Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json)
Hash identifier: S/lOO3mxlSa8WdK647nklPZu0Q7TeENyUC+oZFOWAkk=
Subject key identifier: 3E:26:11:AC:40:EC:5D:20:4F:B9:EC:8D:87:8D:FC:B0:0D:61:12:91
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 0199FB4624839B7F8519AC5A815E4E7E4868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 07:01:42 +0000
Manifest this update: Sun 19 Oct 2025 07:01:42 +0000
Manifest next update: Mon 20 Oct 2025 07:01:42 +0000
Files and hashes: 1: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: uP9EdXwZZAcPina10psq/nLRXDKm9VkOFhxH0Rleac4=)
2: I2pncAJfzNdJmYYh59kVF5OSpUs.roa (hash: lHfLeGadLKnQRU2ejGfcyZ67n8h62UJ2WQIx9Gm+axg=)
3: MnzrFfyCM6_m24BkwXpZ_Rso1RQ.roa (hash: XgLOcASonVn7TWXy+ktIGTPZ2UgFdKpsifVTE/uxOB0=)
4: UJU_wGK_nKOpS66Lv-qw5sHx6Yc.roa (hash: DVPLZ7QtHdhq6Tawu/C5Hzz46ZghvtTkOTNBcz5aL5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:24:83:9b:7f:85:19:ac:5a:81:5e:4e:7e:48:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: Oct 19 07:01:42 2025 GMT
Not After : Oct 20 07:01:42 2025 GMT
Subject: CN=3e2611ac40ec5d204fb9ec8d878dfcb00d611291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fd:e2:f9:88:8f:b0:4f:ee:43:67:26:7e:79:
ed:ae:ba:18:d6:23:fa:44:06:d7:93:52:a9:04:8a:
49:aa:da:4d:80:b8:f3:5a:17:cd:83:54:9d:12:74:
45:ce:7f:26:8d:09:9a:99:80:93:9b:81:4f:7b:11:
b8:2e:0f:70:90:f7:47:2e:11:65:15:54:7b:bd:30:
8a:3d:06:bd:8f:bb:61:41:bc:1a:5f:62:37:7b:f2:
b8:5e:9f:68:bf:2b:aa:7e:31:c5:bd:7d:f7:a3:1f:
02:a4:35:06:d7:a8:29:35:2c:89:17:8a:e0:76:6d:
11:c4:38:47:9f:75:02:3e:cd:d8:bc:d2:ee:02:5d:
41:3b:a2:1b:d2:77:6b:f3:80:a6:6e:aa:bc:71:aa:
d6:90:d8:e2:c3:a6:ba:9f:29:88:64:7a:81:c5:6b:
c8:ca:ad:09:7d:fc:b3:6e:c6:bc:da:03:d3:d0:00:
24:0d:4f:bf:e8:d9:34:74:f4:d3:04:0d:15:84:61:
57:ae:9b:28:d8:38:2a:ae:59:a6:e3:87:b2:1e:42:
77:e8:9b:88:90:07:b7:27:a7:16:ba:89:6c:cd:26:
41:f6:b3:3d:47:1c:2a:a5:63:46:90:b1:d3:ed:5f:
32:9d:29:1b:1d:58:93:9b:3a:b2:65:99:36:e0:58:
63:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:26:11:AC:40:EC:5D:20:4F:B9:EC:8D:87:8D:FC:B0:0D:61:12:91
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:27:7f:57:8f:c2:0a:c5:87:eb:77:4f:e3:61:18:f2:7c:0d:
78:71:35:d5:c9:b1:8c:72:63:c1:53:0e:4c:0a:4d:fb:54:d5:
eb:8b:21:96:7a:db:48:e5:51:33:d6:31:00:03:91:66:e6:76:
ff:26:74:13:24:2d:58:d6:f9:ec:69:74:03:04:db:65:ad:eb:
70:f2:6b:b9:fb:f7:73:96:3c:68:40:3a:b2:fc:fc:30:8c:dd:
88:ba:91:bd:f9:1e:44:c8:0c:7b:70:84:76:10:d0:df:3d:cd:
da:8f:d9:4a:a8:3a:bc:66:7f:66:e2:86:3e:4e:ce:de:5b:60:
a5:c4:b9:e8:92:68:e7:40:03:b3:ba:ab:60:da:f2:6c:f8:93:
27:19:a6:b6:ba:7b:0b:b4:e8:e7:d6:1a:59:9b:00:f8:59:fe:
22:79:a8:85:82:0f:75:ed:5a:a6:59:ea:48:eb:b2:33:c9:2f:
4b:a7:ed:91:7a:b4:79:52:a8:1b:b9:fa:97:8b:58:65:a8:75:
8b:69:a0:6d:62:98:83:b3:51:76:f5:f5:79:da:bd:c1:2c:b3:
60:8b:3b:16:d2:3e:c2:76:ab:1b:d8:49:96:bc:65:cf:bc:c9:
6e:22:ee:f3:63:27:a4:9e:01:9f:7a:04:bd:d3:86:b8:f5:50:
9e:9e:32:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:06 2025 by rpki-client