Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
File: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft (raw, json)
Hash identifier: PWuZPzfSVes398XNxiWU5bZd4ToSk9miiHA1FCEwwF4=
Subject key identifier: 9B:DE:C7:FB:30:A7:E6:01:8C:E1:CE:78:EA:3F:FB:FC:E9:5E:FD:E9
Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Certificate serial: 019A00354F3D4B02CF6F033A47F48CEA9B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 06:01:24 +0000
Manifest this update: Mon 20 Oct 2025 06:01:24 +0000
Manifest next update: Tue 21 Oct 2025 06:01:24 +0000
Files and hashes: 1: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl (hash: oHrEggn96D9o/3zko/NXigsh3Oyqb8QrdldPwfVm0Og=)
2: eB3vCKwTA_4LHzl8qmjJhPE1E0I.roa (hash: 4iTyC4OoX2gbX1y0Qqu+BwBX8s/wE3y91+xS9nzRcWU=)
3: p8zRssL-qoCfvvI_dtLWUNgx7c4.roa (hash: zYGisfdidI1eM9pSCirssYszt8G/y6UD9xrE/AACroU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:4f:3d:4b:02:cf:6f:03:3a:47:f4:8c:ea:9b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Validity
Not Before: Oct 20 06:01:24 2025 GMT
Not After : Oct 21 06:01:24 2025 GMT
Subject: CN=9bdec7fb30a7e6018ce1ce78ea3ffbfce95efde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:aa:75:e6:25:23:60:6e:3b:33:3e:66:cf:61:
56:76:c3:dc:f6:08:d3:1c:6d:8e:f2:e2:c0:15:58:
19:d8:d2:cd:55:cd:02:31:80:60:84:7c:c0:c3:31:
4e:1f:34:73:b5:7e:bd:cb:9d:ef:11:dd:0c:5a:98:
6f:e4:43:f6:7a:c5:74:4b:43:0c:54:1a:3b:f3:73:
66:61:2a:91:7f:5f:a4:97:28:42:f2:35:22:56:ac:
8d:38:33:cf:de:42:f3:ea:9f:07:cf:c6:b7:4c:85:
23:9d:64:33:f4:13:6e:d3:74:86:53:fd:e6:bc:38:
98:5b:01:cc:59:ef:58:e7:68:99:ef:5a:e5:91:3a:
84:b3:cb:98:38:9a:40:c8:1a:fa:ef:1e:70:e0:b8:
dd:92:f3:0c:08:6d:56:b8:b8:bc:64:d8:0f:e7:00:
9e:e5:30:0a:2b:61:29:a0:7b:b2:64:1a:a1:49:ee:
49:ff:bc:76:84:68:9a:a0:1a:a1:54:f5:87:9c:d1:
29:e1:d9:c2:9d:86:6e:5d:ff:97:9e:b8:70:d9:40:
25:ba:01:e3:27:2c:e0:79:03:30:ed:ef:3b:03:17:
14:0a:e5:a2:04:55:2b:0e:59:19:86:60:49:04:38:
b2:94:a6:d8:56:da:f9:bf:e3:52:f6:c1:ee:e8:3d:
a7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DE:C7:FB:30:A7:E6:01:8C:E1:CE:78:EA:3F:FB:FC:E9:5E:FD:E9
X509v3 Authority Key Identifier:
keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:80:dd:69:c4:26:57:a2:0a:1b:ae:72:1d:12:6e:49:56:61:
ea:97:df:32:c0:4d:fc:de:2e:24:4e:a7:ce:f8:18:d3:4c:31:
6d:1c:7f:9e:89:3c:7d:a6:19:e9:50:ec:19:0f:d7:58:71:d2:
83:26:2b:59:f0:13:e5:32:22:0e:56:33:11:40:01:15:39:95:
e6:03:c4:9e:98:66:a4:c0:5e:94:bd:ec:75:05:b7:df:9b:28:
33:d8:9b:c3:f4:0c:be:cf:cd:11:36:11:40:b3:2b:d8:7a:18:
7e:49:54:2b:71:75:8f:36:ff:c0:d3:6c:f6:33:4e:90:84:04:
ad:0c:f0:cd:6b:9e:0a:44:1c:da:54:75:0c:7f:94:75:f6:bc:
6e:d3:11:2f:ff:76:c9:c5:29:13:f5:f3:54:49:2d:b7:1d:88:
fa:96:41:f6:7b:b0:c6:3e:04:76:0e:c2:db:70:15:7c:a6:2d:
f4:cf:1c:01:53:a4:69:4b:bc:a9:58:aa:db:f2:89:f9:b8:c2:
80:f4:08:52:19:c9:09:1a:21:c2:4d:cd:29:bd:10:48:c2:07:
d6:f0:f0:91:5f:6c:d9:b0:0a:17:ba:ac:a7:57:97:36:6e:7c:
91:b9:38:a9:bf:e0:1a:86:5d:7e:8e:a2:b6:4a:bc:53:50:16:
da:ae:f1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:18:00 2025 by rpki-client