Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: agkS1IoMADOS3E6ZR97PAABk1SUYfGmjGhmReh2UGyA=
Subject key identifier: 47:F6:8B:F8:1B:25:4E:3E:82:59:10:73:3E:55:4E:C5:0A:B0:9F:25
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 0199FBEB73E8979BDBD4757BD0C2050BE7AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 10:02:15 +0000
Manifest this update: Sun 19 Oct 2025 10:02:15 +0000
Manifest next update: Mon 20 Oct 2025 10:02:15 +0000
Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: k8wEDpjxkGmhNsdle8TWRazaj6HBs2v3JdY33E08Vx0=)
2: NopP_ZIwxAVnz5Xq3F8YDJ6XlSQ.roa (hash: klfGz6i2JiivKFDVhsCpWAOF20m0ZYcMb/uXv3sHlTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:73:e8:97:9b:db:d4:75:7b:d0:c2:05:0b:e7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: Oct 19 10:02:15 2025 GMT
Not After : Oct 20 10:02:15 2025 GMT
Subject: CN=47f68bf81b254e3e825910733e554ec50ab09f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:6b:91:ca:24:d2:7c:9b:3d:12:18:a4:32:
37:98:97:af:35:9c:de:cc:2f:0a:45:fb:bc:33:31:
ae:e7:dd:62:17:aa:47:0e:70:8b:22:93:21:9d:35:
b7:6b:5f:b5:40:a1:c0:6b:8c:26:3c:d1:26:23:f3:
84:f5:b8:f2:47:21:6c:ac:e2:4b:2b:96:1e:d4:28:
22:87:12:9a:8d:4c:14:37:d7:46:24:66:7a:55:77:
e0:ad:c8:6b:9b:00:37:1d:52:8f:33:d0:f9:11:70:
eb:17:62:13:db:06:6b:43:68:bc:68:64:ba:75:0b:
b0:2e:9f:6e:a8:3d:41:72:e7:3a:1c:3d:f5:18:30:
23:c5:9c:fc:5b:e6:0f:0a:96:51:70:d3:08:25:ac:
1a:7c:7e:a8:2c:46:13:37:4f:58:99:e9:b4:0e:ee:
76:ee:9a:63:89:8d:07:a0:dc:3e:a4:94:e7:33:cd:
77:23:fc:f7:2c:bb:a5:f9:e7:36:d7:53:fc:5e:1a:
80:d5:32:25:f8:57:82:11:e0:4b:30:ec:f9:c6:28:
1b:d1:72:1f:73:30:bf:1b:ea:c2:c0:f8:21:73:4e:
c8:4b:06:6d:af:df:d6:c1:af:6b:8e:19:ba:f1:91:
20:a7:50:02:f4:c8:f6:00:77:10:69:69:0d:ba:56:
29:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F6:8B:F8:1B:25:4E:3E:82:59:10:73:3E:55:4E:C5:0A:B0:9F:25
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:79:9c:ff:7f:b3:51:28:75:3a:f8:39:9c:5c:bb:cc:ac:e4:
12:a5:8c:b3:aa:b2:d8:26:f7:d2:22:b7:9b:01:50:25:68:36:
e0:4d:01:6a:3a:c6:c4:e1:43:94:4b:5f:26:10:70:c2:ca:8a:
a7:9a:85:a3:e5:d8:67:b6:87:c2:16:bb:8b:22:7c:47:53:d6:
a1:82:68:95:73:99:9f:5e:c3:9b:c5:14:8d:58:ac:29:18:8d:
3f:72:6f:fb:82:43:4c:7e:e4:1e:01:57:ff:24:89:cd:d0:21:
ba:34:92:08:7d:6f:f8:16:94:15:82:7e:bd:33:ee:ee:29:19:
3a:a8:9a:f2:e8:8b:eb:e9:3d:ea:70:70:f6:79:52:b3:7e:99:
b3:d0:b6:73:5d:e1:44:70:78:6c:d5:41:ab:b0:92:93:b2:e3:
f0:2f:05:1d:1a:96:3c:45:95:0d:6f:63:3e:8b:99:c0:c4:2f:
11:11:4f:97:53:e5:ea:c6:a1:17:7f:5f:0c:7f:1b:4d:42:1b:
2c:39:65:3f:62:c5:e4:01:ea:b9:d4:22:44:ec:c9:18:44:a0:
2e:9a:61:0b:42:e8:14:42:b5:3b:52:c8:9a:95:f8:c3:f2:80:
2a:65:dc:e7:0b:25:1f:3d:a7:89:95:63:b6:4c:55:3f:de:84:
e5:d6:c9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:05 2025 by rpki-client