/iOY2KLlBGfTCvLGclFsfTElrxGe6FfxvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9c:59:20:98:c5:97:b2:c6:85:ab:e9:97:99:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Validity
Not Before: Oct 19 13:01:34 2025 GMT
Not After : Oct 20 13:01:34 2025 GMT
Subject: CN=f2d7911b35b4bddbd6e9c4c1f87f77e775f8224d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:ad:76:57:8b:ef:9c:43:2b:81:b9:95:f3:
9d:07:78:17:15:68:89:66:c9:1c:41:18:3e:d8:0c:
e5:55:c0:b6:69:e1:9c:75:93:42:95:0b:5b:1c:a9:
61:f1:fe:b7:37:f3:0f:ce:f2:d4:55:9b:02:ae:f2:
a9:52:f7:d4:e7:36:f9:e1:30:03:53:16:fd:18:f3:
99:fe:84:06:de:b2:da:47:91:de:90:84:d6:ed:dd:
ec:65:80:18:1e:8a:84:1b:f2:bc:c8:d6:bc:be:68:
4f:e7:fe:1c:0f:bb:07:99:3d:29:79:ab:8a:1d:0b:
ec:84:d5:03:46:9a:ff:ac:58:e3:9d:bf:9b:2a:fd:
d1:e2:1e:b3:4b:84:c9:d1:6a:03:23:ab:6f:0c:3e:
bf:8c:07:ae:6c:e7:23:7c:36:bb:17:d6:fa:2f:d1:
69:a3:51:02:db:48:5e:ea:6b:2b:04:24:66:1c:e8:
65:90:8b:c1:c5:19:a3:36:c8:24:fa:20:dc:a7:e5:
8e:84:da:7a:94:ac:88:db:9b:f7:f7:11:04:68:f9:
f5:f5:ca:89:5d:8f:d2:f9:f7:d9:c6:3f:74:e3:f8:
e0:44:4c:3c:a1:5d:5c:74:8e:bb:34:e5:b1:b6:34:
9b:0c:12:d5:1c:74:7e:0c:05:31:45:c5:ea:0e:c4:
d8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D7:91:1B:35:B4:BD:DB:D6:E9:C4:C1:F8:7F:77:E7:75:F8:22:4D
X509v3 Authority Key Identifier:
keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:89:e5:5c:0a:3f:28:86:d1:dd:ae:eb:12:36:57:47:dc:92:
ca:53:ac:35:23:09:9a:92:ae:bb:c3:c3:32:69:c5:05:ee:62:
e1:9b:d2:a4:d1:56:bc:05:d8:5f:7b:64:9a:dc:63:fa:a4:e5:
69:a5:df:28:d8:20:8d:c5:d0:e7:79:8f:19:98:bb:c2:95:15:
e4:4f:39:c1:fe:59:2b:49:ea:11:12:f7:ce:a8:a5:af:28:e9:
06:84:d4:c1:70:8e:91:1c:b0:bd:3c:68:b8:f4:b2:86:13:c3:
76:38:02:b1:93:5c:23:76:04:77:af:e4:d9:69:99:76:15:6e:
76:f2:cf:c9:8f:0c:aa:4f:5b:5d:ff:73:f1:f8:8b:be:3d:89:
a7:25:cf:50:8e:c0:af:78:cd:0e:ae:ad:dc:37:3b:c6:ef:cf:
b0:4b:09:8a:1c:c4:e7:80:5d:00:f5:c2:31:5f:00:2a:76:c7:
4c:46:7e:05:0e:d6:6e:23:28:b3:26:e9:67:28:5e:34:35:c9:
8a:32:b6:c9:ee:b0:29:50:b0:0b:11:18:97:4a:5c:3b:6f:07:
21:e6:27:d5:b8:94:fc:de:52:73:90:62:35:07:e6:38:33:01:
8f:bb:7e:ed:3c:ed:30:1b:59:4b:1a:c5:70:a5:d9:df:1c:8d:
ef:47:88:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:50 2025 by rpki-client