Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
File: 3BZzebWR6VcQz38x3i7HP_v7Wuc.mft (raw, json)
Hash identifier: JbvOKXoRQ2IPEogMKGmJ3rnBXNG2cqkzenllujbEQ/c=
Subject key identifier: CC:4A:F0:B0:AA:05:C8:B6:9F:36:C7:FF:2A:15:2C:88:89:A1:2D:CD
Authority key identifier: DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7
Certificate issuer: /CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7
Certificate serial: 0199FDD9E32C0DD78F0C306596E15511CA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
Manifest number: 0804
Signing time: Sun 19 Oct 2025 19:02:19 +0000
Manifest this update: Sun 19 Oct 2025 19:02:19 +0000
Manifest next update: Mon 20 Oct 2025 19:02:19 +0000
Files and hashes: 1: 0Le1rXg7oJe8K6MPap3I2ZdiV4k.roa (hash: 4I6jD4OL89hrVHmrCQFbzYD7IPae2EdBGBhAfTKl1h4=)
2: 3BZzebWR6VcQz38x3i7HP_v7Wuc.crl (hash: gdLJmjOyt3qli+jdYKH9y5Z4FUZ1WXptGSLTMXw288c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:e3:2c:0d:d7:8f:0c:30:65:96:e1:55:11:ca:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7
Validity
Not Before: Oct 19 19:02:19 2025 GMT
Not After : Oct 20 19:02:19 2025 GMT
Subject: CN=cc4af0b0aa05c8b69f36c7ff2a152c8889a12dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d5:7c:12:42:81:5b:0a:db:1d:22:2c:76:fd:
15:0c:b6:c4:cc:fa:c6:9a:c5:56:40:68:e2:bf:42:
93:c0:07:7a:37:86:3a:42:f1:e1:c8:3d:ad:4b:ba:
15:af:26:5e:c1:eb:cf:bf:e1:0f:cf:cd:ff:16:42:
3b:7c:c4:8a:34:4e:24:47:37:e7:70:60:2f:f9:a8:
d4:ff:14:67:96:1e:17:4d:0e:c3:d1:f9:48:3e:68:
a9:0e:9e:a9:9d:b5:9a:f5:ac:43:0c:ca:02:0f:f3:
49:66:38:ee:80:58:b9:ca:c2:4e:f4:10:d6:ec:d9:
af:c0:f9:4a:b2:24:18:6f:26:9b:83:db:ef:e3:d6:
88:ef:e8:65:58:0a:ef:8a:b8:eb:53:75:81:96:60:
05:de:11:91:03:c5:cd:90:db:55:eb:50:74:31:40:
a7:84:7f:28:64:ee:b0:e3:f7:73:e9:07:6f:02:2d:
a3:9e:0f:07:00:f1:56:cd:ba:d8:62:b1:3d:52:3b:
22:3c:8b:6f:c6:38:20:24:de:e2:da:4e:55:58:65:
cc:e5:c3:f2:6b:66:01:b5:77:5e:1e:3a:a1:c6:45:
43:16:61:f2:12:d4:12:13:d5:03:ae:02:c9:48:6e:
f2:ab:fa:9e:8d:b3:2d:b1:fb:12:5e:1b:ea:91:ec:
0d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4A:F0:B0:AA:05:C8:B6:9F:36:C7:FF:2A:15:2C:88:89:A1:2D:CD
X509v3 Authority Key Identifier:
keyid:DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4b:b2:02:40:4a:08:c9:b6:ee:a6:08:43:00:21:41:e0:e4:
33:f9:5c:d3:21:33:ac:83:d7:95:93:05:02:94:85:8b:50:79:
b3:93:e3:34:b5:5a:ed:af:0d:22:6d:b6:69:43:ec:d1:fd:20:
b1:a9:b7:54:8f:80:87:4d:48:a9:ea:f0:2f:97:53:63:0f:e6:
68:a9:4d:18:a1:68:c0:39:65:fc:ac:12:78:fe:c7:99:db:01:
bc:e1:4e:e5:b9:4a:e4:c2:eb:92:8e:bb:ad:51:56:9d:01:c5:
cb:e2:6a:65:77:ba:3f:98:cf:f7:44:25:40:aa:30:2f:e7:7b:
34:c8:f0:e3:a0:55:9e:f3:4e:33:2b:59:11:b8:27:83:13:43:
4c:31:c0:b9:5e:e1:af:46:ac:42:84:89:9c:f5:36:40:ad:a5:
3d:09:e1:0c:5e:f6:77:15:4a:9f:7b:a4:5c:b9:54:68:29:c8:
64:ec:a3:68:e3:a8:b8:e6:86:2b:07:69:7a:8f:84:be:20:ef:
75:5d:86:49:db:0e:88:18:18:f6:a9:9b:aa:22:8b:2c:0f:d6:
d5:9a:ae:48:b4:d6:14:c3:fd:47:e3:a9:e5:68:31:8b:d5:04:
ed:2a:2d:f5:3a:c7:58:e9:1a:e0:45:43:af:da:9e:9c:e4:ac:
f3:79:27:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:04 2025 by rpki-client