Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
File: 3AOqmk_p1gxc-FOpJIIiafHMdFI.mft (raw, json)
Hash identifier: tqLPZBL0xI/P6OG9DEBAZucyfBihrLd1FxUjcW/PSxg=
Subject key identifier: 3E:00:8F:E4:5C:6E:65:82:74:0F:4F:2F:3E:53:36:4D:8E:D8:98:57
Authority key identifier: DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
Certificate issuer: /CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Certificate serial: 0199FAD7D74E83C4B3689AA6A1FF458E16BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
Manifest number: 0C8D
Signing time: Sun 19 Oct 2025 05:01:13 +0000
Manifest this update: Sun 19 Oct 2025 05:01:13 +0000
Manifest next update: Mon 20 Oct 2025 05:01:13 +0000
Files and hashes: 1: 3AOqmk_p1gxc-FOpJIIiafHMdFI.crl (hash: rzHxReC9aLtACmsskYDmTl4W1VSQM2wyPH1O0DfrHxg=)
2: qHsLN52OLV40PkdsNg1LTDhrI1k.roa (hash: o2jlcmcZCFuQ0+N7Kss7ufNJs+2izJmB43Pkb+WDd2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:d7:4e:83:c4:b3:68:9a:a6:a1:ff:45:8e:16:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Validity
Not Before: Oct 19 05:01:13 2025 GMT
Not After : Oct 20 05:01:13 2025 GMT
Subject: CN=3e008fe45c6e6582740f4f2f3e53364d8ed89857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:97:82:e1:10:dc:21:cb:97:f0:47:57:e4:
a0:7a:09:17:e3:c2:3d:ea:8a:04:c7:83:33:53:bf:
95:2f:5c:05:31:ae:9a:a4:0c:d2:0c:24:69:85:c9:
12:92:6f:47:2b:e7:61:d0:72:e4:39:da:ff:11:df:
28:59:6e:1e:0d:e6:98:a6:d7:07:ce:0c:2e:5a:5f:
d9:42:c8:f4:c9:31:7f:6f:49:9e:2c:3f:58:36:72:
b3:e4:dd:71:53:f9:b2:fc:29:e0:1c:ba:11:18:fe:
30:79:2a:48:00:74:a4:6b:42:ad:32:b9:21:88:cf:
c0:50:7a:30:5c:fc:e7:db:b8:80:f2:9c:b9:14:6b:
a4:2c:b2:b1:d4:dd:7f:62:56:f4:8a:f7:ae:a1:aa:
c3:c3:58:c9:b8:8f:2d:05:62:ec:be:a4:2e:dc:84:
0d:b2:0f:e5:68:44:3b:2e:c0:c9:55:82:50:e6:ae:
82:87:3e:7b:b1:c9:4e:43:d2:fa:01:4b:65:48:fb:
52:c7:6b:2a:da:40:5d:18:43:75:ad:85:a2:25:5d:
15:fb:7f:ce:7f:d3:10:dd:2b:26:26:36:43:1a:d1:
a8:92:84:85:e0:d6:42:61:cc:4d:8a:90:89:c0:d8:
48:74:af:dd:4a:c2:7d:ef:ee:32:9e:60:93:f0:ba:
41:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:00:8F:E4:5C:6E:65:82:74:0F:4F:2F:3E:53:36:4D:8E:D8:98:57
X509v3 Authority Key Identifier:
keyid:DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2f:76:86:8b:5c:3e:37:1c:45:6f:bb:4d:55:2a:37:88:ce:
13:ec:2b:e2:8d:0a:c7:ee:f9:80:dc:0e:8f:26:5f:74:26:d1:
13:b3:4f:db:d0:2e:d8:bc:b9:29:d6:ba:e0:b5:37:6f:95:70:
95:1a:9e:36:a2:bc:21:7f:cd:05:33:d1:70:bb:ef:0e:6a:ae:
43:e6:79:61:f4:c5:4c:2a:b6:0c:d5:85:78:bb:99:95:14:f5:
1b:69:38:a6:e1:1c:ed:87:06:9d:88:6e:86:ec:2b:0c:51:16:
a7:7e:be:3c:44:96:d1:31:7b:47:c7:5e:2e:54:4d:e7:b6:a7:
fa:80:55:78:b0:7c:90:74:52:d5:8c:d9:9d:25:05:26:bd:65:
34:f0:06:da:eb:91:cf:60:c9:2d:01:2a:74:e8:84:b3:48:a5:
46:64:e4:45:50:e3:8d:b0:6b:ba:ec:0b:ae:dc:cd:2c:eb:e0:
90:ab:6d:66:6b:a3:80:64:06:08:c4:89:c5:1f:c7:31:85:71:
29:82:c4:ee:4e:74:3f:c2:e9:9a:36:4a:80:60:fc:c3:08:5f:
55:3e:36:56:d0:af:a1:50:fc:71:9c:11:23:cf:61:43:a5:4c:
c5:34:a1:6b:65:a0:7f:a9:c2:b0:a8:d4:fd:76:ab:04:4a:e4:
84:7b:3f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:53:59 2025 by rpki-client