Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
File: 3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft (raw, json)
Hash identifier: Q0sxmKdvhvmbyX3trPiEc3rtzWUFlk2KhuM+C8zRDs0=
Subject key identifier: 99:10:7A:32:F3:4E:0F:EA:F8:2E:42:8F:02:59:5D:AE:45:92:ED:BE
Authority key identifier: DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
Certificate issuer: /CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Certificate serial: 0199FC586EBCED2B412E11F2E8E231DAC571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 12:01:17 +0000
Manifest this update: Sun 19 Oct 2025 12:01:17 +0000
Manifest next update: Mon 20 Oct 2025 12:01:17 +0000
Files and hashes: 1: 3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl (hash: 2j/4tcYbjeoYrCVeXSdrvrmXE6bLWh6sBaLi0X6qpY8=)
2: RZ4xmYAJVpVRLfuQVLFQGXgbrQE.roa (hash: aFDGOW4Qu6MNo6mtPQc9Lw/jPxt+lcHM9Vl2lskSnz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6e:bc:ed:2b:41:2e:11:f2:e8:e2:31:da:c5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Validity
Not Before: Oct 19 12:01:17 2025 GMT
Not After : Oct 20 12:01:17 2025 GMT
Subject: CN=99107a32f34e0feaf82e428f02595dae4592edbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:83:8a:88:22:fe:3f:c2:b7:2d:84:34:6f:8d:
68:67:af:06:d8:b5:b9:5f:d4:d8:54:64:c9:07:56:
16:7b:ff:e5:ea:79:df:57:d5:c4:39:ed:7f:36:04:
c6:bc:31:ac:d4:c5:88:fe:f6:b1:f3:fb:13:50:d6:
46:8f:2f:87:72:1d:41:2d:b3:98:27:36:c6:f6:6d:
ab:39:72:2a:27:1d:bd:28:73:b7:9c:6d:c1:6a:92:
44:c0:67:2e:11:ba:4e:8c:2f:44:50:6d:ef:fe:0a:
24:46:de:f2:df:e9:a3:2f:a8:0a:e9:bc:ea:55:00:
41:d5:f3:9f:65:12:e1:2e:b7:15:26:e8:22:a0:33:
81:ed:a9:65:40:d4:1e:b1:53:b9:04:15:7b:7e:c6:
de:b9:70:bf:cc:34:7d:85:29:75:d0:23:e3:ad:52:
12:32:70:c6:83:dc:3b:89:cc:99:3a:3a:ed:f0:e2:
fd:93:6b:c1:71:b1:14:31:69:0d:50:70:21:8e:93:
fb:24:e6:fc:49:86:ac:04:c2:7e:65:13:c4:ff:68:
7e:df:11:91:a7:09:bb:6f:fb:7c:d0:b6:0b:46:5a:
76:68:b2:34:eb:38:62:96:bb:29:6f:64:fb:e5:8b:
8e:8c:48:51:e3:f9:58:7b:78:11:7d:b4:af:98:63:
41:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:10:7A:32:F3:4E:0F:EA:F8:2E:42:8F:02:59:5D:AE:45:92:ED:BE
X509v3 Authority Key Identifier:
keyid:DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e5:05:a9:52:6c:03:e3:e3:62:10:f4:c7:c1:13:60:e8:8d:
57:74:1d:a3:11:70:15:2f:2e:71:29:04:64:f4:66:55:d7:d2:
9d:a7:2c:02:78:1b:ea:ec:f9:ee:f0:d5:42:4a:dd:48:36:04:
16:4a:40:39:c7:e2:af:64:c6:b8:b0:4d:46:47:81:a5:c8:35:
67:92:dd:d3:b1:11:9d:ee:e6:12:6c:a4:ad:79:8d:d4:db:13:
ec:68:3e:1f:4d:a9:07:11:bb:48:8e:da:99:3c:4e:c7:9f:b6:
76:52:e6:8e:ac:0d:93:6a:22:c2:d2:38:13:41:ba:3f:bd:0b:
13:ce:fb:e9:76:d2:57:28:77:a5:d9:0a:34:17:9a:ab:7e:35:
19:4b:55:6f:b9:c4:b3:5b:f5:86:d5:e7:9e:86:ed:50:37:75:
77:4e:6d:47:0e:76:b8:06:1d:77:fa:2c:c3:20:2f:ee:1f:80:
64:63:00:e2:ef:cc:06:5d:f0:44:6f:ac:02:58:bf:7d:bb:67:
ce:c3:7a:27:49:87:4d:66:86:61:8e:c1:2b:21:8a:bc:ca:03:
eb:e1:d3:8c:35:25:58:19:e6:5c:df:a3:39:6c:9b:d7:53:bb:
2b:18:d1:f9:20:c5:a8:fd:88:82:8e:59:d4:d3:9e:ad:fd:39:
e2:0d:ab:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:19 2025 by rpki-client