Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json)
Hash identifier: 27yBDjU+qmNcpIckjB5I/aIiYMNB4uf7ots9lzPolY4=
Subject key identifier: 09:0E:39:D7:4C:CD:D7:DD:47:CF:1E:32:16:37:1D:99:19:7E:F8:A2
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial: 0199FBEBA8C8F0A96F0DB8EAC34B124B4DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
Manifest number: 1215
Signing time: Sun 19 Oct 2025 10:02:29 +0000
Manifest this update: Sun 19 Oct 2025 10:02:29 +0000
Manifest next update: Mon 20 Oct 2025 10:02:29 +0000
Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: SqNCcslOI3imutwpn5HM3FOA9qaSCYTDR5zE87pJ0Ak=)
2: p3WBjzteYXQZYIX5zj87ra338og.roa (hash: UdBIIG65TiaVNqypoeNqjZfjwvGuuMkdscTIPnMkAs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a8:c8:f0:a9:6f:0d:b8:ea:c3:4b:12:4b:4d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Validity
Not Before: Oct 19 10:02:29 2025 GMT
Not After : Oct 20 10:02:29 2025 GMT
Subject: CN=090e39d74ccdd7dd47cf1e3216371d99197ef8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:65:44:aa:af:a8:61:44:0b:db:47:09:90:77:
20:88:cf:b2:d3:b7:2c:3a:06:a8:d2:df:92:1c:94:
72:86:34:5b:d4:b5:f0:09:4d:18:09:d8:7a:64:c8:
74:cf:77:47:b8:ba:5c:2d:32:65:01:82:2f:85:bb:
c5:8d:53:00:9f:bc:f1:a8:c4:c5:61:c1:fb:76:f5:
d8:b5:35:dd:b0:de:63:52:57:4c:ba:2f:82:52:5c:
61:57:e5:93:df:a6:e6:7d:d3:50:d2:6c:9f:c0:bb:
c3:6b:20:f6:dd:ed:31:b7:5f:08:f8:fd:c4:66:1d:
27:7c:ff:cf:6b:a0:19:2f:cc:ae:79:31:a1:c4:72:
ac:d3:94:af:65:a3:b2:9f:ef:fb:42:41:26:58:1c:
03:45:22:5a:9d:6f:7b:14:44:37:ba:5e:61:8b:5e:
12:af:47:bc:ce:13:f9:6b:7f:37:87:e6:d7:03:4a:
95:e1:93:17:13:87:ad:9c:56:ca:55:a8:f0:4f:95:
f4:3e:65:01:27:52:0a:74:50:ab:91:15:75:55:6f:
4e:16:2a:1e:b6:0c:15:27:a7:d1:6a:0d:e0:01:52:
e6:e8:dc:7b:ff:30:20:78:89:25:5f:df:0b:1c:5e:
3b:fa:00:db:06:56:f6:42:a3:2c:12:45:c6:22:c7:
25:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0E:39:D7:4C:CD:D7:DD:47:CF:1E:32:16:37:1D:99:19:7E:F8:A2
X509v3 Authority Key Identifier:
keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1d:c8:f5:a5:35:69:45:ca:7b:83:76:86:da:f5:1e:cb:7c:
07:19:df:cc:c8:67:ce:12:b2:9a:e8:d0:d9:20:ac:97:b4:61:
92:e7:36:d0:36:81:85:87:e2:40:db:f1:c5:36:86:97:a2:a2:
09:fa:fb:2a:07:b7:ce:d2:69:6f:20:64:6d:16:2e:68:a8:05:
0e:41:60:22:f7:ef:f3:ac:76:4d:aa:06:ab:f8:ca:43:21:93:
43:dd:2c:77:9a:25:b6:09:74:b7:7c:3c:51:4c:d9:28:64:81:
27:fc:73:90:44:cb:23:ff:ba:a3:59:25:74:01:63:ae:46:ed:
2d:c6:f9:40:e4:15:d6:6b:a2:d6:18:24:12:0b:9d:d5:a5:74:
ba:1a:84:e9:71:59:68:d7:fb:5b:02:85:d3:c5:0d:fe:a0:b2:
f1:d1:c7:38:68:43:16:c3:df:0a:70:81:e7:f6:d9:d1:41:d3:
da:15:87:d2:b0:7e:1a:90:bc:4e:74:5e:7d:c9:a1:ef:68:f5:
e7:e6:d5:35:73:7a:46:2d:8b:47:ad:80:5b:eb:ce:85:9c:e7:
3d:27:b8:51:2b:7c:ba:34:ab:87:2a:4b:05:d6:16:a9:71:4c:
cf:d5:a8:a2:a1:b2:77:d8:91:15:74:d3:f6:d9:a1:0f:fc:59:
46:f2:7d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:04 2025 by rpki-client