Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
File: rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json)
Hash identifier: vTnhQ89gGkCgHAtxV6vm/zzyqF026cVtFIfMtQo7QEU=
Subject key identifier: D3:C3:45:DE:0D:B0:26:E8:3F:08:97:1F:F8:78:A0:E8:E2:0C:FE:38
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial: 0199FDDA87ECB393B8747CC1ACFAAD6978E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
Manifest number: 0DCA
Signing time: Sun 19 Oct 2025 19:03:01 +0000
Manifest this update: Sun 19 Oct 2025 19:03:01 +0000
Manifest next update: Mon 20 Oct 2025 19:03:01 +0000
Files and hashes: 1: QrB38IR31JfmSrfp5ttgTReGTWo.roa (hash: tObzEsfYNmXi9X+/o+rGLlyYSek2LoSQ9N7PVMYEfqA=)
2: n3iPjhImnBjarzP2Rj2tOx0dNiE.roa (hash: lUEC9I8tI5NUjUJh9guJCH2H+g0KkZWinekNZT2+2Io=)
3: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: vxvQA30uATDVDNQhSMrMW0GlDzRgavmgHmvcxtfbbBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:87:ec:b3:93:b8:74:7c:c1:ac:fa:ad:69:78:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Validity
Not Before: Oct 19 19:03:01 2025 GMT
Not After : Oct 20 19:03:01 2025 GMT
Subject: CN=d3c345de0db026e83f08971ff878a0e8e20cfe38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:f6:b0:95:22:43:34:b8:46:24:8f:45:1b:
ba:da:2c:c6:c2:e7:6f:dc:f0:d0:58:b0:c8:dd:54:
a3:80:43:ab:db:23:f7:0b:96:a2:e5:8a:af:87:f8:
5a:cf:71:c4:3d:a3:66:f1:38:cd:be:4f:47:90:de:
39:f3:af:d4:f5:32:99:bf:7f:c6:b7:fe:75:cf:52:
53:b6:e6:59:cb:69:d0:15:d8:c8:e6:f5:80:36:d4:
b3:c8:f9:10:0d:5c:4c:fc:ca:58:9b:b2:9b:1b:03:
3f:a4:6a:d0:d4:e6:15:00:e7:a5:fd:69:34:59:d5:
a4:8c:91:d5:f3:44:99:5f:5b:1d:0d:71:ea:5f:73:
0d:c5:4c:55:70:91:73:87:ad:c8:05:39:ec:cf:19:
f6:60:37:aa:77:21:69:ed:f1:9f:2c:42:7e:77:eb:
e3:c9:55:22:53:e2:c2:0c:e2:b9:7a:76:a8:03:fc:
cd:7e:85:d0:d4:59:d8:33:b2:f2:e4:5f:06:23:30:
22:79:a8:a8:43:5a:ce:b3:6e:b5:64:75:47:17:aa:
36:66:ce:ba:86:dc:49:6f:98:cf:42:5d:ff:05:de:
00:23:fa:b7:5e:ad:d0:4a:0f:8c:7f:de:7f:55:20:
28:72:f9:3c:57:9a:fc:a3:1b:f2:2e:2f:57:1d:47:
fa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C3:45:DE:0D:B0:26:E8:3F:08:97:1F:F8:78:A0:E8:E2:0C:FE:38
X509v3 Authority Key Identifier:
keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9b:eb:b8:cc:08:22:df:98:2d:4b:b7:3b:9b:45:12:f9:77:
cc:1b:83:4e:db:98:e5:13:c0:5a:1e:17:e1:bb:6c:46:a1:a0:
d6:77:e0:9d:69:da:a0:50:a9:96:ed:52:e3:22:80:33:27:a8:
85:d6:bf:6b:de:98:d2:e8:1f:02:1a:f3:64:5e:c9:ca:2b:cd:
29:8b:ec:4e:21:75:49:ca:b6:d5:68:22:b4:60:55:d4:5b:55:
37:ad:9c:84:22:18:41:c0:3f:3b:62:b6:1b:05:5b:68:29:bc:
91:6e:16:b0:ee:d1:16:1e:73:a5:c9:91:78:ab:ab:08:0c:9d:
61:3b:34:29:43:6e:82:c4:39:3f:ba:1e:3c:6f:42:eb:b7:51:
06:67:2e:f4:03:25:3f:a2:ea:45:21:76:12:6a:40:7b:18:c5:
05:fa:f9:89:00:cd:b3:43:d5:78:99:34:06:dd:ad:cd:84:87:
a9:19:0e:cd:3c:ef:79:4f:2b:7e:e9:ab:61:53:00:29:2d:fe:
3d:a7:8b:3d:58:df:b6:9d:ab:e8:df:98:5f:02:a9:a6:03:f3:
97:7f:0e:1d:72:22:66:95:10:70:5b:2b:e9:c2:46:23:a2:ec:
ad:70:7f:6b:fc:48:12:7a:8e:64:35:6c:f1:f9:a4:4c:af:9e:
64:95:df:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:06 2025 by rpki-client