Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json)
Hash identifier: tS7GqPp8HD2ejPiGVrpSTBXELn2NYnn2+yxknYb/I1U=
Subject key identifier: EC:CC:B4:0E:96:94:3C:38:A6:50:94:20:3B:E8:29:6F:15:01:F1:07
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial: 0199FB7CA93A0E00D53B2F15895E9BFCD9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 08:01:14 +0000
Manifest this update: Sun 19 Oct 2025 08:01:14 +0000
Manifest next update: Mon 20 Oct 2025 08:01:14 +0000
Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: I9R+YeGK3Hmo7/xDe1CXPPbR7dl4ulqPeUAASS9NhCQ=)
2: urKpUlRihT17e4-sYhWpyMcE8Ac.roa (hash: OKr8BwUnDAnQRh/fja/ALDyKIeKec2Yi0x2apcZhAec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a9:3a:0e:00:d5:3b:2f:15:89:5e:9b:fc:d9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Validity
Not Before: Oct 19 08:01:14 2025 GMT
Not After : Oct 20 08:01:14 2025 GMT
Subject: CN=ecccb40e96943c38a65094203be8296f1501f107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:ec:72:bc:6b:43:b3:2d:bb:42:19:d1:d5:
70:32:d3:d9:21:ee:ea:3a:a5:cb:8e:51:16:fb:cd:
3d:12:cd:09:50:9d:02:e7:ef:bd:ce:ef:12:48:31:
7a:51:89:d8:fe:5e:8a:3c:86:cf:4f:4b:55:6c:f8:
a0:c9:4d:67:91:99:c5:f4:3e:08:d7:f5:46:97:9f:
77:fd:05:32:60:c4:d4:c4:98:b5:82:f2:a3:57:6e:
b7:f1:bc:01:36:89:a5:e8:d0:0b:e2:32:25:a5:fc:
49:21:8b:f1:9c:00:14:d7:02:54:b3:4f:12:e3:0c:
ec:cc:44:ca:5e:f6:08:23:d1:31:a2:eb:9e:5f:80:
4a:3d:16:21:0c:a5:24:3e:35:9a:30:e2:9e:c9:9b:
f2:9e:1e:4d:33:f2:b9:41:7e:0d:f6:99:27:0e:1f:
ab:e9:6d:67:03:41:2b:1a:09:40:f4:fb:25:87:fb:
77:1c:a1:b1:86:81:48:32:ed:1e:ca:b2:59:21:58:
62:c4:cb:95:b8:d3:42:f2:a6:1b:70:48:fc:06:e6:
2b:d7:f4:06:e9:39:17:dc:12:55:32:22:f1:69:94:
64:07:ac:9d:5e:50:cf:cf:9e:1c:2c:e7:88:ae:c7:
b3:29:d1:c8:b7:a0:fe:b7:7c:81:8f:3e:cb:e5:88:
fe:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CC:B4:0E:96:94:3C:38:A6:50:94:20:3B:E8:29:6F:15:01:F1:07
X509v3 Authority Key Identifier:
keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:29:9e:96:0b:c0:f8:14:88:12:82:ff:87:2d:6b:a8:5c:7d:
8d:61:a4:45:80:f2:94:0c:2d:83:3e:bb:78:26:9d:89:6c:bb:
89:e9:ff:0e:7c:b2:bd:18:34:9c:5c:d2:db:3f:5f:79:c7:c2:
07:4c:72:da:5d:3e:76:c4:11:de:54:8d:c4:39:a2:ba:a9:22:
f2:ba:57:8d:4d:7a:71:3d:d6:1f:49:c8:94:b8:7b:ea:d5:30:
c4:e8:3c:cb:a1:62:a8:a1:21:1d:be:09:59:3f:5c:94:c4:0c:
aa:a2:58:97:aa:dd:cc:4b:92:bc:4b:71:ab:ac:1c:ba:cb:75:
4c:bf:05:6d:e0:d9:14:e7:29:b0:01:8b:42:67:10:30:37:ef:
7a:d6:ed:86:e2:0c:7b:32:0b:fb:90:05:a8:b9:d9:61:95:fb:
7d:01:48:be:aa:c7:96:48:41:63:41:ac:06:f2:af:1d:e7:6b:
0e:f9:02:d6:2d:7f:eb:c2:c9:77:45:3d:1f:e1:c2:c1:d0:5f:
13:62:3e:c3:62:e8:9a:d4:db:8f:b9:c4:ec:7e:20:d4:91:2e:
b7:20:99:67:43:43:ce:3e:1d:3f:5b:64:25:89:52:5c:af:fe:
aa:aa:cc:a8:31:71:e4:45:ea:66:8c:61:92:58:9f:87:f0:bc:
38:a0:e5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:08 2025 by rpki-client