Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
File: 3A-eoEY21-cUGLkwkczQ5XAVvkk.mft (raw, json)
Hash identifier: Zgtv5Vjglld7NVg0Cds/CVGlJS4u3g54c7XuG4IWMuY=
Subject key identifier: 7F:7B:4A:F3:E0:FF:9C:90:DD:93:F1:39:8D:A1:57:D2:69:EE:F3:8C
Authority key identifier: DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
Certificate issuer: /CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Certificate serial: 0199FC589437998C6D7FD2980CA074B0BD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:27 +0000
Manifest this update: Sun 19 Oct 2025 12:01:27 +0000
Manifest next update: Mon 20 Oct 2025 12:01:27 +0000
Files and hashes: 1: 3A-eoEY21-cUGLkwkczQ5XAVvkk.crl (hash: ullEuleJW2zZ7zIqZ7ifMa8lq/QsPGAbErM1HrBR/F4=)
2: L9o7KQxJPRJhzeZqHSfbm_7F0-s.roa (hash: nN3JagCFrpyGEb5Wr7V9qHCmIBDIlF1ypYg9dy1tB3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:94:37:99:8c:6d:7f:d2:98:0c:a0:74:b0:bd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Validity
Not Before: Oct 19 12:01:27 2025 GMT
Not After : Oct 20 12:01:27 2025 GMT
Subject: CN=7f7b4af3e0ff9c90dd93f1398da157d269eef38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:49:b6:2f:5a:be:e7:18:d8:b4:76:c8:07:42:
60:1e:6a:5d:81:5c:f7:c2:b3:ad:28:76:80:94:e5:
56:64:98:12:cc:1b:d3:32:29:ac:52:c0:7c:cc:8f:
71:68:27:db:b6:ab:a7:ce:a3:97:e6:49:45:ef:a9:
9d:6d:89:61:27:8d:7e:37:d2:f0:84:58:27:82:ac:
23:d2:1d:72:db:a1:46:b0:4c:10:77:20:81:26:70:
3a:55:57:24:0f:09:f8:ad:b4:78:cd:55:91:58:6e:
67:de:35:40:e7:b5:a5:c6:ac:66:0c:88:61:48:3f:
ef:b5:21:7c:c6:8f:97:85:72:e3:a3:bb:71:1b:64:
ae:06:0b:96:28:75:be:04:bd:85:18:d6:98:92:a1:
62:7a:42:2b:5b:d6:cc:4a:e1:34:e9:34:0f:35:57:
49:d1:82:7b:ef:54:ef:70:c3:1d:0f:df:02:0f:d8:
da:7b:aa:4b:ab:2c:d7:d1:99:81:ce:8b:ac:ed:fe:
9f:91:6f:8b:7c:da:47:a9:7c:31:35:eb:6e:d9:5a:
a8:4f:04:0b:28:f9:50:22:54:e0:23:54:2c:3e:ab:
60:46:56:ee:9d:95:71:f2:5f:98:50:48:7e:0a:3f:
b6:ba:a3:30:fd:cc:67:75:5e:7c:24:fa:12:74:df:
59:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7B:4A:F3:E0:FF:9C:90:DD:93:F1:39:8D:A1:57:D2:69:EE:F3:8C
X509v3 Authority Key Identifier:
keyid:DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8c:67:8a:3a:56:64:a2:12:d5:f9:a5:23:40:18:77:49:5a:
3a:e6:a3:78:8b:ed:a9:33:50:35:b0:22:87:25:f6:c1:fb:a4:
4a:69:08:0a:ca:5b:8d:4f:71:9b:cc:42:ab:43:58:a5:b3:26:
47:1c:02:2e:75:d8:e4:53:c7:28:39:c8:2e:ba:d0:c1:42:ee:
b4:32:94:7b:ac:84:aa:89:bb:ba:77:da:15:e7:fb:65:27:7b:
c3:94:be:47:0b:c8:aa:3a:c2:21:07:6d:2e:65:3c:6d:73:c0:
3d:4d:d0:19:16:f7:96:ab:72:00:5f:d6:35:71:23:44:2e:1a:
2f:a3:a1:ff:63:ed:29:f9:0a:a0:4a:e2:c9:80:44:5b:c9:53:
4e:d4:2d:7d:ca:47:ea:14:32:22:0a:53:3b:d5:66:a3:f5:9c:
3d:4c:54:57:53:65:b3:68:8f:e2:27:f3:59:6b:20:1e:21:6d:
be:2d:89:db:09:b6:af:b4:47:cf:f3:00:ba:60:e0:dc:6e:71:
7b:e2:27:f4:0d:22:98:3c:96:89:6e:fa:73:23:25:e4:20:53:
59:54:9e:5a:c2:86:83:15:af:19:3c:bb:38:4a:08:8e:cf:60:
81:20:a1:51:a3:83:ba:ca:46:9b:f8:4f:ea:07:02:9d:a5:3a:
3d:3b:b0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:00 2025 by rpki-client