Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
File: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft (raw, json)
Hash identifier: lgV1yDqp1OfYWLqFFllDkLv7JOZwRqpY6jRauHUFtzY=
Subject key identifier: 31:4A:A8:13:D0:00:9A:47:38:11:1A:F8:C9:BC:FC:72:8B:6D:FD:0F
Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
Certificate issuer: /CN=ded353e2f5d318c348772a8ff105aa70719e4135
Certificate serial: 0199FBEAED4708EE99FCBF8760CD367A141F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
Manifest number: 1508
Signing time: Sun 19 Oct 2025 10:01:41 +0000
Manifest this update: Sun 19 Oct 2025 10:01:41 +0000
Manifest next update: Mon 20 Oct 2025 10:01:41 +0000
Files and hashes: 1: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl (hash: UwLPK0knNSZjcX3Wzhl3Y5alvjoCcR5W4EHO8iayf9c=)
2: 7iR9W4MA5fEoG9NRWf9E-32Ma5Q.roa (hash: osSdmDl/G/dF/W3n4ltU1jPl+UamVuVRPceUmIJCb+c=)
3: _WS_KUWo5VlHoso4BGtRKVhHyHo.roa (hash: EHMdLaq+K6Q6inb3xq+fso0i3zQ47TR+r4l4lfO+5pU=)
4: lwrL3dIIXO_mCBQdap7KZ_iDBFc.roa (hash: F6VpIkHy8PT/lwz9faa43UWmWxDgyYUpuXzG7yHnlKI=)
5: uLirnnwX72a0N3OriOBn_DEyQSk.roa (hash: 6+Yqbp1RGXrWNzgrWITGoM7VyJxkBiJJi44XDI1jM7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ed:47:08:ee:99:fc:bf:87:60:cd:36:7a:14:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135
Validity
Not Before: Oct 19 10:01:41 2025 GMT
Not After : Oct 20 10:01:41 2025 GMT
Subject: CN=314aa813d0009a4738111af8c9bcfc728b6dfd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:f3:58:ac:6c:22:e6:5e:ea:00:37:f4:23:
fe:b4:94:ad:c6:7c:69:4b:1e:22:49:9c:00:3c:47:
0d:3a:97:28:75:75:b1:52:09:d0:03:43:68:80:fd:
0b:11:76:7c:43:e3:64:8a:de:b5:13:da:af:e4:b9:
a5:22:8c:cd:63:5c:e6:7b:5b:41:ba:61:22:5b:78:
08:51:d9:ac:b4:da:7f:2f:bb:78:22:6d:a2:6a:16:
f8:9b:f2:97:bd:80:bc:af:c3:d9:11:7f:73:60:06:
46:b2:c1:6d:04:f0:75:40:c5:59:50:ac:6a:55:71:
22:98:2f:5f:3b:2f:e3:74:9f:38:0e:81:fb:f5:31:
26:30:4b:f3:0f:eb:62:74:01:63:b7:14:6e:e8:7a:
e8:11:a3:43:33:b5:02:8f:69:40:31:70:59:34:de:
c8:a1:1a:57:8e:21:fc:f9:13:30:5d:4c:bd:d5:bb:
f9:a2:1f:86:1d:c4:6f:68:09:d7:e0:a7:38:3d:52:
94:5a:03:22:50:d1:b2:94:cf:96:57:a9:3a:bb:51:
c9:77:11:67:68:c0:b5:b3:2f:0c:f3:67:77:68:62:
a1:63:96:77:e0:c7:4a:8f:bc:77:02:1a:9d:06:a8:
56:e8:4a:07:fa:ca:a8:a1:32:38:06:4c:88:ec:bf:
64:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4A:A8:13:D0:00:9A:47:38:11:1A:F8:C9:BC:FC:72:8B:6D:FD:0F
X509v3 Authority Key Identifier:
keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a2:08:5e:b5:6e:cf:9b:ea:f2:42:fa:39:fc:32:cd:a4:f0:
57:cd:f4:b8:fe:f4:c1:e9:0f:96:14:3f:a3:df:1c:2b:65:40:
d2:7c:ae:9d:fa:7d:ee:bd:86:be:29:16:68:69:0c:e7:bb:58:
2c:60:40:d5:45:47:e7:7f:db:8b:1e:b6:c3:21:97:55:ee:bf:
19:e9:f0:e4:bb:3c:9e:77:11:2c:72:94:e9:64:3d:6e:83:c0:
6b:ed:7c:55:7d:c4:99:49:85:91:07:d0:f8:ca:67:4b:4e:35:
1b:46:47:5e:2f:e1:56:15:c8:9d:86:93:93:4d:05:f4:20:c5:
44:a0:44:af:e3:dc:55:06:4a:9e:f7:0e:0b:8d:c3:e8:3f:6b:
87:7e:0e:67:7e:d7:dd:5e:56:c7:98:02:98:b8:75:34:09:10:
4f:8d:d3:c5:95:32:44:04:0d:9e:05:eb:8f:1a:c6:8a:c1:3b:
50:54:88:eb:35:5c:6c:69:f3:27:e9:7c:64:b0:66:43:58:41:
74:39:15:cc:a1:84:b3:b1:77:c1:86:09:23:2c:22:54:d7:be:
bd:21:c1:c9:de:96:b2:91:44:79:40:de:da:98:4b:dc:77:fa:
da:27:53:13:9a:96:b1:d9:0e:8a:23:99:f4:4c:4c:18:60:3c:
7b:ee:32:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:47 2025 by rpki-client