Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: PGkKGX7YLFW2nAL/WIEx/O4XSOQI9W+vHYYhh+ryfjc=
Subject key identifier: D0:F2:E3:71:21:D5:AF:1D:32:D2:1A:01:E6:9E:EE:3D:2F:FC:03:AC
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 0199FBEAE4C61C4AF5C03C084282F28C5D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 0BEF
Signing time: Sun 19 Oct 2025 10:01:39 +0000
Manifest this update: Sun 19 Oct 2025 10:01:39 +0000
Manifest next update: Mon 20 Oct 2025 10:01:39 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: UmhrRVN86B8NsofcBbIw8qY7/FnhZfnaHS3YS0POloQ=)
2: 4NcSUJ4Kg8dewIwP8RGgWPLVsGw.roa (hash: NfguGRutDpTl33g3TT2hnx9Rfi2f9fnIaQJYs24UAYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e4:c6:1c:4a:f5:c0:3c:08:42:82:f2:8c:5d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: Oct 19 10:01:39 2025 GMT
Not After : Oct 20 10:01:39 2025 GMT
Subject: CN=d0f2e37121d5af1d32d21a01e69eee3d2ffc03ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:34:5a:f5:5e:ba:d6:df:74:ea:50:ab:c8:
ca:ee:8a:93:0d:96:ec:cc:63:2f:6f:50:6d:e6:d3:
00:22:f4:b9:81:d8:e1:23:c6:bc:a1:b7:d4:5e:2d:
98:6d:cc:a7:73:43:33:af:cd:52:12:7a:92:ef:3a:
59:fb:91:af:23:75:ea:4c:2a:40:b8:f7:b1:e7:f8:
e2:2c:0f:2d:3b:96:61:0b:b1:3d:e8:7b:b4:51:08:
40:64:b2:9f:e8:3b:d5:a9:e6:b2:88:06:5b:eb:05:
61:9d:9c:44:0a:46:a8:c2:0c:3c:f8:06:1e:ed:48:
29:22:c2:bb:dd:7d:c6:4c:f5:2b:28:ae:90:74:07:
10:39:07:bc:3e:2c:34:0a:b1:81:28:f1:07:2b:08:
88:9e:52:c7:e8:fa:5c:bb:c9:6d:76:c3:52:ba:b7:
4a:ae:77:12:0f:99:ef:0b:ea:60:7d:b8:25:54:2c:
52:69:94:68:7e:84:ee:fe:e5:9b:1b:60:d3:9a:1b:
80:b9:85:47:d8:54:cb:29:c9:7c:f9:b7:2f:f3:0e:
b1:d8:a8:21:3c:d0:ca:f9:15:73:b4:97:d2:a4:d0:
82:bc:bb:95:d8:22:60:ac:df:72:51:68:fd:97:c2:
da:02:29:85:64:8f:c3:58:c7:32:80:2e:cc:e7:dd:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F2:E3:71:21:D5:AF:1D:32:D2:1A:01:E6:9E:EE:3D:2F:FC:03:AC
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bf:ed:5a:d3:23:f2:28:d7:d2:a2:bc:06:5f:d5:a5:f5:ba:
11:72:ee:e6:f9:fb:92:10:e0:6d:28:d6:25:36:0a:1b:a4:8f:
d5:10:fc:aa:36:98:b0:f0:90:42:f8:8a:bd:32:04:a9:38:b4:
ac:f9:a4:38:16:20:a9:c6:75:69:fa:9b:79:17:4b:02:03:55:
8a:df:a6:5f:fb:55:08:dc:20:41:2e:ac:e5:94:0f:86:5b:81:
13:24:4b:6e:c8:1d:35:cd:60:61:a7:7d:95:31:32:0a:1e:1b:
7c:c2:01:01:bf:fb:f3:1c:96:9e:af:8e:c9:de:1c:8d:8c:4a:
4c:a0:14:be:31:eb:1f:2f:93:7d:b2:47:6b:24:44:35:6e:30:
b3:49:d4:fa:f7:f0:d9:0a:e8:4c:ac:83:41:25:8c:c0:3e:43:
57:08:26:55:4d:08:68:48:e2:3e:9f:16:71:f4:6b:3b:a7:be:
f6:fc:b6:65:3a:0a:f7:50:48:e2:f2:af:21:cf:77:15:09:f9:
25:12:2c:1d:df:fc:48:93:50:e5:ea:82:9d:6e:d7:83:d7:ec:
0a:fb:b3:fe:f5:e3:3a:32:25:f6:a6:c5:42:75:29:d8:77:2c:
91:65:b6:85:6e:39:57:ad:cf:ca:e6:a7:d4:13:4f:d2:99:2a:
da:00:57:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:41 2025 by rpki-client