Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: wKoNtzjhLYMy0MP9gLGBwKA6eTFekeqf/Da5tbmWBZg=
Subject key identifier: 24:87:E1:B6:12:24:F0:2C:53:EF:94:38:03:B1:4A:E1:C3:AA:FF:B4
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0199FC8F8A8E8E88B299C7DB845DA7D8A76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 12AB
Signing time: Sun 19 Oct 2025 13:01:29 +0000
Manifest this update: Sun 19 Oct 2025 13:01:29 +0000
Manifest next update: Mon 20 Oct 2025 13:01:29 +0000
Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: rC6KcJdBXYksKB8OTmQv/fE/pVmx8/pgIi+hsAW1gxc=)
3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=)
4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=)
5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=)
6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=)
7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=)
8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8a:8e:8e:88:b2:99:c7:db:84:5d:a7:d8:a7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 19 13:01:29 2025 GMT
Not After : Oct 20 13:01:29 2025 GMT
Subject: CN=2487e1b61224f02c53ef943803b14ae1c3aaffb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:22:99:66:e5:59:59:39:24:0b:97:ca:99:
38:92:b5:2b:07:d1:70:9c:9e:9b:74:84:38:c9:ac:
79:df:65:dd:89:f0:4e:e1:45:ed:9a:49:91:cf:02:
6f:ee:77:e3:9f:04:61:bb:d4:e8:1c:3a:f2:ce:bf:
57:7c:30:f8:c2:3d:72:3c:1b:39:05:89:7e:dc:57:
39:c9:29:21:9e:fc:61:87:4d:5d:2f:df:6a:29:47:
da:bf:f3:2b:aa:f1:f7:f9:ee:8b:b8:61:5a:7b:96:
5c:ba:88:9e:59:c4:26:77:3f:ff:34:c2:b0:98:e4:
42:f2:e0:25:68:b3:9b:52:29:92:b3:36:e8:fd:3f:
08:18:af:f5:93:a4:f1:1c:c6:d4:a0:99:9d:ca:2b:
14:0f:cd:13:b5:58:0f:6d:29:33:70:b3:9a:d8:97:
92:3c:55:fa:47:b8:90:9f:ed:33:4f:2d:34:2e:80:
ad:1e:f5:cf:27:7f:42:00:0b:7f:a5:ae:87:25:bd:
33:9a:62:84:5e:39:fc:fe:33:0e:bd:61:12:82:df:
f2:79:f9:8e:44:a2:18:45:ce:15:d3:f1:02:d8:1c:
ca:8b:14:ad:2b:17:c5:ca:73:b3:41:5f:50:b4:e5:
a5:23:49:b0:65:7a:e6:77:8f:e7:e4:a3:57:20:e1:
a3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:87:E1:B6:12:24:F0:2C:53:EF:94:38:03:B1:4A:E1:C3:AA:FF:B4
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8a:b2:3f:a6:0e:4d:c0:74:cf:4f:4f:3f:ca:95:4e:3c:6d:
fc:ff:5c:57:e3:c5:96:70:f0:5b:b5:51:71:da:f5:32:c5:12:
58:84:dc:fb:4d:f5:b5:b6:2f:bd:4b:c3:56:b5:25:38:1e:4c:
25:f8:61:ef:91:19:cf:1b:99:54:af:2d:55:4c:be:ed:74:af:
1a:cb:b3:74:c8:27:4e:61:43:3e:ed:f4:8e:32:c8:eb:d7:80:
64:96:71:b2:55:b9:4c:c8:e6:bf:8b:ed:5d:97:f9:ed:97:08:
d7:ee:d8:40:6a:d3:ec:e8:ee:b3:e5:67:81:92:4b:af:32:1d:
55:ca:71:12:08:fd:1d:23:5c:9b:92:06:20:83:b8:15:49:3c:
ca:da:cc:59:48:86:22:ee:58:41:2f:ce:3e:18:c5:59:83:bd:
af:ef:86:53:05:e7:af:92:37:26:87:00:46:a2:4d:e9:79:5f:
75:78:43:e0:8b:10:ad:cd:2c:3d:2b:bc:7e:9c:83:77:36:2e:
5c:5b:1e:a3:1d:aa:75:62:2f:4e:c2:e3:1b:4b:14:75:95:56:
fc:db:9b:38:9c:3d:28:ed:36:ae:08:1c:13:32:45:18:4b:f8:
6d:cf:3f:4b:fd:c4:39:93:2b:40:b8:08:d0:86:34:d3:04:23:
9d:a8:0e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:44 2025 by rpki-client