Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
File: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft (raw, json)
Hash identifier: pkI4Az2lUmoAaJluIbpylpfZ0gFep9cgTVpbbC5Br1Y=
Subject key identifier: 46:2E:AD:69:ED:C8:B3:56:55:E4:16:5B:F7:2A:DF:AA:BD:98:39:34
Authority key identifier: DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
Certificate issuer: /CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Certificate serial: 0199FBEBFB8AC75F745B38275F8F6EEE46AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
Manifest number: 0F69
Signing time: Sun 19 Oct 2025 10:02:50 +0000
Manifest this update: Sun 19 Oct 2025 10:02:50 +0000
Manifest next update: Mon 20 Oct 2025 10:02:50 +0000
Files and hashes: 1: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl (hash: 2xSkSlcNItEwbQZOeWlLTBpt4zqFaFWySpLhF2lqbFE=)
2: xEogw3XOMF8942N9C953fQ9p_WQ.roa (hash: gm/zrEw7lZ+SPbWVu4mrs06eSMAYkDfSw1DjLnUzlh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:fb:8a:c7:5f:74:5b:38:27:5f:8f:6e:ee:46:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Validity
Not Before: Oct 19 10:02:50 2025 GMT
Not After : Oct 20 10:02:50 2025 GMT
Subject: CN=462ead69edc8b35655e4165bf72adfaabd983934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:4d:88:ea:f2:d1:9d:21:7b:ec:14:17:c3:
86:2c:51:55:ba:00:11:b6:a9:0e:60:9c:4c:dd:bb:
7f:93:5e:54:2e:54:8c:8c:be:b9:23:19:d5:99:69:
1f:59:99:49:89:3c:98:47:e1:64:29:c9:b5:1e:cb:
1b:aa:5b:3f:fc:5f:f9:70:b3:f0:37:92:6e:ee:f7:
e4:e1:1b:78:43:29:47:ad:be:2e:48:e7:7d:b5:4f:
c8:24:72:40:b7:98:dc:12:0a:99:42:2a:6f:f6:6a:
bf:e4:89:14:c8:5b:f2:28:2b:52:d6:db:e2:4e:ee:
49:0d:8b:a7:a4:16:f4:cc:24:70:30:28:71:33:82:
19:07:57:90:f5:42:e4:14:81:94:b9:f3:d9:31:09:
e1:ee:c4:42:b6:a2:2c:fc:4a:0f:ff:39:12:3f:76:
59:41:c5:2a:00:af:3c:a6:95:20:81:f6:e8:fd:f0:
01:85:d9:37:bd:d3:2b:db:65:d3:52:c5:67:be:c8:
8b:c5:6b:1d:6a:c3:a1:66:d4:cc:4a:b5:43:0e:fb:
b5:7d:54:bc:7e:2a:ce:dc:87:ed:06:d3:cb:26:00:
47:e4:b3:94:29:67:78:6c:b8:7c:47:cc:14:55:8b:
49:e4:7c:90:51:d4:8b:b8:6a:5c:46:09:93:7f:1d:
63:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2E:AD:69:ED:C8:B3:56:55:E4:16:5B:F7:2A:DF:AA:BD:98:39:34
X509v3 Authority Key Identifier:
keyid:DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:73:d3:33:e5:31:5e:2d:94:c6:85:dd:ad:cc:51:12:24:f1:
f2:1e:a0:25:56:d6:5c:a4:34:14:f0:ad:16:7a:53:ff:41:ca:
75:63:3d:11:6b:c3:ce:9e:93:56:9d:5e:85:d9:82:cf:80:e9:
60:ea:bd:d1:0f:0c:47:8e:bd:38:ee:bb:fe:ae:d4:f9:ac:bd:
c0:e6:77:f0:fe:f6:1b:36:bc:7a:00:67:8f:cd:85:a1:8f:20:
12:13:50:a5:aa:a2:c4:18:b4:d4:5b:8a:17:eb:33:e3:fa:1d:
a0:3a:1f:8e:7a:b4:9c:83:bb:d8:de:42:55:e1:9b:00:65:cc:
56:12:0a:60:f8:77:b7:1d:0c:9d:24:00:d5:a1:ba:e4:c8:1d:
7d:bd:44:d0:95:91:2d:2e:92:38:4f:50:05:48:88:8e:18:0e:
83:96:f5:e4:a4:6d:60:96:2f:a2:68:da:2f:5c:7a:e3:d2:d1:
63:15:5e:42:52:77:b0:94:e8:ae:2c:fb:49:bd:4b:4d:a5:44:
6d:2b:87:85:b1:2a:7c:be:45:c5:27:de:a6:b3:06:20:92:d6:
fa:63:da:43:54:ff:a4:68:96:c4:06:9a:ac:ba:ba:bd:27:b5:
25:f6:ee:42:5d:91:5f:ea:8c:62:4a:67:de:52:76:97:55:ce:
5d:4f:4b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:23 2025 by rpki-client