Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier: gTs4Y7C9KkUXx3S7/8dNPs4WFh9tYzfJXhLm/Pz8Zh8=
Subject key identifier: 62:96:D4:2E:AD:1D:94:1F:77:FE:E5:61:05:13:B8:C2:B0:93:5C:2F
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 0199FCFD861BD3668D70F6A0D2F378991579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number: 16EE
Signing time: Sun 19 Oct 2025 15:01:37 +0000
Manifest this update: Sun 19 Oct 2025 15:01:37 +0000
Manifest next update: Mon 20 Oct 2025 15:01:37 +0000
Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: LETwMqJAPXDxAFSHyJh9x+lssq/rOdH94LKq4u63W5Y=)
2: DCDhVbD3fsODPYm5sUm8pjAvYC4.roa (hash: 7lv1CrpPPfO+TV6Xk6IsNlr9S02akSFzspE/euO4HYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:86:1b:d3:66:8d:70:f6:a0:d2:f3:78:99:15:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Oct 19 15:01:37 2025 GMT
Not After : Oct 20 15:01:37 2025 GMT
Subject: CN=6296d42ead1d941f77fee5610513b8c2b0935c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:d4:30:92:dd:76:52:96:e9:03:4b:dd:fa:
e2:46:22:fb:64:67:95:f1:a0:bb:39:31:d1:52:53:
54:b9:9f:0e:b8:a6:e6:2b:15:b6:e3:68:0c:d1:95:
3a:20:61:26:09:7e:42:83:76:91:61:5d:c2:42:fa:
92:96:c8:1c:b0:4c:e0:37:4a:ee:9c:e7:ec:3a:86:
18:de:f5:35:21:44:13:40:16:85:99:f3:cf:5d:ee:
f1:54:19:15:01:b3:ac:a7:de:30:33:f2:76:bf:03:
76:33:1f:1d:f7:61:6d:e7:76:e3:72:be:56:e4:84:
1c:7b:23:36:76:61:cc:11:a1:3b:4a:d9:5f:19:69:
54:61:42:8b:8b:18:7f:dc:a4:33:6e:ce:ed:55:05:
8c:54:7c:c0:9c:5e:45:51:96:30:83:88:43:5a:43:
f9:c9:0e:8f:d5:7d:34:e6:8a:3f:ae:95:27:bf:73:
cc:40:05:0e:28:84:16:37:b1:56:99:96:4b:c5:6c:
86:c1:11:8b:e2:5f:34:71:6e:d0:3b:96:4b:28:fa:
2f:d0:04:9c:ab:08:5c:3c:0d:00:97:e8:38:b5:7b:
65:37:92:ef:e9:b8:b3:92:30:46:f7:f5:2f:74:cb:
fe:0e:57:0c:88:90:e6:f1:16:5c:3f:35:70:72:ae:
d5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:96:D4:2E:AD:1D:94:1F:77:FE:E5:61:05:13:B8:C2:B0:93:5C:2F
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b5:bd:72:05:00:e4:3b:89:ee:98:b9:71:74:18:c3:d4:19:
c6:94:63:e7:d1:ac:35:1e:81:bb:53:bd:43:14:ef:02:f8:84:
57:a1:c6:91:96:56:57:0b:06:a0:7b:69:46:5d:d9:ba:53:fb:
b4:d1:6a:80:9b:7a:ab:3b:4c:3d:14:c5:13:b9:94:9a:c7:76:
85:18:f9:c0:d2:57:ee:a1:3a:e3:50:66:7e:a0:4a:88:ba:09:
31:45:5c:44:c4:1f:fb:a2:5b:45:c7:2a:b4:02:6d:71:be:ad:
34:e6:3a:4a:8d:b2:02:a2:6b:14:35:35:a3:e5:4e:bd:0a:d8:
74:f4:d0:16:f8:a3:44:71:d7:a3:c8:91:8e:e1:9d:67:46:31:
93:55:21:06:d5:ee:4e:9e:6f:d1:3c:2e:c7:e9:3b:43:cd:9e:
5c:9a:47:54:46:d5:71:d7:13:6d:e6:67:a5:de:c3:9c:87:0e:
78:54:93:a3:6c:53:6b:0b:87:a0:2e:39:a4:07:ba:14:a7:2a:
32:45:96:92:31:6b:2f:ac:18:d1:48:a5:5c:95:0b:3b:42:95:
56:58:c2:78:ac:22:d6:0e:9f:11:5c:b4:9c:24:64:4c:cc:03:
90:78:af:15:81:00:4b:b5:f6:d7:d7:04:98:50:08:31:d1:7c:
34:8f:d3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:42 2025 by rpki-client