Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
File: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft (raw, json)
Hash identifier: notObOLyz55Nz8bMGxDqNAI9recRA2nOVgKPhcxFGPQ=
Subject key identifier: 08:0C:1C:77:6C:F0:72:EA:65:00:75:56:A6:A3:E6:9C:98:17:23:0F
Authority key identifier: DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
Certificate issuer: /CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Certificate serial: 0199FFC8999361DEE4F98DF459612F665DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
Manifest number: 01F7
Signing time: Mon 20 Oct 2025 04:02:40 +0000
Manifest this update: Mon 20 Oct 2025 04:02:40 +0000
Manifest next update: Tue 21 Oct 2025 04:02:40 +0000
Files and hashes: 1: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl (hash: b2SEJFi52F+I7XNF4bXgY6dOyWpIoyx22LsrZylZIEc=)
2: Hsu5uEPri8mQgaZ4Qzz1c8ZzqXs.roa (hash: DFoP5Rp4yqWzaWfGAIFOGX06a0KJXff63tIBuI2st8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:99:93:61:de:e4:f9:8d:f4:59:61:2f:66:5d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Validity
Not Before: Oct 20 04:02:40 2025 GMT
Not After : Oct 21 04:02:40 2025 GMT
Subject: CN=080c1c776cf072ea65007556a6a3e69c9817230f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:e6:45:91:b1:d2:f8:d6:a5:89:af:14:b4:
a5:33:56:2f:ff:8b:1e:4f:7f:f6:7a:4c:4d:d1:91:
59:ab:db:d7:b6:e8:35:14:2f:57:15:af:a6:8b:8b:
df:49:fd:25:ac:c9:3f:71:7b:4b:39:61:f2:46:4a:
f5:d5:c5:6a:00:57:01:31:f5:03:ca:79:ab:fe:f8:
30:9f:8a:19:2a:52:a0:fb:9c:de:8d:e2:da:aa:38:
01:59:b4:01:78:93:41:9c:ba:9f:c9:96:3b:92:61:
ed:be:34:17:39:b0:ed:55:4c:fa:65:3a:bd:65:63:
76:4f:ef:1b:b1:a3:14:3b:23:53:ce:32:2d:20:66:
28:61:d3:27:a4:18:8f:84:f3:2d:6a:fb:b6:84:40:
7b:a3:fd:4e:ed:5e:7a:3b:e7:ee:96:bc:91:7c:8f:
6b:60:20:70:83:b4:ff:9e:bf:bc:c0:8d:c3:b4:a1:
d6:e1:ea:b8:00:1e:ef:0d:71:d3:41:2d:43:5d:7c:
51:e5:23:56:24:a4:98:1f:13:b6:7d:9a:80:aa:bd:
43:ed:d6:ad:52:a8:af:d4:79:a0:9f:2f:0a:7e:cd:
a2:a4:7f:e3:9c:78:02:c4:6c:3b:cd:9e:fd:e8:4a:
a2:ed:bb:fd:95:42:c6:f9:d5:75:45:ac:b4:5c:f0:
2d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0C:1C:77:6C:F0:72:EA:65:00:75:56:A6:A3:E6:9C:98:17:23:0F
X509v3 Authority Key Identifier:
keyid:DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:33:53:e1:44:93:25:e1:81:a2:f6:c6:8f:4b:40:97:0e:ee:
81:58:ed:c7:ad:48:bb:5e:7d:77:b7:ae:f7:61:b9:77:9a:bb:
87:d5:a0:83:d2:22:eb:00:d4:b3:a6:fb:41:53:f3:b5:47:01:
11:eb:60:67:67:21:3d:a9:ae:4a:09:f9:90:a8:9d:f6:d5:21:
d0:bd:07:09:7e:b0:97:ad:fb:60:bb:66:f6:9b:33:51:3d:00:
3c:f6:24:d0:f2:fd:12:cf:d5:4e:38:18:61:70:10:ff:56:d1:
0e:cf:10:e2:b0:c1:ee:16:6e:55:98:da:9a:23:4b:87:ea:2a:
d1:72:db:42:46:1d:51:d6:dd:6d:94:85:00:bc:fa:c2:7d:6f:
86:12:94:1e:ae:f9:b9:5d:e9:d0:9d:91:25:8a:54:7d:73:7f:
7f:ba:ec:62:dd:b1:6c:77:2b:66:26:0c:ce:9a:57:8b:95:42:
7c:2f:58:e2:25:3a:dd:d4:8c:33:ba:2d:2b:66:75:91:f6:ce:
42:c3:ec:5f:cd:c1:39:e5:1a:da:9d:71:00:ad:6e:56:28:e8:
c9:e8:d1:45:a5:d6:12:68:bf:94:38:42:45:f4:88:f5:1c:f6:
fe:b4:64:eb:fb:44:64:5f:5d:5c:76:a8:7a:c9:64:57:14:13:
43:01:36:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:39:09 2025 by rpki-client