Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: SnY0wZLWTVQSfP9gmQMv338Fuq0w5u1tb0gcjpokq/0=
Subject key identifier: 13:39:2B:D8:24:C8:96:E5:64:4C:8C:92:B5:C6:20:2E:77:E1:50:E9
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 0199FB459C531ED10D94626E153A502B1A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 109D
Signing time: Sun 19 Oct 2025 07:01:07 +0000
Manifest this update: Sun 19 Oct 2025 07:01:07 +0000
Manifest next update: Mon 20 Oct 2025 07:01:07 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: KY5Zh0FE89Laf7m2rto/s7IcEzwM3SJJLITGyGCUGEg=)
2: 6f05f7w22zRcUpz28tjM6XCdsYk.roa (hash: kl4KaLs8etslFAKNgVQw6su1C8PWL6O+HJhYp1T4Tak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:9c:53:1e:d1:0d:94:62:6e:15:3a:50:2b:1a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Oct 19 07:01:07 2025 GMT
Not After : Oct 20 07:01:07 2025 GMT
Subject: CN=13392bd824c896e5644c8c92b5c6202e77e150e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:62:89:a8:8f:51:1d:01:47:1f:05:69:ec:3f:
29:65:ca:fd:c9:06:16:88:74:c4:a4:f5:3b:f9:5d:
91:ea:98:53:2a:d8:29:5b:a5:71:72:e5:b1:bf:33:
d5:ca:8a:d6:56:6e:ef:8b:df:bd:11:e1:b0:01:a3:
9c:a9:80:6b:6f:e2:47:9a:66:04:19:23:6a:e3:ab:
55:94:fd:1d:a9:f1:a8:e5:a5:bb:dd:a3:15:90:eb:
4e:56:49:e0:52:32:ca:81:5a:5f:e2:7c:c5:d1:4c:
ab:aa:f4:5b:ba:d0:fc:e9:42:b9:e1:cc:87:dc:49:
1c:5c:e5:df:e6:00:84:b2:c8:85:8f:8a:91:fc:71:
7f:21:4c:dc:8d:ed:99:46:8a:9a:ea:4c:d6:2e:a7:
14:70:8a:dd:51:e3:56:52:ca:50:a2:10:99:89:1e:
eb:66:5c:4c:5d:aa:60:29:82:05:3f:70:4b:a5:90:
df:53:bf:48:d5:2b:dc:43:7c:85:5a:05:9b:2e:0a:
67:66:ee:a1:14:e7:8a:6c:70:54:14:47:7e:f4:28:
06:30:63:c4:70:a3:d5:97:79:8d:80:5d:44:0c:8e:
c4:79:eb:e4:7d:4c:f8:a7:28:6a:3d:d2:b5:83:0a:
6e:5b:92:4d:ff:03:27:94:7d:e1:08:9d:7c:42:dc:
9c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:39:2B:D8:24:C8:96:E5:64:4C:8C:92:B5:C6:20:2E:77:E1:50:E9
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:65:6e:60:4c:b0:7b:8d:7c:92:fd:e7:49:9f:39:06:62:ba:
30:46:d9:a1:01:26:e7:31:41:ed:e3:cb:e4:9d:0f:8b:65:2c:
f8:58:54:e9:64:bd:9c:43:1a:be:23:fa:e7:24:d4:ad:1b:0d:
72:3c:d5:ec:d8:4d:4b:5c:36:dc:29:da:19:28:df:59:9b:f4:
2a:78:83:82:36:77:60:a6:8a:91:60:f2:13:b5:6a:46:85:e5:
63:63:72:bd:1c:5d:bc:56:2b:c6:4e:ae:73:b3:53:0b:8a:83:
5d:98:f8:e3:ac:f5:0e:ae:67:fa:27:a2:4e:5b:f7:4d:05:90:
5e:76:03:e9:9a:09:8d:c5:6c:6e:31:12:1d:a0:d0:b0:49:95:
f5:78:17:f7:cd:c4:00:dd:ea:a6:19:75:28:6f:55:98:f1:23:
ea:ca:e6:03:cd:73:eb:54:bd:c7:53:94:d3:ad:ff:3d:32:6b:
35:bf:b7:ce:96:d2:ec:fc:7c:55:4b:19:06:9b:8b:a3:84:40:
48:7b:ba:f3:b6:f7:80:65:07:0d:eb:6d:50:8c:58:21:7c:a7:
92:90:90:8e:32:ad:bc:9d:a5:40:f4:9d:62:00:24:45:40:19:
71:5a:c1:d7:81:de:44:7f:1b:de:e1:e0:7f:64:5e:09:55:ea:
a9:07:09:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:33 2025 by rpki-client