Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
File: 3ozUdpwybYRex1OmcNo6yptp7hU.mft (raw, json)
Hash identifier: I8KVbYlNeusAji9n3thBuqRLXkF0xnBSxDCYRA8HOuw=
Subject key identifier: 14:F0:76:35:94:E2:A4:EE:B0:77:6F:3C:05:4B:79:6F:48:78:E8:DF
Authority key identifier: DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15
Certificate issuer: /CN=de8cd4769c326d845ec753a670da3aca9b69ee15
Certificate serial: 0199FC215869E9F5B7AE4ED53B0AD5450DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
Manifest number: 013E
Signing time: Sun 19 Oct 2025 11:01:07 +0000
Manifest this update: Sun 19 Oct 2025 11:01:07 +0000
Manifest next update: Mon 20 Oct 2025 11:01:07 +0000
Files and hashes: 1: 3ozUdpwybYRex1OmcNo6yptp7hU.crl (hash: sTszYSpKpqy3kVz+Kddn/7150R+5lWRlTfrNIvCp1QQ=)
2: aizIqKjXfqxu2L9Do5SClHmuuHM.roa (hash: VG8x//8NLvTPdp7pULF9tX4PLkvXpJw9Gy/1Yk1G5KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:58:69:e9:f5:b7:ae:4e:d5:3b:0a:d5:45:0d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8cd4769c326d845ec753a670da3aca9b69ee15
Validity
Not Before: Oct 19 11:01:07 2025 GMT
Not After : Oct 20 11:01:07 2025 GMT
Subject: CN=14f0763594e2a4eeb0776f3c054b796f4878e8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:3c:1a:82:b7:ec:1a:f9:22:37:6a:f1:6e:
36:63:fb:31:6f:e6:34:1e:ae:fb:e9:5e:f8:8b:50:
e1:94:85:60:01:aa:d3:87:e7:07:37:c4:32:91:04:
7f:8f:6b:20:32:80:cf:33:fb:79:f9:0a:b0:d1:39:
11:c4:fb:36:4b:74:e0:9a:11:b6:41:b9:7c:41:f4:
a8:11:ee:95:fb:fe:88:9e:71:93:eb:8e:70:1b:45:
51:de:88:9f:fa:03:05:d5:b4:05:6e:98:ed:a6:33:
85:f2:9e:0d:17:93:1f:9d:de:b0:d7:60:73:18:01:
c0:a7:d9:eb:65:8c:9b:c1:fc:74:f1:78:fb:38:29:
6c:f1:43:e3:bb:8c:e0:52:94:2d:1a:29:2b:76:99:
bd:1c:d4:a2:a8:44:e1:af:1e:69:1e:84:49:65:49:
a7:ee:16:c1:ac:96:21:02:31:ba:52:66:cb:6f:97:
4b:bc:32:41:14:95:14:cc:2a:dc:ae:73:bf:80:0d:
66:51:11:a9:87:46:ae:27:57:86:ae:45:4b:45:79:
1f:54:ab:08:48:4a:21:a0:aa:c6:ba:5d:f8:1d:0c:
ce:51:9b:05:26:8e:07:4c:56:be:ff:96:89:68:b3:
d4:00:67:9c:ca:5f:28:e6:8d:a5:b2:a0:be:5a:d8:
0b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F0:76:35:94:E2:A4:EE:B0:77:6F:3C:05:4B:79:6F:48:78:E8:DF
X509v3 Authority Key Identifier:
keyid:DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c2:54:f0:37:78:12:cf:dd:80:cc:f4:2b:e8:a7:69:21:fe:
38:17:61:a0:ec:67:3c:af:92:9f:ce:c4:1d:48:25:99:8e:07:
c4:c5:49:20:91:ca:58:ff:f6:04:2c:11:5c:d9:9c:23:f8:40:
ba:94:e7:f1:6f:a8:0c:4a:f2:6f:2f:5f:ad:5d:13:ea:c4:ed:
c1:ad:86:3d:2d:5a:93:d8:67:9c:50:74:50:e2:67:f3:e0:07:
5a:98:3d:40:c8:93:31:9e:fd:8c:e9:46:67:64:dc:cf:91:19:
55:79:91:99:17:3b:d9:5b:17:38:83:50:1f:1c:74:3c:a6:f7:
da:b2:e3:e6:92:e5:6b:19:70:63:72:58:5a:be:cc:d7:47:87:
79:39:48:4b:c8:80:1e:aa:af:bb:e1:48:6e:44:71:31:58:0e:
65:a0:49:3f:d9:d7:e0:30:53:df:a3:27:c5:9a:43:85:57:ed:
5d:09:8f:79:f8:33:99:01:39:58:d2:97:67:77:1c:d1:df:35:
4e:e1:78:88:c1:80:12:1d:17:3a:dd:20:2b:8b:01:95:d1:1b:
6b:d9:36:79:1b:07:f2:cd:77:35:62:4f:a7:4f:09:b2:f0:fe:
53:ed:43:1f:59:01:32:82:59:01:a0:79:4f:d5:dc:a6:f9:2a:
76:85:f1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:12 2025 by rpki-client