Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
File: 3SBri9IhV0yWWSRDGVuQBXacck0.mft (raw, json)
Hash identifier: +UPm75uPOTwuPfMB4/jKrxrFryALg74OO+ymscz2BAU=
Subject key identifier: 27:5D:D3:1F:39:EE:2D:BB:B0:47:69:B2:B1:52:D2:62:1E:39:3F:84
Authority key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
Certificate issuer: /CN=dd206b8bd221574c96592443195b9005769c724d
Certificate serial: 0199FE7D8D464DF419D28A28B6A62F7D137A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 22:01:05 +0000
Manifest this update: Sun 19 Oct 2025 22:01:05 +0000
Manifest next update: Mon 20 Oct 2025 22:01:05 +0000
Files and hashes: 1: 3SBri9IhV0yWWSRDGVuQBXacck0.crl (hash: fmZ/BJOpVOkPqjh8pqUjO3+C8J2Wxnsk1/Q6nAMUrTk=)
2: 5cvTQhZb21i8dsjZHSMpM2dxt9k.roa (hash: Jg1xw/OZvnd1OLClxYEzrvwZ5HBLqquVy880Rp6Vr+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:8d:46:4d:f4:19:d2:8a:28:b6:a6:2f:7d:13:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd206b8bd221574c96592443195b9005769c724d
Validity
Not Before: Oct 19 22:01:05 2025 GMT
Not After : Oct 20 22:01:05 2025 GMT
Subject: CN=275dd31f39ee2dbbb04769b2b152d2621e393f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:93:6e:37:5c:47:17:39:30:e7:9c:f2:c7:
9a:1c:b3:c6:99:4f:1d:c1:a7:14:0c:65:34:3c:18:
fa:66:99:e7:f1:0e:96:e7:d9:ba:88:21:bd:ce:7b:
7f:c2:1e:3c:be:1d:7e:73:14:8d:0e:a0:bd:6b:0d:
a3:c8:6b:f3:d8:f2:e7:96:8d:32:4a:da:b3:7a:57:
ea:72:bf:b1:d6:17:35:af:4e:e2:49:64:3b:02:41:
4b:5c:47:50:f9:9e:31:02:e2:d5:cb:bd:d7:0a:d3:
99:42:13:81:fa:60:bd:c5:65:eb:51:0d:8c:ac:b3:
1d:74:b7:75:ec:d8:b3:e3:65:70:af:71:45:1b:d0:
95:55:fa:b8:54:46:f7:a7:c1:1c:28:28:23:30:4b:
a7:49:c2:61:d5:e4:18:0c:9c:b5:d4:6d:31:f1:c4:
10:70:9b:cb:9e:cc:f9:33:82:db:29:de:64:38:8e:
a2:24:63:a7:3f:14:a0:29:40:74:d2:09:56:30:ae:
5c:3a:1a:4a:8f:d9:90:5f:49:ef:c6:b6:ad:7b:4e:
51:99:45:cd:a1:a9:a1:25:61:95:48:cb:cb:f5:66:
55:9f:c7:33:ae:e5:0b:a4:b2:c5:a1:b6:41:7d:ce:
a7:a8:6d:93:19:b3:b3:8d:10:b8:1a:84:64:99:84:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5D:D3:1F:39:EE:2D:BB:B0:47:69:B2:B1:52:D2:62:1E:39:3F:84
X509v3 Authority Key Identifier:
keyid:DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a1:77:f8:b3:fc:dd:19:1b:b0:68:fa:9b:81:cc:fe:7e:53:
80:45:1e:5d:ab:a7:fd:ef:90:c6:ff:cf:e9:b4:d5:11:29:85:
30:12:db:7c:4c:b4:ee:7c:aa:81:6c:e6:1b:a1:68:d5:1b:a8:
b3:ba:c8:1f:9a:23:d9:f8:c0:29:7b:1e:1f:1b:11:cd:ac:7c:
86:cf:12:24:7a:e5:5b:7d:b4:fc:77:6f:40:ae:83:45:48:fb:
fe:2f:6c:65:15:9f:83:17:21:f0:89:df:1e:e9:c2:dc:88:3f:
4c:b4:e6:56:6b:ad:bf:38:bd:52:46:62:a4:c4:e9:56:dd:fa:
89:17:ea:25:67:9c:40:9a:ca:d0:bb:af:d0:86:91:6e:3d:83:
e8:38:26:79:80:cc:05:b9:79:90:60:dd:24:11:32:4c:c3:9c:
af:b7:4c:8d:87:9b:14:d9:c4:06:e1:3b:be:6d:cb:ed:85:79:
86:cb:b3:16:ea:61:f5:db:1e:fd:30:ac:e4:fb:b9:98:d9:b2:
31:73:cd:1b:ea:c4:c6:0e:2a:ee:85:7b:a9:3b:13:e2:84:82:
a3:72:c3:7a:f6:be:d1:cb:28:c9:cd:1a:77:c9:7b:b2:89:0c:
74:d9:84:ed:ec:22:8b:29:58:2b:23:bc:1f:20:78:21:c2:c8:
9b:e2:3c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:42:01 2025 by rpki-client