Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
File: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft (raw, json)
Hash identifier: sIwSJZRR31h2YoSF5CJc7yoBAzEvo7i40SJ4Sdjh/mQ=
Subject key identifier: 93:AB:F3:F4:F1:F2:50:89:10:6F:FC:51:7E:5F:86:40:34:C4:A3:7C
Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
Certificate issuer: /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Certificate serial: 0199FBEB8F7A4482395699EA356AAE2777E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
Manifest number: 1637
Signing time: Sun 19 Oct 2025 10:02:22 +0000
Manifest this update: Sun 19 Oct 2025 10:02:22 +0000
Manifest next update: Mon 20 Oct 2025 10:02:22 +0000
Files and hashes: 1: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl (hash: 3kQPVQIPLDnX7Pyf4CaxAdq+Tm0WIaYqbqMpd1yEtEw=)
2: Ldu0EGXQ1MYyGdeyQmSIejuBpSw.roa (hash: zigF7LOpUtd1pS/tfQIWkRyp68k6cu70RaVSak3Qv0w=)
3: Y2gjl-Swzk92ryq3Z-Z6gp7HzLE.roa (hash: PMTJytzI+iwFKg204deNXF6qN+csOXo8Jl+I9xD+TfM=)
4: agxYPLnYdjCRAQfydoFhcZumCgg.roa (hash: NCy7EyPm/0lV8RywpILyDqtiIlQ48M258Jt/bjYI+0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:8f:7a:44:82:39:56:99:ea:35:6a:ae:27:77:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Validity
Not Before: Oct 19 10:02:22 2025 GMT
Not After : Oct 20 10:02:22 2025 GMT
Subject: CN=93abf3f4f1f25089106ffc517e5f864034c4a37c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:99:6f:63:04:24:cd:da:f0:60:7e:ca:d3:
8d:5b:b6:b5:04:bd:76:be:7f:c1:c1:bc:79:34:e3:
0e:80:bd:0f:ae:b9:b9:f8:d9:df:36:fb:8f:fc:ad:
0a:e2:8f:aa:37:37:0d:14:88:21:f7:e7:38:a0:26:
ca:45:30:53:fb:60:02:6e:99:22:97:9a:0d:07:c8:
ec:d7:72:22:b8:0e:db:e5:9a:95:3d:1c:47:f0:c7:
11:bb:81:68:47:79:d6:b4:66:05:5c:33:dd:e9:82:
81:46:84:9b:3d:bb:ea:06:b6:03:24:8a:85:2f:07:
e0:1d:0b:df:c3:4d:b8:17:3b:dd:86:0e:86:56:51:
3e:3f:7c:49:19:0a:f1:ad:48:3b:01:17:12:a5:82:
49:84:91:ea:d4:ff:b1:ba:a2:ab:cf:dc:c5:7e:8b:
fd:50:f2:15:2d:41:0a:19:28:01:6a:07:1a:cd:27:
10:70:17:60:8d:96:22:41:43:12:e5:8d:f1:c1:48:
40:1f:3f:b9:a8:fb:78:b2:b7:d8:7c:dc:8e:9c:38:
e7:3f:55:18:3a:b1:a8:3b:56:84:2f:96:c0:1c:a8:
34:bc:89:ea:76:0d:ea:f5:dc:de:98:b9:06:c0:d0:
58:95:92:6c:73:cb:de:e7:b9:f7:a5:9b:a8:f3:1e:
c6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AB:F3:F4:F1:F2:50:89:10:6F:FC:51:7E:5F:86:40:34:C4:A3:7C
X509v3 Authority Key Identifier:
keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ac:99:0f:7d:91:0a:bb:09:2c:66:4e:48:07:8c:fa:cc:c7:
3e:fd:8a:a5:20:41:e2:2c:73:0c:58:c9:77:af:8c:ed:8d:82:
44:37:46:e3:91:b9:3d:a8:89:5f:71:20:96:31:d1:4e:ef:80:
4d:b3:a6:99:38:ef:49:dd:ca:ac:2f:50:0a:68:2b:3d:98:a9:
4f:b8:40:8b:a4:51:77:55:fb:33:09:29:b8:42:39:de:83:24:
d5:f8:ed:7c:63:1f:89:c8:12:ac:66:8f:89:a1:9a:45:f6:9e:
60:a1:0f:03:b3:de:9a:f8:82:ca:70:1a:41:b3:dd:ae:ad:41:
bc:45:9a:a6:fa:58:06:d0:43:46:6c:d9:62:c9:a3:75:b2:c1:
b6:db:2d:68:32:64:05:60:1f:ab:1e:47:1d:84:eb:7b:29:26:
ae:eb:28:c4:19:33:a0:ab:2b:66:30:a3:7e:d8:b8:cd:08:78:
01:4d:86:f7:51:ec:e9:ee:70:a2:08:66:e1:93:73:31:0b:16:
f5:dc:d7:76:a1:41:0c:c5:c1:e0:4d:73:6e:98:2b:24:b8:7f:
21:c2:35:46:12:71:c1:6d:34:b7:77:ca:ae:f5:2b:05:8b:63:
3d:1a:10:20:9e:3d:2b:1d:70:2e:08:2e:9c:05:22:01:0a:18:
af:6e:ea:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:25 2025 by rpki-client