Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
File: PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft (raw, json)
Hash identifier: jbmCPa/bHJfDk9ruT8uh8VsOC+nAJ+yJF93GXGiZrms=
Subject key identifier: 3C:17:F4:4E:08:48:FE:7E:E4:04:EE:68:3A:A5:52:10:F3:81:1C:72
Authority key identifier: 3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
Certificate issuer: /CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Certificate serial: 0199FBEB416A032A0D83E01408C58D83E11F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
Manifest number: 105F
Signing time: Sun 19 Oct 2025 10:02:02 +0000
Manifest this update: Sun 19 Oct 2025 10:02:02 +0000
Manifest next update: Mon 20 Oct 2025 10:02:02 +0000
Files and hashes: 1: PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl (hash: xutc7xMJrFe0UaB44RtVG3OA0SQnaB7cUPCR8FbY3LI=)
2: lFB-3tPNMg7_ita4wpHXyFs1Wtg.roa (hash: 2vQA+DCbD+mwH0gGh6uSgSbBtdD3lkqqjcblNuRAAAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:41:6a:03:2a:0d:83:e0:14:08:c5:8d:83:e1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Validity
Not Before: Oct 19 10:02:02 2025 GMT
Not After : Oct 20 10:02:02 2025 GMT
Subject: CN=3c17f44e0848fe7ee404ee683aa55210f3811c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:c1:a8:c6:78:28:fe:94:58:04:74:70:1e:
37:4c:09:cf:f5:4b:f8:31:5e:79:5d:90:f8:b6:ec:
de:3c:2f:3a:8f:42:c4:8f:1e:77:22:db:77:56:29:
bf:6d:9e:93:b6:44:02:75:8c:f2:56:a7:dd:a4:1d:
84:e6:f4:26:59:92:89:a4:a6:d9:dd:45:2c:2a:ee:
58:1f:1c:af:9b:6e:53:79:b3:fb:36:0d:17:88:6e:
8f:4f:64:4c:80:be:40:86:bd:50:8a:da:ab:b9:9e:
e0:ae:03:be:74:77:85:8f:18:67:76:73:d7:50:55:
da:c4:03:75:e9:67:9a:27:8a:f7:ac:ab:32:8e:22:
aa:40:84:94:23:e2:32:98:bb:a4:3f:57:88:4f:76:
ae:d4:67:3c:bb:4e:a5:79:60:67:6b:55:ed:c1:c4:
d2:bf:b5:9f:e0:56:3c:be:22:06:20:66:95:1a:f4:
1e:df:8e:b5:9e:0a:c7:16:f1:54:36:76:04:15:8c:
bb:9a:de:06:aa:cd:60:09:ec:6d:89:77:83:58:a0:
a0:21:1f:b8:7a:0a:18:fc:14:a8:4d:6e:26:60:e7:
2f:b4:9f:08:60:ae:78:83:db:c5:a7:c8:15:c1:14:
a8:12:f3:28:66:7f:4c:05:4f:ad:f6:c4:e9:b5:09:
c9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:17:F4:4E:08:48:FE:7E:E4:04:EE:68:3A:A5:52:10:F3:81:1C:72
X509v3 Authority Key Identifier:
keyid:3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:52:c9:f9:9b:18:de:8f:73:a5:41:a1:52:7d:13:43:01:fd:
99:e7:7d:4e:54:44:76:38:db:31:94:44:3f:17:40:c8:4b:52:
73:89:a8:b7:e0:af:89:b3:9d:c4:a1:e2:36:3f:e0:4e:6d:a7:
58:39:fb:7e:a7:e9:9b:ee:80:a7:01:e5:a0:5b:97:2c:29:88:
66:ca:1e:97:ce:10:39:14:7d:a8:80:2f:65:0f:bc:b5:8a:78:
12:26:b1:85:91:56:77:06:ad:77:70:89:f9:c8:5b:4f:62:ee:
f4:07:7a:c5:7e:f9:21:c9:e0:4a:11:7a:0d:40:b7:1e:7f:54:
57:ff:0f:6a:6e:f7:7e:73:fa:c4:19:46:09:ba:ac:19:87:69:
a0:de:07:d3:d7:d3:7e:a1:f7:1b:3a:9f:6e:9f:78:57:e9:9e:
5a:60:c2:ad:d2:b8:e2:b1:45:a9:6f:d9:34:d0:6b:db:08:93:
b9:40:5c:a7:e6:bf:8f:88:39:7a:e8:0e:75:40:d9:d8:d5:02:
be:4d:a2:e5:22:83:da:07:e6:11:14:50:63:bf:d9:85:5c:dc:
0d:b1:17:9c:b6:37:9e:ad:b7:82:d0:08:ee:23:77:89:2e:38:
76:c7:89:49:66:91:b1:64:8f:a0:c6:4f:4e:c7:58:d1:a6:34:
48:44:73:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:12 2025 by rpki-client