Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json)
Hash identifier: VwrJdiYUb+uH6QlUw6U/kT4lQjJskJqJnOZguXBOVh8=
Subject key identifier: 33:86:E4:00:A8:15:87:AD:42:97:40:E2:8E:CD:EE:C5:40:0C:69:B7
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 0199FEB4675397D86185B92FCA7DE7DD6DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 23:00:59 +0000
Manifest this update: Sun 19 Oct 2025 23:00:59 +0000
Manifest next update: Mon 20 Oct 2025 23:00:59 +0000
Files and hashes: 1: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: FddA23OcHwWptCpDK2c2jZn3UiQabFVy+tjMWvwYXOI=)
2: I9GqI9GxRbg5gyNw2oYeQXtgJJg.roa (hash: IdZbo1C2DnUJiJSpOjjTPKnvp3frNBJygc4FMjTeWHU=)
3: OJHrSjDn0A0xOyeisC7fOP_zy4g.roa (hash: 4mrlovUy+cBI29r4SEJkRQxz3HoEwjM6nDvfGvlxWBU=)
4: ie70DJhDrGYxNNPSAG6BpAZrtxY.roa (hash: HiOIeBO8KrrORXl70BQK8AAzSZ8zCob2hQpjThQB7t8=)
5: tr4Wz-5rQhPo47mTFs_LgvHDl8s.roa (hash: PZGVkTuh77FvBlVCnDa38AVdteMzJ1COvOQXzBoIS0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:67:53:97:d8:61:85:b9:2f:ca:7d:e7:dd:6d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: Oct 19 23:00:59 2025 GMT
Not After : Oct 20 23:00:59 2025 GMT
Subject: CN=3386e400a81587ad429740e28ecdeec5400c69b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:26:6f:31:37:22:ae:ec:6f:d1:09:b5:09:
ad:e3:d2:d9:f8:5e:a6:00:7f:da:54:49:30:57:fd:
3a:9e:c9:20:2a:f2:55:a0:e4:d1:fc:6d:ce:6d:40:
23:fa:a1:63:0e:3b:fa:5a:a6:c6:6b:21:b8:74:a7:
84:86:7d:97:95:98:33:89:d0:5c:24:05:91:2b:7f:
7f:58:34:b5:d8:21:a3:dd:ea:5b:0b:21:fc:6f:34:
a6:46:06:b1:ba:18:aa:31:da:29:bf:37:df:48:9f:
56:db:d8:bd:15:2b:98:58:82:bc:22:e2:43:ab:82:
ca:94:8b:12:71:83:0b:b1:1e:05:61:81:78:54:15:
bf:74:31:86:e4:e6:34:c2:e2:9e:08:62:ee:bf:64:
82:3f:70:3a:b6:8e:26:b7:2a:7e:58:1e:da:4f:33:
48:8d:35:eb:47:80:8c:51:57:ef:f8:2e:f2:ff:51:
cb:58:d7:81:5c:b3:11:a6:ed:53:84:30:8f:96:8b:
79:92:13:f2:93:be:ce:64:d8:ad:03:d2:20:eb:1d:
d2:bd:c3:17:1b:67:af:39:fd:69:02:08:52:ce:d1:
95:b9:0c:09:dc:ef:66:d5:b6:73:f0:d4:dc:fd:c1:
c4:92:10:12:67:e5:76:03:a8:85:a6:ab:44:30:0d:
63:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:86:E4:00:A8:15:87:AD:42:97:40:E2:8E:CD:EE:C5:40:0C:69:B7
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c5:b8:62:ab:f9:7a:c8:21:c7:67:f1:4e:77:7b:61:36:2d:
18:18:5b:ea:2e:e2:87:54:f6:63:b5:04:b4:4c:89:cc:cd:e1:
57:0e:b1:08:2d:bf:48:67:6d:f0:fd:74:e7:3d:b8:94:5f:2b:
2b:4d:57:43:78:d9:0f:41:c2:18:d1:cd:10:7a:c4:e2:21:03:
76:fe:5a:13:b4:0b:b0:f5:6e:8b:63:9c:bc:15:db:58:8c:7c:
eb:e4:2a:c8:dc:81:00:fb:fa:2a:fd:4a:7e:27:d4:a2:d6:ab:
e3:39:e0:7d:38:80:29:4a:3d:80:59:a5:2a:10:d1:49:97:5c:
7c:0f:a8:62:6c:4a:da:30:42:f5:92:50:4c:7f:2d:16:ca:c7:
13:bc:b5:60:32:ac:a3:23:34:51:49:17:42:ea:6b:39:4f:fe:
1e:d7:e5:de:f3:1c:af:e8:40:73:b5:e6:a7:62:16:6e:2a:d4:
4c:ac:7f:08:66:32:8d:d3:e5:aa:b4:f6:6e:15:05:ee:d2:81:
bb:fe:78:e9:19:b2:c8:fa:1b:63:d5:92:64:31:96:f0:f5:eb:
60:fd:8d:41:11:be:a2:3b:c5:6d:64:32:4d:f6:65:ec:c9:53:
15:a1:ee:af:ba:a3:72:d6:14:2a:81:31:d9:a7:f2:dd:bb:23:
a9:dc:61:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:55:32 2025 by rpki-client