Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: 8Ne+k9T78Z8vKUPkAbvWFq5uAZ5Hdm8q2R9t0+H9viE=
Subject key identifier: C3:23:C8:D5:27:E9:52:A2:B9:92:1A:FF:7A:37:31:4E:72:F9:6F:6A
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 0199FEB4FC17A5225D8C4EE619E0C44F5281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 0518
Signing time: Sun 19 Oct 2025 23:01:37 +0000
Manifest this update: Sun 19 Oct 2025 23:01:37 +0000
Manifest next update: Mon 20 Oct 2025 23:01:37 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: kE59URqkhDIVq7R7DVhavml4ItFWUCVbKqg55z+K6HM=)
2: R82wyiQ6WGXDZ2qmyfic2Rx16EQ.roa (hash: q3ADHp8TbEdc9vO2jFfoJST4ALm7hMCr9dPnLoGdV9o=)
3: msFkodHiiLA7yYTUvQfg1svzo58.roa (hash: 8maRWfYNuUoSqjA1l1zPbJ9FPRTfD/7OAF7wZnEEN9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:fc:17:a5:22:5d:8c:4e:e6:19:e0:c4:4f:52:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Oct 19 23:01:37 2025 GMT
Not After : Oct 20 23:01:37 2025 GMT
Subject: CN=c323c8d527e952a2b9921aff7a37314e72f96f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:71:e8:88:30:c5:95:f5:60:58:cc:1b:fb:
30:47:ed:45:ea:7f:a4:10:13:04:9b:71:9f:85:cc:
84:d1:14:bc:57:dc:59:35:56:25:8d:75:ca:6f:ec:
ae:c2:d4:84:d9:42:d3:d8:c7:f9:d1:fd:6a:0b:95:
2f:23:8a:b0:8b:4a:ba:7d:1e:e6:eb:16:02:4a:3a:
7c:93:18:f5:22:ef:22:b2:56:b4:cd:bc:3c:27:71:
48:8a:60:a5:5f:c5:77:02:fe:80:ac:2b:44:ad:15:
0f:86:76:ab:d1:48:b8:c7:54:c9:8a:2e:61:5c:e4:
61:85:e8:f9:f5:5a:ff:30:d1:f3:ea:b4:5f:91:97:
06:52:ac:47:51:1d:59:ae:92:60:c7:06:4e:a2:f7:
d6:ff:2a:96:73:e3:29:35:ab:7a:01:dc:a7:06:96:
8c:2f:39:17:11:55:ca:09:52:d2:39:df:43:c9:7a:
78:fc:92:ed:1f:5d:5c:4f:55:0c:dd:37:fd:72:9c:
a1:09:f5:96:3c:ba:90:09:61:d6:87:bc:46:55:d7:
cc:e7:05:13:63:a2:b5:ad:78:45:da:cd:a7:a2:1c:
57:95:43:2e:76:a2:25:44:0a:b4:eb:36:88:88:5c:
fd:6f:74:56:85:35:81:9e:6f:40:1d:4c:06:c8:24:
53:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:23:C8:D5:27:E9:52:A2:B9:92:1A:FF:7A:37:31:4E:72:F9:6F:6A
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8e:94:88:57:36:ac:b5:c3:5f:e8:2b:6c:44:7c:90:37:1a:
f3:02:69:99:60:05:ac:19:68:02:f7:b4:94:cc:29:6d:f1:b0:
5d:5e:8f:d4:39:26:57:27:1e:4d:0b:00:6e:e7:0e:f7:1d:a4:
ed:0e:4a:a0:78:24:6e:a6:ac:57:f0:ca:fd:12:96:a3:15:ff:
d3:cd:6a:88:92:5c:27:7d:50:a4:1a:3d:e5:71:e6:3c:d1:df:
2f:7c:fa:03:d6:88:fe:02:c0:25:c6:4f:f8:a2:3f:6b:0c:15:
36:a7:86:42:d0:90:9c:65:ad:b0:43:d6:b7:4e:2c:21:22:1c:
9b:62:63:e7:84:bc:a9:1e:1b:60:d7:f9:4a:c3:59:32:21:48:
66:70:60:cc:02:1f:9d:fc:13:01:73:db:08:74:cf:48:c9:87:
52:96:49:5b:c4:27:35:4c:85:f5:e8:07:2c:31:b2:37:84:ad:
7a:06:42:3f:d9:85:d3:73:fe:cf:c9:24:64:34:e8:f3:4e:e6:
34:73:57:3d:9f:8d:78:1c:af:1c:9c:6e:b9:bd:0a:2b:1f:f0:
dc:73:a4:ae:58:d8:31:97:81:14:19:fe:fc:39:3e:ac:29:2e:
8b:d8:c6:46:ad:b9:88:f8:f1:ca:e6:9c:ed:86:9b:87:71:ac:
64:1b:b6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:10:52 2025 by rpki-client