Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
File: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft (raw, json)
Hash identifier: gUKLZ/w8n3J0PzAXPNJqQVu83sU/R25PHyJPnC5G2eU=
Subject key identifier: 09:90:5E:31:7E:59:BA:76:C2:DC:A0:FA:83:D5:76:1F:BA:62:2F:D2
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Certificate issuer: /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial: 0199FFC7897DF3914E5FCBA6E965028A526E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
Manifest number: 067E
Signing time: Mon 20 Oct 2025 04:01:30 +0000
Manifest this update: Mon 20 Oct 2025 04:01:30 +0000
Manifest next update: Tue 21 Oct 2025 04:01:30 +0000
Files and hashes: 1: 5Glc2B08f5NNNCUv9fqw3ZiV604.roa (hash: qKV0O/uQL4URhMfYX9S0ZOufXlqcIe3xRJXIrY3RJwE=)
2: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl (hash: SGPp9JSjAExV1TpGNxGEOplu8UmawiGRuSF0uFmNSZI=)
3: wzyOntPyHe2_vob8ftvNa_NHz8Q.roa (hash: jsopFRalC2C1iJbieVLkelaTdE/c46JWYuJBBa2M4iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:89:7d:f3:91:4e:5f:cb:a6:e9:65:02:8a:52:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Validity
Not Before: Oct 20 04:01:30 2025 GMT
Not After : Oct 21 04:01:30 2025 GMT
Subject: CN=09905e317e59ba76c2dca0fa83d5761fba622fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5e:49:03:88:12:81:d1:2a:27:90:77:10:6b:
4d:65:c8:9c:09:13:70:a5:92:af:5e:d0:8c:f3:1d:
fe:a1:32:2e:f4:ef:23:83:13:09:dc:23:f3:07:4e:
dc:91:92:7a:f4:9f:b8:8b:04:a6:fe:76:08:6c:d7:
1e:4c:92:d9:cf:b1:e2:a2:82:1a:db:3b:a5:33:35:
26:a3:7f:da:b8:6a:48:26:f0:65:2f:aa:16:78:dc:
29:97:7c:3c:35:2c:2f:6b:9c:fa:66:ef:c8:38:2b:
c7:32:fa:90:10:7a:3a:74:4a:35:a9:40:00:50:ca:
3c:b4:fd:d5:4f:4e:a1:c5:5f:3b:69:4c:74:19:99:
a6:2d:1c:62:c8:c6:ea:8d:f7:af:57:50:00:f1:26:
15:9d:0c:eb:62:2d:91:7e:4d:fb:82:e6:51:16:4f:
bf:47:8b:c2:d5:09:35:34:c7:78:f8:b9:af:71:e9:
6b:ed:43:ed:f7:62:3b:9a:73:ca:c7:ec:66:bc:f0:
a3:f9:d2:b6:71:bb:f3:88:99:64:e2:13:38:e3:f9:
80:0d:63:14:ba:1a:b5:c7:42:3d:c1:3a:9d:eb:7a:
65:ab:05:6c:b8:c0:dc:06:7f:c2:81:e0:79:2f:87:
2f:68:b3:e0:06:ea:4d:c3:e2:c3:7e:ca:96:64:e7:
47:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:90:5E:31:7E:59:BA:76:C2:DC:A0:FA:83:D5:76:1F:BA:62:2F:D2
X509v3 Authority Key Identifier:
keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:cd:ff:41:5d:c4:f8:9f:77:60:53:58:60:5f:c6:55:16:69:
38:68:eb:cf:d9:64:6e:7e:ca:e7:7b:92:39:6d:77:3d:ba:61:
d6:bd:df:0c:75:e3:3d:08:08:01:d3:85:cb:62:3d:1b:7c:60:
a4:d8:ba:3b:1e:4d:db:be:eb:19:6f:09:7d:51:c6:89:d1:34:
f6:b9:ae:da:58:8a:bd:24:72:fc:06:e6:30:67:13:f1:21:e2:
3b:d6:52:94:67:a6:1e:4b:53:2f:33:2c:06:ee:c7:a0:4e:42:
2d:ca:d2:4b:0d:96:3e:a7:d1:f4:2d:4d:1e:81:c5:de:ff:53:
f0:1e:08:5b:f7:8e:ba:8a:23:28:1a:26:5d:2b:58:85:8e:91:
3f:bb:21:62:c3:be:7a:b1:3b:72:27:54:d0:cb:f1:f2:4b:e3:
8a:5b:64:f1:c6:2d:16:6a:46:a6:a3:85:4a:63:c9:7d:38:f2:
8d:3f:8c:00:37:bb:e7:07:c1:0f:ff:d3:28:9f:d7:09:f6:c2:
53:7f:7f:ed:97:cb:0a:0b:9b:26:5f:e3:52:8c:4b:7b:ec:66:
68:27:b2:76:2b:99:98:92:a3:bc:25:61:2b:47:d7:88:97:b1:
10:79:6b:bd:37:30:fc:1d:70:51:12:a7:86:e8:a6:07:32:cc:
ab:9e:d9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:44 2025 by rpki-client