Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
File: 3IScc2nn5SxwUdIdunKYMIvpxCg.mft (raw, json)
Hash identifier: 6RheKRbKSFeRx6QcWMyj9FBT/3QgxPMA/ns5yczKUHk=
Subject key identifier: 66:C9:17:82:B5:FB:E6:87:F0:B5:48:28:9C:EF:54:71:92:89:29:A5
Authority key identifier: DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
Certificate issuer: /CN=dc849c7369e7e52c7051d21dba7298308be9c428
Certificate serial: 0199FB45CA5C7ECC1EE0571CCBDDFB737988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 07:01:18 +0000
Manifest this update: Sun 19 Oct 2025 07:01:18 +0000
Manifest next update: Mon 20 Oct 2025 07:01:18 +0000
Files and hashes: 1: 3IScc2nn5SxwUdIdunKYMIvpxCg.crl (hash: TkOxNntOdhTf6+ea6pm5WpTIA723Ec97Icbnu4iqOzc=)
2: A1Kij3UmuqlYPUgtFwkRpc3mYFI.roa (hash: 7eehR/MKaZhrxZxZgGixZL1BWxFDBQrZZYdPEfeskDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ca:5c:7e:cc:1e:e0:57:1c:cb:dd:fb:73:79:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc849c7369e7e52c7051d21dba7298308be9c428
Validity
Not Before: Oct 19 07:01:18 2025 GMT
Not After : Oct 20 07:01:18 2025 GMT
Subject: CN=66c91782b5fbe687f0b548289cef5471928929a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:d3:1b:fa:a2:b6:d1:ff:e2:18:eb:0c:a2:
1a:e3:56:4e:93:3b:af:e7:9e:85:23:7c:8e:0b:b4:
22:5e:7c:fc:f8:d1:71:ca:8f:13:fe:e8:5e:64:f7:
d6:d3:ab:98:04:8b:7c:39:79:3a:d8:90:76:cb:9d:
c1:cf:a4:94:b8:f1:ca:9c:8c:c6:c1:ea:d5:c0:e7:
39:da:a4:af:e8:72:8d:b5:af:79:44:5c:6e:87:ad:
e9:ec:cf:df:67:ab:6d:df:0d:5a:a3:62:2d:56:c4:
b8:d1:8b:02:a9:b0:fa:c2:30:6b:33:a9:00:14:42:
14:96:64:e2:54:b4:f1:c2:7a:7c:18:67:7d:b8:78:
a5:47:e1:90:7c:d9:d4:a0:ca:c4:56:b5:81:3a:38:
be:32:d5:58:82:3e:dc:04:5d:93:7a:15:03:81:24:
52:78:73:e7:cd:b0:9a:6f:a8:f5:98:a7:6a:ac:26:
1f:35:a4:9a:e7:16:6c:81:2c:7b:1b:05:23:95:28:
f9:b7:12:4b:0e:35:e8:ff:63:8a:11:37:df:1d:a6:
4a:c9:2b:aa:e3:69:8f:e9:54:cb:bc:0c:b5:1c:d6:
90:c9:bb:4c:99:e8:27:98:40:11:36:f0:30:f0:50:
40:63:6e:a5:30:11:f3:12:86:36:e0:c2:1b:10:94:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C9:17:82:B5:FB:E6:87:F0:B5:48:28:9C:EF:54:71:92:89:29:A5
X509v3 Authority Key Identifier:
keyid:DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:65:12:b1:44:52:2a:80:55:e3:fa:5f:fc:48:fe:c4:ab:50:
39:74:28:4d:08:08:19:ce:00:cc:2b:a4:df:c2:1e:ce:e7:03:
9e:44:f5:ad:a5:d4:22:50:90:94:c4:ef:2b:6d:0b:c9:84:41:
2c:f4:8f:f7:28:f4:c3:e4:68:c5:17:0d:61:2d:f8:be:25:3a:
86:50:b2:6d:90:3c:16:ca:9b:b0:fd:c8:95:9f:40:d4:14:cc:
32:9a:11:4a:e5:95:82:1e:90:41:ed:df:aa:3c:6e:3d:e9:23:
64:55:db:a8:eb:af:27:34:a6:3e:e4:2c:d7:6e:e5:3e:21:0d:
4e:95:c6:3c:76:c2:63:31:7f:8d:01:94:79:f8:63:0b:86:7e:
2c:c5:24:5f:b4:85:5d:01:1f:c4:f6:93:a1:92:cb:ed:c4:e2:
e7:c3:0c:9c:6d:04:1d:c8:a2:02:9f:6c:52:84:48:f6:59:8a:
d5:eb:e6:46:5a:f4:a1:98:bd:07:f1:85:4b:53:b8:1f:4a:91:
5b:3d:98:9b:cf:f5:db:be:52:c0:cb:e4:4f:46:e4:1d:6c:31:
d7:1a:e4:66:26:52:13:b8:1a:c5:f5:6d:4c:4a:52:6a:04:ff:
74:3c:20:f2:3e:11:67:d7:8f:32:cb:51:e9:8f:d9:f0:b6:9e:
3a:8e:71:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:41 2025 by rpki-client