Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
File: 3A4l4XpRaWkjpcApZnh0CarJqjY.mft (raw, json)
Hash identifier: /zhNcdcuYEeY726GbRYW8Z5H/tdecYuYoL5iZ1h+qC8=
Subject key identifier: 73:5C:8B:30:A4:BA:FE:6F:CF:8F:8E:1C:F3:2F:30:BC:10:DE:70:45
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial: 0199FBEC39C9D1AD4235C613A559BA5D8ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
Manifest number: 0A66
Signing time: Sun 19 Oct 2025 10:03:06 +0000
Manifest this update: Sun 19 Oct 2025 10:03:06 +0000
Manifest next update: Mon 20 Oct 2025 10:03:06 +0000
Files and hashes: 1: 3A4l4XpRaWkjpcApZnh0CarJqjY.crl (hash: 1Y1OMevPNFREBSsgs+v/K9EQT90zlvHVNbP6TSUp6QE=)
2: WGy1cA3da99W4WDLy3MY4ZyczoU.roa (hash: SJ9b+hH7b3cVwCr6CT26WQO6ifaQhtn6CrsiD/nybF0=)
3: jkdGIndQz1w9lSn5gC2Ktns7PmQ.roa (hash: VwGNfeMCv18NN23Twwp0pPWxKthypMsuMJxPjN6yLC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:39:c9:d1:ad:42:35:c6:13:a5:59:ba:5d:8e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
Validity
Not Before: Oct 19 10:03:06 2025 GMT
Not After : Oct 20 10:03:06 2025 GMT
Subject: CN=735c8b30a4bafe6fcf8f8e1cf32f30bc10de7045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:eb:79:31:a4:b1:d1:53:fa:19:1e:9b:01:98:
a2:81:e8:03:4b:99:cc:1b:36:22:41:5e:fa:be:c3:
53:bf:f3:a8:e7:78:6e:c7:31:b8:00:a7:10:03:29:
19:d1:b5:80:5d:69:24:51:ba:67:6c:aa:90:a9:70:
9e:8c:21:27:0f:f0:4b:25:5e:84:ef:79:32:cd:3e:
3e:79:05:51:40:fe:e0:1a:8c:42:6e:ca:0b:79:97:
5a:57:aa:08:5c:0c:33:c1:48:17:c6:27:cc:c4:e9:
b3:d8:5e:13:21:b6:6b:32:f0:7f:e3:27:57:75:86:
c7:a7:25:e8:69:b1:79:51:ac:ff:e6:0d:c7:ad:92:
17:12:0a:ce:0e:2f:0b:b0:d1:67:f8:1f:0d:81:95:
a5:58:25:ff:7f:94:5e:76:c7:6f:c3:04:c4:89:60:
e5:08:d3:ff:c9:f5:68:5e:40:f3:0c:92:0f:54:67:
71:26:9d:e2:51:4f:83:6f:b3:39:94:a9:a2:c7:05:
46:9a:63:cd:3a:16:4b:3d:c8:b3:be:6c:6e:11:42:
1a:13:3e:58:73:b7:db:f1:7f:bd:92:a6:96:2e:ad:
84:9a:e2:04:d3:39:8d:8e:ae:31:f3:3a:16:d6:b7:
29:92:cf:a9:98:1f:e6:22:99:83:45:a1:10:c8:6d:
ac:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5C:8B:30:A4:BA:FE:6F:CF:8F:8E:1C:F3:2F:30:BC:10:DE:70:45
X509v3 Authority Key Identifier:
keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9a:0e:4c:39:d8:59:e2:15:78:a1:79:ac:9f:a5:e1:81:48:
59:97:4f:b0:8b:6c:dc:71:e3:fd:e7:f7:cc:4f:d1:33:5d:05:
95:f9:0b:12:e6:55:eb:a7:cf:82:9e:62:d1:3d:29:74:26:cf:
20:61:64:f0:9e:b9:1a:31:89:11:f7:2c:a6:37:be:98:eb:4d:
11:0d:d2:76:da:ad:3e:25:1e:8f:74:65:71:b7:df:c0:9f:74:
ef:86:22:63:4a:c2:11:15:7f:2b:cb:a8:7b:0d:5c:2f:b1:88:
61:63:3b:5a:36:8c:4b:04:fa:81:59:42:3c:43:e4:39:b1:ff:
34:48:52:b6:f8:b5:9f:e3:72:bd:3f:6a:22:77:59:0b:28:ec:
62:1a:c2:46:10:3e:39:c9:27:94:16:58:58:19:b3:02:54:66:
6f:a4:4d:1b:d0:4f:36:db:a1:be:c4:40:4a:6d:93:2b:ad:e9:
79:57:d4:c8:7e:3e:cb:09:c9:40:46:84:af:c2:7a:b0:8d:58:
11:51:52:73:1f:f3:9c:1a:16:9b:c7:e8:e8:f2:3c:8d:17:98:
c5:09:e1:64:51:a8:66:f6:44:3e:ed:0f:c4:ba:0e:87:42:d4:
4d:21:45:84:e3:40:c4:fc:6b:7c:ec:72:0e:5b:cc:c5:97:26:
ef:c9:25:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:40 2025 by rpki-client