Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
File: 3L-wBIqNpVb9nT3xB3QC-EP11wM.mft (raw, json)
Hash identifier: NZfjeoSzitIWUPYEq4gc1fhOn3rHuLKFzcGbGtPqx50=
Subject key identifier: 37:3A:AC:8F:4F:5A:BF:5E:96:F7:A7:5F:E6:41:83:ED:0F:EB:09:3B
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial: 0199FC8F43B906E371833D45CFE8217EB2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 13:01:11 +0000
Manifest this update: Sun 19 Oct 2025 13:01:11 +0000
Manifest next update: Mon 20 Oct 2025 13:01:11 +0000
Files and hashes: 1: 3L-wBIqNpVb9nT3xB3QC-EP11wM.crl (hash: Y9QsRNCOkMc+70uaWTGC8xjt1akFF1LISvJckgseqNQ=)
2: 4wUZf81dDkIeAPvjdALKJO_OOPc.roa (hash: HqwNO12raLEf5yNUI8l+TH+b+XfQFpo8GF0GMhT1w60=)
3: Do4PLeA5o1GoY13K0QrZV2b74eA.roa (hash: B+FCeD+X05tR69YheF7VQWedc1p5umVaXn20qWaAN1Q=)
4: hbNbIVCjEN8lItMWW7GZDYik4tU.roa (hash: /QjTSPpaK1t0LSYMylHsSi3d6TtpowMr+RmtBrzOYQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:43:b9:06:e3:71:83:3d:45:cf:e8:21:7e:b2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Validity
Not Before: Oct 19 13:01:11 2025 GMT
Not After : Oct 20 13:01:11 2025 GMT
Subject: CN=373aac8f4f5abf5e96f7a75fe64183ed0feb093b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:0c:51:a1:ca:b9:53:f4:80:97:bd:3d:ca:
e0:f2:4f:f6:db:ad:0d:8d:71:a5:e2:c5:0c:65:4c:
92:ad:b0:96:94:28:3e:05:2f:23:38:b2:56:cf:cf:
6d:ee:be:fa:c2:f9:e0:4d:c0:d8:72:68:bf:59:1f:
84:0d:bb:04:3d:66:12:22:80:a1:ab:22:54:00:aa:
27:ec:df:c7:35:f0:1d:be:6e:98:f1:1d:b6:c9:c8:
31:da:5e:06:0a:94:2a:44:f4:38:88:99:02:d6:df:
e1:2c:b2:13:26:17:58:13:cf:45:e9:a1:f2:44:f1:
fc:b2:40:97:9d:3a:b5:b6:95:a7:64:be:0a:6b:51:
0e:51:8e:38:6d:59:9f:4d:0c:d2:6d:85:56:b7:1a:
16:ee:89:ca:a9:3b:e0:88:b5:ed:b7:a6:55:27:8f:
14:48:5a:fd:97:67:fb:21:7e:1e:4d:db:12:70:c1:
4f:cc:a8:4b:30:be:1d:65:78:f5:1f:7b:b5:9b:96:
72:de:cf:a4:98:6d:b6:e8:fd:a9:a9:85:69:a7:62:
44:a4:6e:65:8a:75:bb:9d:92:9f:c5:dc:e7:5e:a1:
dd:5e:cd:74:60:8d:f6:d7:6d:14:e4:91:2f:9e:86:
34:4e:36:5e:64:93:78:e6:bb:94:40:b4:7b:3b:85:
71:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3A:AC:8F:4F:5A:BF:5E:96:F7:A7:5F:E6:41:83:ED:0F:EB:09:3B
X509v3 Authority Key Identifier:
keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c9:9f:85:28:f7:27:61:6b:c6:7e:bb:e4:a7:80:bc:9d:35:
a4:fe:a5:86:8e:ba:dd:39:f8:0b:7c:7a:7f:4d:b2:c2:81:1a:
06:b0:c5:00:27:8b:88:32:9d:e0:20:aa:8c:d9:ec:86:13:0f:
39:17:30:a6:ea:e9:e4:d3:ed:41:5d:0d:67:b7:cd:92:61:23:
56:97:bc:5e:dd:cf:d8:26:38:7f:9e:2d:96:59:c7:5f:a7:19:
5f:39:43:06:03:0e:2e:6e:de:51:fa:fc:b1:93:e5:45:3c:96:
3c:c1:1b:47:a3:17:1d:1e:8d:99:1f:05:e3:7d:77:1e:1e:44:
28:ea:51:c7:37:eb:f7:51:01:3d:3d:8f:9b:93:cf:d8:64:70:
49:63:38:9a:ce:27:c9:56:d3:79:cf:bb:cd:54:56:50:c7:c8:
7e:5e:88:c3:79:b9:59:e3:f8:55:4b:48:a8:a5:63:3e:00:0f:
71:4d:88:43:d8:82:bd:41:a2:d8:a2:a4:30:cf:1e:48:55:ab:
e5:f5:97:1e:61:e4:ce:da:70:49:31:69:bf:38:01:7a:a1:d4:
92:72:96:9d:85:3d:87:64:a4:f7:48:92:7f:8d:4b:b4:49:6d:
be:8c:e0:f9:b2:63:03:93:69:a8:63:aa:76:a2:17:f4:27:97:
44:ae:7f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:56 2025 by rpki-client