Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
File: 3j02h_599Iw76DmKrXvSAQZUU4I.mft (raw, json)
Hash identifier: 3ANjxYAX4yKDDNl+VQQokCVNSw70CRMWnqA7YHNjtKg=
Subject key identifier: 4E:86:65:D6:1D:60:B6:78:75:3C:52:2E:F2:77:FC:9E:B3:A7:3F:FF
Authority key identifier: DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
Certificate issuer: /CN=de3d3687fe7df48c3be8398aad7bd20106545382
Certificate serial: 0199FC58C006EC88E8377168F46AEACA59F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:38 +0000
Manifest this update: Sun 19 Oct 2025 12:01:38 +0000
Manifest next update: Mon 20 Oct 2025 12:01:38 +0000
Files and hashes: 1: 3j02h_599Iw76DmKrXvSAQZUU4I.crl (hash: XfNQe4AGWmkMhW6zMM3TJlPQ0KgG3OPDZvwdeasPRwA=)
2: Pzz9-39B29Zan_AKRyiM2W7cTbI.roa (hash: 2gaPpnMFBn7PDm+0BqVVwSzuzPaAOOzR64kAX25LHLU=)
3: iuKuxv9EBM2kBUoWOZrOGISOEXI.roa (hash: M7VP7rss/sZMOY+HK5CMR5G4/5a9JWWosQij25471bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c0:06:ec:88:e8:37:71:68:f4:6a:ea:ca:59:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3687fe7df48c3be8398aad7bd20106545382
Validity
Not Before: Oct 19 12:01:38 2025 GMT
Not After : Oct 20 12:01:38 2025 GMT
Subject: CN=4e8665d61d60b678753c522ef277fc9eb3a73fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:03:77:0b:81:ad:e3:b6:ab:8c:92:03:bf:
ba:0c:0a:e6:11:9c:87:0a:d6:fe:a2:19:a4:4d:09:
7a:8f:74:2f:17:2c:6c:2d:a6:d2:6d:66:8c:f0:49:
66:39:d1:1f:04:70:d9:1b:27:37:35:bd:49:11:4c:
d3:a2:e7:2e:5d:e4:47:97:a4:76:bf:37:ba:56:42:
2b:22:d6:29:7f:ed:50:13:4f:bf:4f:86:9d:68:7f:
e3:dd:71:4a:ef:af:18:fc:4c:23:a7:6f:59:cc:86:
6f:13:f3:45:0a:7e:ad:31:43:9d:e8:ac:1d:38:4e:
5c:4f:f9:ae:c6:a6:31:32:84:52:c6:d8:45:ff:c7:
d3:44:69:9c:81:55:03:1f:26:01:3f:6d:a6:f5:8a:
c7:00:8a:1b:36:e6:e6:ac:80:b6:63:4b:0a:02:36:
72:75:58:ef:53:bc:60:48:11:cb:ed:2c:cd:3c:e1:
fe:40:1a:63:e0:e4:5f:e9:d7:40:ab:2b:e7:61:9c:
72:04:c0:77:77:63:87:e0:62:84:3b:00:8e:92:3d:
bf:3d:cf:8f:95:c9:f2:2e:93:fc:9a:1c:b7:eb:e7:
ee:a9:28:a9:53:82:60:9b:3a:18:6c:8d:90:3f:33:
b9:e4:b9:73:46:13:00:32:9b:8c:1f:e8:f2:6b:cc:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:86:65:D6:1D:60:B6:78:75:3C:52:2E:F2:77:FC:9E:B3:A7:3F:FF
X509v3 Authority Key Identifier:
keyid:DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:23:c7:45:75:5c:02:a1:b1:e5:0e:4e:82:19:06:45:74:f3:
d9:58:ca:63:e9:83:83:f5:de:03:d4:07:77:ae:c8:d3:e7:37:
0f:15:13:bc:ef:37:02:a4:02:cd:62:1a:3f:76:90:cc:2b:cd:
27:50:fd:c1:c5:06:d5:f2:80:76:83:4d:6c:d9:d7:a9:49:47:
f3:03:13:80:f9:4b:66:75:4c:fc:cb:20:36:50:53:4d:23:81:
be:88:a7:21:49:8e:c9:9b:cb:eb:8a:9b:98:da:4a:42:e8:83:
88:5d:86:78:be:82:2e:07:ee:bc:f7:e4:ae:90:3c:86:79:66:
ac:7b:71:87:38:b2:68:ba:f9:88:7f:4f:00:04:4c:74:84:8e:
22:42:9c:6e:ff:a3:f7:ce:ad:2c:02:04:31:2d:3c:6a:a4:10:
cc:6b:1c:f4:67:a7:1d:93:fb:97:9d:b7:b5:3e:72:29:62:5e:
d9:5c:15:08:5b:85:83:07:47:28:9a:67:91:2f:0e:f3:31:b2:
7f:f6:b4:ae:35:cf:90:db:1a:3a:f4:c9:84:36:a9:45:54:57:
e6:fe:85:89:b3:71:f4:af:5d:e8:b7:31:7c:fb:00:9b:c0:57:
cb:87:f4:4a:3e:9e:be:74:f1:4b:7c:31:47:46:91:ea:42:fe:
8d:7c:b8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:08 2025 by rpki-client