Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
File: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft (raw, json)
Hash identifier: RniW7pitfUi7Sg7QGLXi0AoNxBeSwu8WtG9QZuKPXrw=
Subject key identifier: D3:65:DC:26:22:AA:31:16:4C:97:5D:92:41:7C:32:97:A5:90:5D:49
Authority key identifier: DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
Certificate issuer: /CN=dcfa86863c55865700634e1135e617e4079af8b9
Certificate serial: 0199FB45D7F4F6A326336740DA8B3D2FB831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
Manifest number: 123D
Signing time: Sun 19 Oct 2025 07:01:22 +0000
Manifest this update: Sun 19 Oct 2025 07:01:22 +0000
Manifest next update: Mon 20 Oct 2025 07:01:22 +0000
Files and hashes: 1: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl (hash: KesWALFJ3f0//ztk5n8e4o0pEDAo6/7Ac7BURuVs43s=)
2: iVs53h_YZF7aBqVA1FOf0up1OVA.roa (hash: UW0lfLNzDTQsdkpmCT+L1fh8JEZx2jiYpIhhq1q1Nsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d7:f4:f6:a3:26:33:67:40:da:8b:3d:2f:b8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa86863c55865700634e1135e617e4079af8b9
Validity
Not Before: Oct 19 07:01:22 2025 GMT
Not After : Oct 20 07:01:22 2025 GMT
Subject: CN=d365dc2622aa31164c975d92417c3297a5905d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:47:94:49:99:1b:56:02:10:96:5b:a7:80:3c:
3e:46:ff:03:c8:b7:62:4f:c3:ec:18:10:5c:ed:71:
92:95:69:36:88:39:d4:16:f4:73:f6:f9:57:2d:dc:
6f:a6:97:4f:e1:cd:5c:ca:82:59:7b:f0:06:5e:a4:
ea:e8:e6:b1:40:10:5b:42:78:39:65:cc:53:eb:b2:
24:50:57:a3:f9:cb:a0:86:b6:aa:af:b4:f0:db:b0:
f4:62:3b:9a:cf:37:00:a3:e8:93:f6:c4:63:5c:2b:
bd:b2:ec:7b:19:f2:b3:b9:82:fa:d5:0d:b1:33:7d:
b9:91:03:5e:05:b0:f1:63:0d:01:d4:92:1d:e0:43:
62:a8:ea:01:ed:a9:65:18:78:ab:3a:23:76:3c:92:
ae:dd:07:b5:24:80:f4:a7:89:04:fc:8b:50:c7:ee:
85:61:b4:b5:9b:2f:27:81:2f:57:b5:4a:da:3e:87:
76:a4:4c:c3:17:de:a2:08:96:60:99:e5:ae:87:4a:
0e:d4:79:a2:47:11:bc:ee:6b:26:ce:45:99:2d:68:
ec:21:a0:fd:1f:c0:9e:df:1e:32:c3:c6:01:03:17:
dc:8c:2c:bc:54:90:75:da:63:75:3f:22:da:5b:e3:
91:78:a8:ae:aa:07:00:2d:2d:a8:a7:5a:38:82:58:
42:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:65:DC:26:22:AA:31:16:4C:97:5D:92:41:7C:32:97:A5:90:5D:49
X509v3 Authority Key Identifier:
keyid:DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:43:e5:b4:22:fc:84:d7:b3:d3:f9:ab:94:26:e0:fe:02:d0:
74:04:c0:b0:82:93:b2:fc:6a:53:d9:19:34:e6:76:fd:72:c6:
07:47:fe:6c:ed:76:cc:bc:08:4f:74:9d:b1:1d:cc:da:aa:88:
3a:22:b8:40:83:bc:8b:e1:86:07:41:ac:34:b0:10:92:5b:d0:
62:b8:5d:48:8b:96:9f:58:5c:14:2f:06:7f:87:50:7c:19:6e:
f2:7a:0d:2f:9e:c2:b7:69:0a:69:7c:b2:f0:aa:b0:70:33:30:
34:f5:22:ec:48:5c:89:34:2a:60:42:f7:11:76:bc:be:82:e0:
6a:2b:e7:d1:e0:7e:87:7a:4d:72:d3:7e:00:91:29:f6:f1:c6:
d8:56:75:57:73:b1:82:c5:b3:e1:02:cf:da:bb:83:65:b6:c0:
ad:e0:02:05:5d:e2:2b:43:65:27:64:0d:48:2c:3b:b8:33:27:
4d:e9:66:7e:de:58:7d:99:39:b3:12:7b:f8:ba:0b:49:70:80:
15:96:b9:b9:7f:5d:6d:21:fd:ee:93:fc:06:91:09:cf:9c:4b:
a3:48:44:c9:49:85:54:ff:b0:d0:48:fc:57:60:53:d3:c1:f6:
f0:d3:f5:f1:98:53:fb:54:d1:cc:01:39:b0:60:d0:16:0f:af:
60:a4:a2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:45 2025 by rpki-client