Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
File: 3ZfHygW8w9airRuiNb7Y_qtpRVA.mft (raw, json)
Hash identifier: kplEM68mXzhHjAH8TvmPkRhvyrrOZhHNFDqGturGfqc=
Subject key identifier: D4:73:17:7C:B3:AF:4A:50:2B:8E:00:F2:8B:5F:C5:CF:0A:A2:EB:09
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 0199FD6B23A5DBD74A218944C6BC444A5576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
Manifest number: 1702
Signing time: Sun 19 Oct 2025 17:01:20 +0000
Manifest this update: Sun 19 Oct 2025 17:01:20 +0000
Manifest next update: Mon 20 Oct 2025 17:01:20 +0000
Files and hashes: 1: 3ZfHygW8w9airRuiNb7Y_qtpRVA.crl (hash: vqB8ZTsUkYM7aHj3UPFjFh0Q96+3sHmGMNSxcutaux4=)
2: B_dytxxDPRteZVWj_5GTAT9t8BE.roa (hash: T860Q+FQFzVWcjsZOe8dk9hmlbNKGPeSX6qfmd4Fuhk=)
3: eXzNPFB8evVF4M9GKM9iNp1CQKY.roa (hash: 3o1zQB3byjNP0T4iSERgx0SfW87i/ushB0KeeTR7qr4=)
4: ugt-KDKTow7I2OvsokQhSiya3XI.roa (hash: OVTlzU2wxqtsRIKxmANkEt2lrONo18X84ePf8/OFh9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:23:a5:db:d7:4a:21:89:44:c6:bc:44:4a:55:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Oct 19 17:01:20 2025 GMT
Not After : Oct 20 17:01:20 2025 GMT
Subject: CN=d473177cb3af4a502b8e00f28b5fc5cf0aa2eb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:db:ea:90:9c:64:ef:88:e2:11:ec:34:24:79:
9a:cf:a3:41:7f:61:e5:7a:11:cb:cc:75:1d:7c:8d:
af:b8:31:3e:55:1b:f5:46:53:bd:f6:a6:29:14:c2:
c3:f6:68:18:4e:d2:5c:ea:96:d3:0e:2c:69:d9:e2:
c0:77:e2:70:71:04:5b:16:bd:89:83:1d:37:81:65:
91:63:1a:9c:ed:b7:37:4e:f7:8b:d3:d2:cf:b9:9f:
bb:03:a9:3e:8d:06:2b:8d:36:99:18:31:3f:67:88:
13:9b:d0:e6:31:55:dc:48:f9:50:85:45:63:0e:d7:
96:24:f6:39:56:8b:d1:48:df:49:57:13:8b:91:31:
26:6f:59:ec:75:c5:f6:7d:fc:f8:91:2e:f0:33:dc:
0f:10:73:86:37:95:20:4e:39:5d:cd:ad:56:8e:28:
66:59:0c:e7:69:72:1f:a9:b6:97:f8:1b:72:c0:7c:
63:e6:8e:71:c2:ef:60:38:8e:a5:c5:48:92:3e:f1:
12:1d:e1:ab:58:c6:da:ca:a6:bc:e5:bc:8c:db:de:
6c:12:ef:d7:cd:d0:80:aa:3e:7c:cf:c2:eb:b0:8b:
ca:0b:6c:ea:88:d9:56:87:6f:fe:db:14:61:3d:c8:
80:08:63:f8:68:ed:35:ea:37:e2:25:63:38:c8:92:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:73:17:7C:B3:AF:4A:50:2B:8E:00:F2:8B:5F:C5:CF:0A:A2:EB:09
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:63:df:38:08:1d:27:fd:6a:1b:e1:df:4b:e7:3b:f5:ac:bd:
c9:42:a9:68:49:8b:dd:42:b8:dd:2d:92:40:9b:08:93:77:70:
64:50:cd:e0:f7:2b:d1:b1:03:a2:f9:b8:61:a6:d2:82:a7:76:
8f:bf:22:bc:1b:87:a4:37:14:76:6b:25:46:51:eb:26:fc:0c:
9d:87:4f:16:35:cc:32:44:22:17:fe:07:15:5c:1a:12:8a:5f:
ea:ed:b4:34:ab:ae:f5:b7:51:92:d6:a5:97:4a:4d:c1:48:2f:
db:67:c2:d4:18:b0:f6:55:00:e0:dd:fc:61:4f:df:cb:de:b8:
17:30:6f:b1:4e:8b:3a:5b:4d:6a:25:cc:a4:ad:a1:df:35:7f:
f0:b1:f9:40:8e:0c:4e:e8:79:fe:df:5e:d2:ac:30:26:95:41:
ed:b1:ea:d1:f4:03:44:c2:0f:d2:07:1d:6c:ca:4a:16:8c:8a:
5f:de:57:cd:5f:fc:40:78:58:25:df:c8:8b:93:3a:1c:73:ce:
13:20:ee:46:8e:56:f8:8b:63:3c:5b:9d:fc:d1:d6:5a:29:84:
f6:29:36:d2:95:b3:5b:88:5d:4f:53:11:0c:c2:73:9d:6d:1f:
c8:75:b8:c4:d9:99:bd:8e:49:b8:5c:9d:14:5b:ac:ec:f1:1f:
74:99:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:41 2025 by rpki-client