Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
File: 3V7mW6NorXTZoD_ygkQMhXeiFZY.mft (raw, json)
Hash identifier: rxOuqQXZbdAg2LxJQLFnFiTJoRtNlecXfJskTT6+Re4=
Subject key identifier: 28:94:6A:5D:16:54:EF:2D:48:7A:12:47:0C:FC:DA:F0:A1:82:5E:EA
Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
Certificate issuer: /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Certificate serial: 0199FF229C7AD3EF3154BAA78E76CB423EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
Manifest number: 0D3E
Signing time: Mon 20 Oct 2025 01:01:22 +0000
Manifest this update: Mon 20 Oct 2025 01:01:22 +0000
Manifest next update: Tue 21 Oct 2025 01:01:22 +0000
Files and hashes: 1: 3V7mW6NorXTZoD_ygkQMhXeiFZY.crl (hash: NHe1CfuBPvTVk8IZ87syikpuDU3RylmTQVquADrJKNk=)
2: Fu2SG4loZ2malz9WaofXCDUPGUQ.roa (hash: v34bq7itFiS09euDmLvsea1XPjuasihGiJjC++WIBUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:9c:7a:d3:ef:31:54:ba:a7:8e:76:cb:42:3e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Validity
Not Before: Oct 20 01:01:22 2025 GMT
Not After : Oct 21 01:01:22 2025 GMT
Subject: CN=28946a5d1654ef2d487a12470cfcdaf0a1825eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6f:d0:d0:72:2b:af:7c:14:ff:52:d0:18:62:
89:b9:f2:b0:05:fe:f9:f4:8d:61:0d:ab:02:d9:c1:
60:03:3e:9b:88:ce:f8:b6:ea:00:8a:c7:99:d7:d1:
89:66:8e:db:34:a1:8f:83:fc:d5:98:c2:d6:15:e4:
88:c8:77:48:cf:62:51:f8:91:e1:68:1a:53:13:32:
0c:a8:a1:a7:f0:8f:13:90:11:7f:ae:9f:96:fa:9a:
81:49:05:b1:64:82:ac:83:db:ea:b9:33:6e:89:28:
37:d4:43:d3:48:72:eb:6e:91:72:30:b8:12:4e:c8:
40:49:7b:00:1b:27:ac:93:a4:91:f7:8f:45:5d:bb:
df:5a:c8:91:ef:ef:2e:c4:ec:c7:07:6b:ac:20:87:
2f:f2:13:d3:7e:54:4b:17:84:cb:c6:65:46:f7:fa:
9e:4b:f4:fa:83:46:09:9d:29:88:c3:df:d3:de:fb:
f9:d7:ec:c1:9c:46:98:5f:97:7d:a1:1c:cd:49:e0:
05:52:cc:8c:eb:29:7d:98:94:be:9b:10:46:fa:84:
25:b9:93:ae:d4:c4:dc:45:95:e5:e5:a3:cf:0f:63:
ff:43:fd:5b:52:f7:a6:7b:14:3c:c3:4c:3d:a2:e3:
8f:e3:de:dc:60:23:dd:97:66:82:14:2a:a3:fe:b1:
5d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:94:6A:5D:16:54:EF:2D:48:7A:12:47:0C:FC:DA:F0:A1:82:5E:EA
X509v3 Authority Key Identifier:
keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8a:4e:2e:41:a2:55:d7:5c:e6:7f:a2:fe:5f:ce:14:0b:37:
dc:61:01:39:38:77:4d:76:05:c4:1d:36:d3:fd:97:0a:f9:e5:
a1:66:23:c1:2b:de:86:ab:bf:55:24:6e:02:d0:2b:c3:27:d6:
61:bb:95:69:9b:c5:75:bc:eb:d2:66:ff:da:16:f4:a9:63:27:
b1:db:27:8c:c8:db:9f:be:98:18:b0:1f:01:af:e1:7c:f1:2c:
65:7b:5c:5c:e2:15:f1:a1:be:8f:7a:e8:5c:bd:e4:13:2c:c7:
9c:da:1d:ea:5b:b7:8c:51:bb:35:bb:1e:01:3d:60:5d:9e:d1:
8b:52:33:75:66:66:2c:a8:4a:c6:70:18:9c:a4:ee:2e:b2:3f:
0f:5c:2c:5d:42:a3:38:de:7a:e9:5b:c9:82:5e:b0:9b:d8:97:
fe:d3:47:c3:38:e6:e0:6a:45:21:3a:5c:a0:f1:e0:05:0e:61:
1d:3e:86:e9:03:fd:2c:de:63:6d:fe:6f:cd:0f:51:77:49:32:
83:ea:8f:dd:11:f4:c1:5a:87:78:85:c0:dc:1c:f3:de:d4:d8:
cf:5f:93:4a:48:0b:50:99:17:c2:ed:0b:7d:35:33:9b:fd:d6:
86:81:50:6c:e2:ba:ac:e2:48:f8:d5:0b:9a:17:9e:e8:df:ff:
ae:a6:22:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:30 2025 by rpki-client