Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier: d3Qy4cgHkrRo18wKMes6uFFVcKkUokRy2wVKSdsWPHk=
Subject key identifier: E5:67:8D:E4:0A:AD:61:FB:DA:6A:E6:F6:2D:1C:22:32:BA:30:C1:DB
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 0199FBEB9B6BEE9E91982FFBC5B25892E79C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number: 0CDE
Signing time: Sun 19 Oct 2025 10:02:25 +0000
Manifest this update: Sun 19 Oct 2025 10:02:25 +0000
Manifest next update: Mon 20 Oct 2025 10:02:25 +0000
Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: Hwj7FVgnKtZJuNi1dQsgvyoAam9LvQ8+qUIJVGjpJ9E=)
2: XaWBl1pdgCEAOtWYlDnABozWGpY.roa (hash: NkTYxkGxoFs3l9oUz9ZXBu6um1xVsgaeI44+mBnF24s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:9b:6b:ee:9e:91:98:2f:fb:c5:b2:58:92:e7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: Oct 19 10:02:25 2025 GMT
Not After : Oct 20 10:02:25 2025 GMT
Subject: CN=e5678de40aad61fbda6ae6f62d1c2232ba30c1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:1b:09:30:1f:33:76:fd:81:78:67:d5:9a:
ce:2b:14:4c:83:39:10:63:dd:64:e6:db:90:44:19:
19:3a:b9:bc:3f:32:8e:13:89:c7:7e:ba:db:2b:2c:
8f:c9:f6:d9:68:b3:4e:dc:51:98:5e:cd:4e:8e:40:
32:e3:f9:74:1f:f2:58:1c:27:a5:3b:57:d7:95:c9:
51:14:eb:b3:f8:61:30:a1:1a:c1:45:a8:83:81:82:
0e:29:f4:90:4d:88:9c:45:56:ce:b6:98:46:90:bb:
5c:ff:50:97:78:db:26:27:33:07:fd:a7:c3:80:c7:
6f:1c:73:b2:7a:07:66:de:ad:ea:ac:3c:eb:ea:01:
73:f6:91:b6:e2:aa:2a:f5:97:0d:0d:00:e9:0e:b6:
05:f0:93:3f:5a:1f:dc:8e:4c:39:8b:a7:6f:6b:da:
2c:dd:aa:1a:a2:d2:7e:f1:cc:a1:33:60:db:2b:df:
55:0b:f1:c8:be:97:e1:26:01:c4:b8:d8:a1:62:fd:
4d:2e:d4:88:3a:9a:73:5b:79:2e:20:6d:45:af:9a:
ec:07:3b:97:fc:22:6a:1e:d8:60:7b:66:f5:cb:1c:
89:4d:8f:a1:17:1f:c1:2a:50:28:12:c9:40:d6:b9:
b3:cf:88:07:93:8d:be:f5:15:26:42:90:55:be:00:
2d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:67:8D:E4:0A:AD:61:FB:DA:6A:E6:F6:2D:1C:22:32:BA:30:C1:DB
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6a:69:41:30:0d:ae:16:43:b4:2b:af:6b:c1:e5:a7:13:a4:
f8:b1:60:e3:b1:b8:fa:59:ca:c6:73:aa:9a:2a:be:43:90:b0:
da:c0:02:a9:58:f7:93:00:65:3f:d6:3e:43:4e:c0:24:33:7c:
57:13:54:c0:a7:ed:96:6e:37:ab:21:59:13:32:1d:30:b3:06:
1d:df:2b:b9:a1:e0:00:e8:fd:33:95:12:9d:47:32:7b:0b:07:
8e:f7:7c:13:e3:12:55:99:fa:01:c9:3c:06:dc:95:09:93:cb:
fa:a5:27:f2:98:e0:dc:b2:c5:7d:d2:b6:41:9b:41:b0:09:bf:
ad:cd:6b:aa:6c:ba:81:34:90:a6:df:f2:7b:0a:64:e7:ca:a0:
bf:45:a3:db:6c:8e:fb:d3:ac:60:aa:7a:ff:81:2b:c3:95:4e:
43:e4:16:79:c9:68:55:c7:25:df:64:b4:e0:b9:d5:9e:bd:bf:
3c:e8:f6:11:5b:aa:ba:6e:95:23:86:13:9c:02:a5:3b:5a:fc:
42:e5:24:e0:3f:88:9f:aa:f1:52:d1:ae:99:0b:8e:b6:d1:81:
a3:1d:8d:ee:bf:44:e8:a8:87:cd:67:9a:13:d9:83:b8:ca:c6:
23:b7:77:0a:b4:ef:b8:63:31:0d:2d:95:b1:ef:4f:bf:5e:10:
8f:f1:94:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:23 2025 by rpki-client