Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: eGVMDfsz34oCbvdU2F82MPeyefavLZB9NTVYMa8uJrQ=
Subject key identifier: CF:DF:00:1B:96:7D:C1:F7:5D:DA:D8:EB:4A:94:53:D9:C5:03:C9:D4
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 0199FC8FA9A164525129B57BAC77520C2DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 0D70
Signing time: Sun 19 Oct 2025 13:01:37 +0000
Manifest this update: Sun 19 Oct 2025 13:01:37 +0000
Manifest next update: Mon 20 Oct 2025 13:01:37 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: ZRQDqip6v+ZIX8vTyOb5NVHMuL60PuC3wM/trD5QuWU=)
2: prKzcOdb2gq7whbRtn2j18st210.roa (hash: TLxvtHMzXY4Lge96VJalh1cOFoXVbLd9V2/rCUHRN3g=)
3: zxXrJCgqT81AO-d4vpKnqCQPEGE.roa (hash: WugT5zcayhMYDSTA/kF2PldTCBDPYZiQht5Wqh3j65Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a9:a1:64:52:51:29:b5:7b:ac:77:52:0c:2d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Oct 19 13:01:37 2025 GMT
Not After : Oct 20 13:01:37 2025 GMT
Subject: CN=cfdf001b967dc1f75ddad8eb4a9453d9c503c9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:16:00:cb:26:55:7b:11:51:b6:3f:30:10:3b:
e0:f0:97:44:72:05:54:18:9b:d8:d0:d9:6e:97:7a:
6a:01:50:d6:26:24:ff:c2:b8:ea:bb:ba:2a:34:cf:
88:36:17:c4:c0:c8:30:01:38:08:aa:d0:c9:00:e4:
27:90:bc:e7:f9:26:55:20:a1:dd:d2:2c:8a:35:94:
96:db:39:c1:0d:ce:a7:78:8c:b1:a2:df:b5:6d:b8:
23:83:44:52:95:ba:5d:70:c3:e8:29:14:a1:62:fe:
cd:74:88:eb:fc:ef:16:91:3e:f4:b9:02:0f:60:58:
d6:03:4d:f6:ec:15:a8:a7:8d:67:36:06:8e:83:11:
cd:fe:af:30:e9:d8:0f:00:20:1b:a9:1c:f6:f0:67:
47:98:0c:a0:68:2c:e3:c1:51:28:2e:62:a2:f5:68:
6d:d2:d6:84:2a:f3:59:dc:7e:bc:f3:03:8a:2f:d4:
78:af:9b:48:d4:81:a4:3c:fe:ac:0d:26:3e:96:c0:
af:66:68:ce:b5:d8:d4:ec:54:da:a6:8b:17:f5:c8:
ba:6b:9a:f2:b0:f8:77:9c:f6:b3:6c:c7:7a:d0:b2:
ee:db:80:ca:51:13:a8:d7:4f:5e:09:3c:aa:23:a7:
ad:76:76:4c:25:ee:b8:2d:f3:f1:db:de:8d:23:01:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DF:00:1B:96:7D:C1:F7:5D:DA:D8:EB:4A:94:53:D9:C5:03:C9:D4
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6d:04:30:04:b7:4b:5a:03:da:d4:11:71:00:4f:1c:45:36:
a9:7a:96:5b:30:ea:32:1c:bb:3c:99:3b:8d:01:e7:25:08:ec:
25:30:d7:0a:47:d0:b8:be:6c:7e:af:85:c8:c1:97:fd:9c:04:
03:73:16:13:cf:c4:b3:77:9e:92:60:aa:52:25:15:d2:26:5b:
4c:fe:c5:30:d3:3e:28:9b:f4:66:32:73:4d:2a:a3:56:5d:be:
80:0d:04:44:26:cc:40:26:37:67:f5:38:66:36:88:2e:71:d8:
64:a9:67:65:63:09:b7:d0:a4:6e:38:17:68:db:83:2d:67:48:
ff:8f:8d:45:2f:0e:be:ec:34:22:ba:37:54:45:e9:c9:43:52:
5a:0b:3f:67:a2:c8:10:fb:4e:ee:c2:ae:93:22:e7:af:99:51:
e0:da:b2:f0:5c:6a:f0:99:fb:fb:70:81:5e:dd:cd:87:a8:6c:
dc:46:14:a3:e4:ba:f1:0c:b8:b0:71:2e:fe:62:8e:83:b1:70:
6c:cc:09:36:7f:22:d6:87:bf:10:06:aa:8d:46:f3:cc:1e:6c:
f5:c7:a2:a0:44:2c:3d:1d:72:05:3b:2e:46:a1:43:64:74:f5:
d1:fa:fa:8c:84:94:fd:22:b3:b6:46:c5:f7:78:47:f2:ed:a9:
6c:99:b5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:51 2025 by rpki-client