Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
File: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft (raw, json)
Hash identifier: puZFblp/x8LQQKZ5b0SKSE/fV6FKyzVJbFdbqonvaF8=
Subject key identifier: 5A:FA:5D:EA:08:24:59:30:9F:81:2D:0E:AD:D8:EA:F3:AF:83:78:C7
Authority key identifier: DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
Certificate issuer: /CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Certificate serial: 019A006C0D543A9CBF1820B876FFA06F4A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
Manifest number: 159B
Signing time: Mon 20 Oct 2025 07:01:12 +0000
Manifest this update: Mon 20 Oct 2025 07:01:12 +0000
Manifest next update: Tue 21 Oct 2025 07:01:12 +0000
Files and hashes: 1: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl (hash: YXrCXH/h5fdbAcqaX6AD3aYhqHnWVQij3K8+N5rfXIE=)
2: Wh1jH5vANwZcwldoZxeJx9Ms8Tw.roa (hash: /m2D3y0N+aO5CYT+TsC7FYKiJpOsP+DSU+ozinhXmV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:0d:54:3a:9c:bf:18:20:b8:76:ff:a0:6f:4a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Validity
Not Before: Oct 20 07:01:12 2025 GMT
Not After : Oct 21 07:01:12 2025 GMT
Subject: CN=5afa5dea082459309f812d0eadd8eaf3af8378c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a8:83:cc:92:b4:68:36:1a:f8:91:17:e4:76:
42:d8:b3:e0:a2:0e:32:61:44:da:a6:de:4c:4b:d3:
ea:17:56:b6:b8:3b:15:f6:72:76:10:b6:25:40:5b:
1e:dc:c9:37:d9:b0:16:85:29:7c:fe:e1:aa:5b:d7:
ea:26:99:48:50:09:55:be:9f:ba:fe:99:23:ab:d7:
ea:02:b3:16:2e:be:5f:7c:9c:31:6a:8a:8e:d5:17:
c3:79:b2:2f:09:43:9d:c3:df:9a:ab:5d:ba:d7:6f:
38:ea:64:b2:4d:b0:ea:b9:d1:b6:65:ea:a0:8d:d6:
22:48:3d:7b:02:60:82:02:dd:ee:dd:46:31:45:0c:
4e:69:29:47:a5:b7:f2:60:a2:53:98:6d:2f:56:46:
4f:26:7f:3d:a8:0d:c0:80:9b:c8:e5:ee:44:e8:a1:
1d:6a:81:86:d6:9a:5b:0c:64:31:95:cd:9a:85:60:
8a:8e:a5:22:1d:df:3d:45:d7:e7:19:76:62:35:6c:
a7:49:8f:b4:a7:aa:64:14:e7:4c:da:9c:8e:26:cd:
1a:d5:e4:44:11:23:17:75:b3:f2:11:c4:8f:b4:69:
8c:2a:37:c9:1d:9a:b4:0b:81:1b:c4:98:70:62:a2:
0f:8d:0e:b4:26:2b:78:92:6c:6c:85:1a:5b:2a:21:
3c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FA:5D:EA:08:24:59:30:9F:81:2D:0E:AD:D8:EA:F3:AF:83:78:C7
X509v3 Authority Key Identifier:
keyid:DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c8:b8:db:de:59:0d:aa:36:b9:35:ad:4a:e7:ab:f3:9e:d6:
88:45:3b:bb:74:ee:17:5c:74:57:ae:f5:20:d7:25:b8:56:5f:
e4:f6:d5:8c:f1:1f:a1:5d:d1:73:8f:2a:c9:35:14:3c:97:87:
e6:d9:0d:93:c9:dd:6f:6f:1f:5c:63:36:35:0b:8c:d4:05:bb:
31:2e:95:ef:b0:96:b3:67:71:fe:42:f9:06:50:80:9f:aa:e7:
e9:8e:ab:66:54:c9:11:cf:9b:9e:81:a6:7a:90:7c:44:1f:89:
cf:54:e3:ef:88:b4:6d:4b:ef:7a:1e:0b:b9:b7:f0:b0:eb:67:
e7:fe:a7:9f:14:89:f0:39:c5:ad:ed:ec:55:dd:d2:f0:d6:cd:
88:b5:de:25:cc:1e:66:ad:e0:71:03:e0:69:b8:a4:bc:3d:61:
88:5b:37:6a:9d:91:c1:b8:30:7b:82:96:a5:e0:49:b5:5d:6f:
05:73:a8:ea:4f:e1:5a:88:05:ba:ab:dc:0e:af:58:5b:66:44:
84:26:ee:74:58:bb:c2:8e:ca:21:8b:ea:7e:b6:db:58:51:cc:
92:43:e5:3b:86:04:50:19:91:c0:8b:07:a4:9b:ed:c0:7b:d9:
3e:6d:ff:34:29:17:9a:62:c8:ee:82:75:a7:cf:b4:43:e6:ab:
52:b5:e1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:15 2025 by rpki-client