Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
File: 3AveFGeJXG86Rxl-rFjKE65Lt40.mft (raw, json)
Hash identifier: 2u861SZz+PY37h6yr+WAk8isdG+1JPsp3K9ZEbSEDaw=
Subject key identifier: C0:72:06:23:00:08:E8:E0:99:23:13:51:8C:5D:74:57:5D:DC:B6:AC
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial: 0199FC8F7AC3181988D907E164E766E05CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
Manifest number: 056D
Signing time: Sun 19 Oct 2025 13:01:25 +0000
Manifest this update: Sun 19 Oct 2025 13:01:25 +0000
Manifest next update: Mon 20 Oct 2025 13:01:25 +0000
Files and hashes: 1: 3AveFGeJXG86Rxl-rFjKE65Lt40.crl (hash: BbdihW75hhlc2ky7uu3yDMUs4VCfWeFLYxAVWSbkPyU=)
2: EZxzjJ6XhYd6ltYTmizd41s0hPw.roa (hash: JYFppnIvAuxE4lEcobv5nYUUPDwGguXkpkPpHyixP6g=)
3: NGkgR_rl3fLugEg3BgzB-iR4GzY.roa (hash: /ZmEtv61Y7p4XUZGiWjRkOyM1ttDKeEvzWRAeWuz5J4=)
4: ducUWn7SmjDXSD2XK_HAZ4X-w1E.roa (hash: QsOlqkwJkHZw/RVRRDiq/I4YTQ51hDfHFRswj0zjjww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7a:c3:18:19:88:d9:07:e1:64:e7:66:e0:5c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Validity
Not Before: Oct 19 13:01:25 2025 GMT
Not After : Oct 20 13:01:25 2025 GMT
Subject: CN=c07206230008e8e0992313518c5d74575ddcb6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:8e:06:26:b2:33:7e:91:d6:be:0e:60:cb:
54:4b:9c:6d:83:f0:f1:54:68:c6:65:73:10:38:b0:
8d:a7:06:e1:74:c2:e5:8c:76:eb:5c:eb:0f:93:ca:
6b:84:19:d9:e1:e0:5e:f9:14:d3:87:80:d5:f7:8d:
3f:8a:aa:9e:01:e0:84:d0:39:04:1c:72:ea:3e:f6:
4e:57:6d:07:55:11:8c:1e:58:1c:5e:f3:10:50:ae:
89:1b:18:1b:88:13:dd:9c:89:ad:09:eb:ce:67:63:
95:70:24:6d:4e:a6:2a:f5:eb:f8:d9:da:9e:d4:4d:
f5:20:13:3d:cf:7d:65:93:42:c6:4c:28:af:34:cf:
16:32:14:94:4a:e6:f2:07:68:d8:64:8f:81:fd:13:
26:90:e5:d7:e5:cd:11:79:a9:fa:19:93:ac:13:91:
83:c1:75:ae:3f:cf:7b:26:94:1f:5c:ac:c7:f0:34:
c4:04:47:b8:9d:04:30:02:fa:45:59:af:79:ed:85:
72:bb:79:8b:dd:cd:10:15:e3:b7:72:42:ce:54:50:
07:7e:4f:11:f3:29:43:77:09:7a:36:f2:56:8a:71:
a9:03:45:0b:d8:1c:71:27:f5:02:c3:b5:70:87:2b:
b8:9e:a2:f8:55:5a:52:9e:89:92:e5:d6:05:2f:82:
84:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:72:06:23:00:08:E8:E0:99:23:13:51:8C:5D:74:57:5D:DC:B6:AC
X509v3 Authority Key Identifier:
keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b1:3f:07:6d:d2:a6:3c:bc:87:2c:54:b6:88:85:9d:6d:d6:
9d:fc:d1:a3:08:9a:55:b7:26:45:2f:0c:cd:21:d0:4f:11:08:
09:1e:58:82:db:a4:da:71:89:8b:af:4d:22:08:09:23:f6:7c:
25:fe:d6:89:e2:90:5f:d1:de:85:d8:8a:64:75:54:51:5b:e3:
6f:56:cf:e4:9a:bc:be:33:8a:d5:c1:2b:67:49:f7:17:bb:d8:
a0:0f:ce:c0:71:d1:b1:0b:84:d4:18:7f:ff:b5:40:73:5d:b9:
77:b5:c1:f9:4c:5a:ee:8d:c0:81:b4:ad:89:a1:a3:0d:a2:66:
86:1c:57:d0:b9:95:0e:c8:42:c1:34:e8:be:1d:8d:37:fc:a8:
cc:d6:e8:a8:df:0e:91:a2:d0:0e:92:db:e2:ab:fc:be:c9:86:
b2:35:4f:c8:88:36:11:ff:50:8a:7b:f8:43:47:87:4a:8a:9a:
14:8c:e8:2f:ab:9f:71:fd:6a:2a:95:7d:0f:15:a4:a3:bf:f4:
60:43:e8:85:45:be:69:06:20:1c:51:f1:bf:62:94:0c:15:7a:
58:3a:3b:d2:29:90:68:bc:eb:76:7a:67:50:37:aa:31:a9:56:
07:23:1f:55:5b:ac:50:7e:db:cf:9a:7b:aa:60:90:c0:06:91:
a5:68:a9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:51 2025 by rpki-client