Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
File: A3hj3DwlnmCyyYaALdYCERXovx8.mft (raw, json)
Hash identifier: Z1E93fO34evmufZeESReEttlGbp+gmED1RjYptN7odU=
Subject key identifier: B1:E9:51:A1:8E:BC:F1:F6:3D:2B:76:74:F0:B5:D1:E6:2E:B4:05:99
Authority key identifier: 03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
Certificate issuer: /CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Certificate serial: 0199FB7CD3020D87749B70643750B722117F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 08:01:25 +0000
Manifest this update: Sun 19 Oct 2025 08:01:25 +0000
Manifest next update: Mon 20 Oct 2025 08:01:25 +0000
Files and hashes: 1: 0VtcIuxUGMiSf51ESt2U0ZJJN3I.roa (hash: pnzB/pCC1PdPD6bGcX+A1+WWtoVI4A2/GkUREyGlYVs=)
2: A3hj3DwlnmCyyYaALdYCERXovx8.crl (hash: V33JgBYQ8VmRlMCgYtgD9rbkkMsh+6LRNGYa8kv2KGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d3:02:0d:87:74:9b:70:64:37:50:b7:22:11:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Validity
Not Before: Oct 19 08:01:25 2025 GMT
Not After : Oct 20 08:01:25 2025 GMT
Subject: CN=b1e951a18ebcf1f63d2b7674f0b5d1e62eb40599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:bc:02:f1:dd:ee:d0:b4:ca:aa:c7:57:bc:
97:d1:b4:45:f0:31:ba:1c:85:16:4b:a2:d2:61:1e:
b2:81:ee:b4:21:c1:cc:f0:42:c0:a0:df:7a:be:52:
1a:72:54:46:05:b2:9c:c0:11:4c:ee:bd:2c:48:82:
aa:3d:8f:51:5b:c6:af:ec:b9:40:9b:a3:35:02:d3:
29:ed:27:6f:e5:cd:bb:5d:78:75:5d:77:5c:d0:60:
3c:78:23:c2:ab:77:f8:8a:56:aa:06:2c:37:62:86:
f5:fc:11:d4:c1:1d:c5:b5:cb:2d:53:2f:32:c3:3e:
73:c9:33:90:0a:17:f2:41:40:52:7c:88:0b:54:28:
2c:a9:66:29:2e:19:93:2e:fe:09:9f:71:ec:22:12:
e7:35:82:17:81:31:75:60:04:91:d5:e0:fa:dd:e1:
14:9b:7b:49:8a:59:0e:c7:25:6a:79:bf:d5:38:1c:
17:19:50:c5:2d:02:51:24:5c:cc:2c:7d:3c:95:bf:
d6:74:4f:9c:8a:43:b8:a6:d1:a8:ed:35:dd:5a:12:
01:24:8e:b4:40:43:9c:e3:b4:63:f2:68:35:20:b6:
c7:15:7f:66:cb:f1:75:1c:7e:c3:ee:c1:57:81:14:
70:99:12:9c:a3:86:18:db:b9:c8:49:07:a6:52:91:
96:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E9:51:A1:8E:BC:F1:F6:3D:2B:76:74:F0:B5:D1:E6:2E:B4:05:99
X509v3 Authority Key Identifier:
keyid:03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:2d:2b:b0:0f:7e:2e:af:78:5d:25:d6:d4:d3:b1:59:9b:b2:
b8:e9:09:59:61:39:8d:32:05:f1:87:2c:7c:70:1a:4a:aa:88:
2e:c3:3f:d5:ce:90:f9:a5:da:32:f0:11:59:c4:b7:15:45:dc:
80:87:31:d2:2c:30:b5:9c:4e:ff:be:21:cf:e4:b4:fd:a0:be:
84:c4:5e:54:8f:1c:7c:a5:42:cd:d1:62:fe:8e:52:e5:b2:c8:
1e:d8:9f:1d:93:6c:98:8a:83:34:c0:77:32:25:19:fe:cc:3d:
3d:0d:b0:3c:b4:dd:f0:01:32:4f:e8:87:0f:98:0c:0c:67:e1:
96:7e:cc:9c:68:68:72:aa:c6:3a:30:4d:74:8a:27:1c:03:1b:
b0:fc:f0:ac:ec:ba:f0:9b:32:4f:10:78:79:a9:bd:43:0f:92:
94:e3:8e:b0:0e:67:58:8b:15:36:05:69:72:93:d2:ad:85:e1:
15:59:f1:10:5d:d2:e9:c4:8d:03:0f:08:bf:24:b2:a7:d6:20:
a4:38:7e:0e:f7:cb:e9:a5:40:59:f0:e1:dc:1a:1d:d7:3c:50:
e0:10:0e:4f:7e:b1:7a:31:1f:fd:91:3f:1c:e7:88:39:67:42:
85:6f:93:b3:d3:a5:72:ae:40:8a:10:f9:49:a2:2f:d6:c0:68:
c6:1e:be:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:47 2025 by rpki-client