Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
File: 3UftWIupBpRXoqiY_HoMuXfR-B4.mft (raw, json)
Hash identifier: fkcl+m65491v0Lms3KuNvjZNm5oxk/9s1PpNXpJVaks=
Subject key identifier: AB:A1:F8:E1:BC:74:50:2E:9A:07:0E:4C:37:E7:93:F4:DA:7B:49:77
Authority key identifier: DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
Certificate issuer: /CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Certificate serial: 0199FD6B64270C68E996669EA2AC68F032FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 17:01:37 +0000
Manifest this update: Sun 19 Oct 2025 17:01:37 +0000
Manifest next update: Mon 20 Oct 2025 17:01:37 +0000
Files and hashes: 1: 3UftWIupBpRXoqiY_HoMuXfR-B4.crl (hash: m+I5J9rP+2e4aqXMN+IVQL0/KFAIJh6DcrpPUPVleyw=)
2: NjNc1F_noFOuVoizuwyNmIiyikg.roa (hash: IrtAGIN7Mq5Prcg2l/Rn0ppsqJX7JmRhzfI5wRDO3Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:64:27:0c:68:e9:96:66:9e:a2:ac:68:f0:32:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Validity
Not Before: Oct 19 17:01:37 2025 GMT
Not After : Oct 20 17:01:37 2025 GMT
Subject: CN=aba1f8e1bc74502e9a070e4c37e793f4da7b4977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3c:cd:86:56:06:65:46:e3:1f:7f:d3:60:08:
2f:56:fa:9e:77:11:7f:f9:a8:0b:c4:26:6a:53:ef:
9c:5d:95:64:e5:6d:75:4c:0c:7e:df:78:a1:cf:55:
b4:26:05:47:36:74:53:d7:4f:e2:50:ea:ec:6a:05:
5c:84:52:ff:1d:aa:8c:53:00:26:e6:25:d3:a9:1a:
bc:1c:79:17:bc:c0:43:b4:3d:b9:09:ba:6b:17:57:
0e:ea:2e:5c:cc:72:12:ef:83:9a:e9:78:85:f2:ab:
c9:c2:63:e2:6f:1c:16:96:09:2c:67:84:68:20:50:
d6:ad:13:b9:da:43:7c:fe:e3:70:31:fc:15:39:56:
a6:0a:50:85:5b:c6:d3:f2:6b:7d:2b:b0:75:d6:e8:
44:f4:f9:7b:83:83:2d:ee:df:ac:bc:71:f4:f5:1d:
99:1c:78:d5:a9:b7:eb:c4:c8:61:ad:5e:b0:e8:58:
7b:f7:e5:ba:b8:8b:bb:6f:f9:77:46:9c:f7:c1:95:
10:1a:21:db:7d:db:ef:be:b1:25:86:dd:b5:09:91:
b9:56:7c:ee:25:9a:54:89:81:f5:be:7d:e2:ca:06:
db:f3:4c:b5:61:db:4b:f8:60:44:01:54:2c:ac:e9:
10:71:c6:57:bb:e8:67:82:13:a0:5e:08:83:0a:49:
2d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A1:F8:E1:BC:74:50:2E:9A:07:0E:4C:37:E7:93:F4:DA:7B:49:77
X509v3 Authority Key Identifier:
keyid:DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:42:85:bf:a1:a7:96:04:99:71:fb:58:48:9b:8e:e7:7e:14:
11:ae:c0:66:e6:5e:08:25:ed:94:63:e9:94:d9:69:09:0b:82:
5a:3c:e8:9c:07:4a:4f:e6:c5:3c:c8:93:6a:51:a2:67:79:45:
23:37:0f:73:c4:97:61:8d:5d:7b:e1:f4:20:ca:f8:95:26:f5:
76:bc:3c:c0:e4:01:1a:04:1f:eb:86:14:91:6e:a5:d6:27:34:
ff:21:05:c8:d1:ac:8a:f5:0f:7e:72:d9:33:24:5a:01:b4:a3:
d2:58:f3:24:79:2f:64:ef:ab:36:bc:5b:d9:d9:f9:b5:77:34:
cb:16:c5:02:2e:91:b4:37:ed:50:25:7c:62:45:02:53:bc:4b:
6b:6a:57:ac:37:75:d7:97:5c:6b:1b:b9:ce:24:aa:a9:69:98:
6c:fa:cc:51:c2:c3:ec:cf:6f:7a:a8:56:0a:41:3f:bc:71:35:
28:68:0b:13:8d:4a:cf:a2:85:f7:c0:96:9a:90:e6:89:6b:d0:
98:82:dd:23:a9:07:96:f8:3d:98:ec:34:18:d9:18:bf:71:9f:
12:eb:e3:3f:4a:f6:74:3e:8b:59:4b:9f:4d:33:0b:8e:2c:d2:
e9:23:35:b0:12:d9:07:aa:3f:c9:65:09:68:ce:8f:ee:12:31:
1d:66:65:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:49 2025 by rpki-client