Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier: UTJG4sC1F8oTKjk3TSwrsgICuE4MxJfQdQKQe+xZKh0=
Subject key identifier: C1:83:CA:71:95:30:31:44:70:05:B1:EF:21:48:05:F4:69:92:9A:60
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 0199FD6AF157E37E873AB1759FB26B782A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:08 +0000
Manifest this update: Sun 19 Oct 2025 17:01:08 +0000
Manifest next update: Mon 20 Oct 2025 17:01:08 +0000
Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: BuZs/Tv3JnzHuN9O1ds4PkdF1xXcdiSG88z/tiSzQzc=)
2: L9b4ducPYyR6qc5uaeOni9YJQHA.roa (hash: vaOymUj3eUPmbh7xiKllx8KgzftTh5qvMK+aeen3RXg=)
3: kpbrBAbvkEz7iwjj9qvNJnx2KAI.roa (hash: EaUeR1cKI29E16jF0XdNnwUwftG+vurlmN50dR3srjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f1:57:e3:7e:87:3a:b1:75:9f:b2:6b:78:2a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: Oct 19 17:01:08 2025 GMT
Not After : Oct 20 17:01:08 2025 GMT
Subject: CN=c183ca71953031447005b1ef214805f469929a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:93:0e:e0:69:18:a2:3b:0c:5a:c8:0c:cd:50:
da:e3:ab:b7:66:dd:cd:92:72:6c:f6:f5:7e:82:30:
80:24:f3:0d:0f:c5:f8:b2:ad:c2:f7:54:6c:27:1a:
6d:bd:aa:2a:b2:21:44:4d:73:e7:c6:14:1c:54:cb:
6a:51:eb:e5:6f:60:0b:57:56:2a:a4:08:2d:f2:2f:
e6:9e:08:32:67:d7:49:c8:73:a0:29:66:d1:17:c3:
e5:6d:ec:ba:ae:88:49:8e:0c:9b:89:4c:e8:57:31:
b5:12:90:3f:ed:33:47:be:b9:ed:cc:a5:c6:de:fc:
74:06:38:00:10:a2:8c:89:b0:57:ca:4c:b8:0f:6a:
bc:73:2f:d1:e9:41:15:d1:1c:56:87:8c:78:51:58:
09:97:bd:d3:b5:41:5f:b0:29:8a:83:4b:52:24:0a:
60:f1:b4:2d:3e:44:dc:ba:e6:31:c3:86:17:11:c9:
a0:af:77:f2:15:13:27:b6:74:92:40:20:43:78:4d:
38:14:49:6a:38:0b:58:34:1c:b4:26:32:93:6b:59:
9d:0f:4f:fd:a1:f4:32:02:3a:6c:50:cd:80:ba:c8:
a4:30:48:6f:bd:93:d3:6f:bf:98:6b:df:c6:91:f7:
ce:0f:34:d0:18:60:9d:72:65:f1:d1:52:02:e8:03:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:83:CA:71:95:30:31:44:70:05:B1:EF:21:48:05:F4:69:92:9A:60
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:da:cf:9c:67:61:66:f7:76:91:a4:db:92:28:a4:0d:6d:d0:
bd:1b:27:25:2c:94:d4:e8:e3:dd:67:24:85:25:02:ff:04:fc:
43:2d:9a:88:68:96:bf:b5:70:dd:8a:2b:74:12:bb:fe:c0:1b:
d0:70:57:30:76:a2:0a:71:a7:dd:ed:3a:29:3e:a3:6e:d3:a4:
70:79:1e:45:3e:65:f4:b6:85:e9:cd:08:3b:5e:c0:3e:0c:16:
1b:6e:77:20:db:a0:40:ac:24:96:ca:f8:37:a5:15:00:6c:28:
b7:96:55:cc:58:34:c0:61:f8:28:96:3c:57:29:a4:a8:ab:d7:
e6:1a:0c:70:d5:5c:67:21:3e:17:e9:ff:e5:e9:a3:ca:3c:02:
f5:bf:a1:26:60:7e:b1:e1:18:a0:14:1a:59:36:a5:11:d7:bc:
39:93:dc:ba:e1:45:9a:b8:e3:de:09:31:a2:6e:09:e3:22:86:
4e:1b:e7:d2:90:c1:20:68:ae:c8:88:1b:fa:41:22:7e:d1:22:
6e:a1:01:ee:f7:be:1a:5f:9e:ad:b7:7b:5a:4b:f4:31:2b:08:
44:50:40:c2:5b:7d:37:ab:e9:4e:f8:1c:84:b1:0a:f1:f6:d8:
70:92:45:79:02:d6:91:03:01:25:ee:13:ae:d4:db:b6:60:26:
be:64:e7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:49 2025 by rpki-client