
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json)
Hash identifier: 8+oCXYKFqGn9GvSJKybHq7WvxmXlcbniPj7u0uNpOGM=
Subject key identifier: ED:28:11:09:28:22:7B:DA:2D:E2:13:84:2D:B9:61:DF:02:24:82:5A
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 0199FD6AD1B1A14DC06E7FAC7BCDE84A4F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
Manifest number: 0DA7
Signing time: Sun 19 Oct 2025 17:01:00 +0000
Manifest this update: Sun 19 Oct 2025 17:01:00 +0000
Manifest next update: Mon 20 Oct 2025 17:01:00 +0000
Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: +xYfOzMBtYzpEyrrNKQ209qUF8b16DoF5TBAwSiHlgo=)
2: 3y9oPhhQ76ajFYxPaGTfj0mGenY.roa (hash: aJMldfOcg7PSjdceOikOWHYMelePcp968D1IHsbQCQs=)
3: Eru4dcnP3AWADVXKAGfzuxLYfJc.roa (hash: qrokzcnnG9HxWIaV9kzA+31DT5BxA/ZSbotCh3hraYc=)
4: Kbhh_-jKSqwyjY9YyEcKOFQSYSE.roa (hash: a+ayqrZ5gSfoloT8KLq9Di5/TpqXgWgvxKNvHS7J0us=)
5: Tz-eGTasLTxJaRB_AyMo0GbjCYY.roa (hash: y/BDSOiRtRFchkB8Upvuvb+MNs6zs82qA1XU7WJzVqs=)
6: n1PdHVenW5fayjdB9KftVERroVM.roa (hash: vk271JDoo1aPMh1SkN6xn//CcT9hk4SqnKTKa0JtzvQ=)
7: njV-GA0Ii5_5OkqbA6b8eDCoFt4.roa (hash: 3zM9PD2sx2obkpcLLLOA9+i/X09CCKUBp/Xzom7yXUE=)
8: zH0GORTR7Uyj1Cp9s_FZC30xG7E.roa (hash: hQY0rZB8ZrQ/2LTg6dzNd2hK2I9T6rcNdp9cuBHVHhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:d1:b1:a1:4d:c0:6e:7f:ac:7b:cd:e8:4a:4f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Oct 19 17:01:00 2025 GMT
Not After : Oct 20 17:01:00 2025 GMT
Subject: CN=ed28110928227bda2de213842db961df0224825a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7b:f2:d5:90:73:cd:cb:65:31:e7:eb:67:b5:
31:59:6e:b4:8a:c7:84:6c:ff:07:c4:2c:9c:bb:4a:
a9:60:5f:b3:4b:40:ad:e3:0b:e8:40:eb:03:98:50:
a5:60:08:b3:d1:57:9b:53:d3:b4:1e:13:16:74:70:
9d:d9:e4:72:c2:2e:1e:30:48:aa:b0:ad:48:76:17:
7c:cd:61:1f:43:c7:b4:d0:49:80:a5:86:2c:4b:8c:
ab:b3:44:fe:e5:7c:d4:b4:a0:fe:d8:ba:ab:2e:28:
63:37:39:14:7f:0d:b1:be:a2:96:d0:52:c6:3f:9c:
3e:93:93:64:dd:d7:b8:9e:c5:f9:06:86:1d:9d:4a:
74:94:90:0e:ae:7c:b2:10:8d:2d:a6:55:2f:7a:b0:
0d:c6:aa:be:3b:7e:2d:5d:1c:b4:4e:d9:48:9f:cd:
f6:ab:eb:72:a4:46:8a:17:72:c1:3e:ee:64:8a:45:
5e:9a:cf:d1:55:2e:42:00:b6:55:08:42:ae:a1:7f:
d4:c1:47:ce:8a:21:7f:73:52:db:65:6f:62:f3:d3:
d9:16:a7:90:ab:89:91:60:aa:83:bb:ef:69:8c:2d:
38:9c:cd:15:3f:e9:5e:ac:39:35:48:e3:c7:09:7e:
80:09:8d:85:9a:c3:c7:66:54:f1:97:fd:8f:3e:8b:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:28:11:09:28:22:7B:DA:2D:E2:13:84:2D:B9:61:DF:02:24:82:5A
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d5:74:bb:94:6a:a1:e6:52:8b:20:7a:e6:2f:04:10:22:a0:
cb:a3:8b:03:6d:60:61:55:c2:80:6f:03:34:76:0e:c5:0a:b6:
c8:1c:6c:36:f1:3c:ca:2a:1c:c9:03:ae:0b:c8:65:3e:6c:e2:
51:79:91:b7:8f:e6:e7:0f:73:95:3d:98:e5:cc:a0:18:29:33:
ea:d1:fc:33:37:a0:6a:6d:74:cc:f0:19:6b:c3:f5:63:66:cf:
4b:45:01:d5:f3:28:10:40:91:f9:8f:71:00:0a:6d:91:ea:24:
c6:04:6d:12:49:0a:9c:e6:9f:06:9b:05:0b:c4:b7:9e:ac:23:
3b:69:79:49:76:64:61:79:1c:59:8c:33:72:b3:7f:d8:fe:6e:
55:e5:e1:dd:29:e6:ef:29:6f:9a:7e:38:dd:63:58:74:3f:e9:
37:a1:6a:94:11:96:b0:03:6d:62:1d:12:9f:96:3e:78:f5:aa:
51:39:66:8a:05:e5:53:76:29:d9:7d:da:04:64:a3:42:a5:5a:
b8:40:ba:f7:05:de:3b:ff:be:2e:3c:14:01:b4:c3:f3:f7:b7:
43:d2:bb:9f:44:67:a3:d3:3e:07:87:8d:ba:0d:c5:5a:6d:37:
a1:72:99:85:97:b1:01:79:72:d2:0d:fb:28:4d:98:f5:e1:c2:
b7:89:ee:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:18:46 2025 by rpki-client