Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: u4ggfYlhWSqxak4KxD6QDizlyd3s3SVJDIuJZGa8W8s=
Subject key identifier: E0:F7:65:CE:21:2B:71:A5:80:98:8D:80:1C:80:CB:B8:A6:87:9D:B9
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 019A03D9EF0100FDC1379D28A071001CAE37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 0FA2
Signing time: Mon 20 Oct 2025 23:00:05 +0000
Manifest this update: Mon 20 Oct 2025 23:00:05 +0000
Manifest next update: Tue 21 Oct 2025 23:00:05 +0000
Files and hashes: 1: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: av2zcIug6kyToaTFqTB5dynlNAtLtfmLHjkYgpRmwW0=)
2: fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa (hash: le+dLHnCy+Cz7KtAkD9h+I9evtnw4iklRaF6GSYCuDI=)
3: zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa (hash: J1U+yahxYD0pmAirQjo+cOhpxuPTsvVXdeiXTgQsbo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:d9:ef:01:00:fd:c1:37:9d:28:a0:71:00:1c:ae:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Oct 20 23:00:05 2025 GMT
Not After : Oct 21 23:00:05 2025 GMT
Subject: CN=e0f765ce212b71a580988d801c80cbb8a6879db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:87:95:14:5a:54:83:03:e3:d7:b9:3c:be:
ba:5f:81:68:f5:fd:de:b6:85:0e:4a:e5:9a:d3:e7:
73:61:78:2b:d4:15:de:96:73:18:39:79:f4:db:c3:
6b:b8:f3:28:09:2d:26:b9:73:90:d9:a3:e0:51:95:
9c:fc:35:ca:cf:20:22:ed:4b:9d:f5:cd:30:f8:18:
32:9b:bd:61:ab:cf:d8:b8:c9:39:23:ee:af:0e:e7:
f5:8f:fb:50:dd:02:6e:97:a1:53:9e:03:2e:73:62:
b3:95:c9:02:29:c9:b5:44:d0:78:7f:75:c4:b8:0e:
f2:2b:3e:26:7a:37:1a:48:66:ac:01:62:4d:41:38:
12:4a:d1:bd:2b:ce:c4:43:f0:fc:a8:f5:ee:42:9f:
eb:46:f9:2a:37:86:21:68:92:8b:b0:30:0c:0b:f5:
88:e7:7f:6c:56:5a:ee:51:82:de:6c:00:12:b8:e7:
07:f6:9c:a3:3b:db:fb:a5:0f:37:2c:d8:6f:1c:75:
ec:5d:c1:eb:8f:c7:ed:b4:62:95:36:8f:6e:00:0c:
a5:c1:30:20:8f:98:13:44:55:7f:21:77:cb:01:a0:
3a:9c:4c:9c:10:55:1b:52:11:18:73:b3:9f:d0:e6:
33:2a:e0:10:63:06:93:1d:38:94:ec:5c:d8:1a:f6:
97:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F7:65:CE:21:2B:71:A5:80:98:8D:80:1C:80:CB:B8:A6:87:9D:B9
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:9e:56:17:ce:fb:54:a7:f6:ce:f2:32:64:91:03:91:de:04:
3b:94:3f:20:18:4f:6f:4a:f8:34:79:60:6c:18:c7:14:7c:b2:
a2:30:b9:36:69:b8:03:66:19:e9:66:50:31:36:12:be:93:ea:
0c:a9:61:63:4c:cf:05:ac:0c:18:ad:61:bd:c6:27:42:60:f9:
e9:90:3b:90:09:bc:99:dd:d5:03:92:27:66:2b:4a:01:c8:bc:
0c:93:31:bc:df:55:90:af:c0:47:94:8d:90:75:5e:61:db:cc:
80:7c:02:04:1b:63:c7:ae:81:71:7f:77:2d:2c:1b:89:86:e0:
6b:b7:09:e1:29:75:40:f7:7c:60:25:12:21:ef:fe:b1:ce:06:
a6:f9:8a:40:23:19:75:27:f1:e0:fd:86:42:10:96:ba:7d:6c:
41:88:2c:15:25:15:2d:7c:48:c1:54:7f:0d:a2:de:41:cf:94:
2e:cc:e0:dc:42:96:b4:67:72:90:f7:85:0a:b2:6d:46:da:f8:
70:a9:e0:20:14:e7:58:f5:23:a1:d6:be:eb:16:d2:5f:38:86:
d8:ad:cb:54:38:e9:e3:57:bd:63:0a:e4:90:b5:ee:bf:6d:cb:
7b:f3:fc:18:86:4b:a1:59:96:ae:7e:f9:85:cd:fe:f4:a5:2f:
a8:e7:c1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:26:34 2025 by rpki-client