Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
File: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft (raw, json)
Hash identifier: C+4hHhyH2ETBQE7ECdZ/Z283cRFFt3axCkACaXbKEQU=
Subject key identifier: 30:AC:41:E5:DC:EE:A3:1A:47:3C:56:8F:A5:A3:75:8D:5A:35:09:66
Authority key identifier: DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
Certificate issuer: /CN=dc327af32a98492757b200ea040db24ec3136592
Certificate serial: 0199FE1048B1EA3DC38AB7458BF9648DB045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
Manifest number: 04BF
Signing time: Sun 19 Oct 2025 20:01:44 +0000
Manifest this update: Sun 19 Oct 2025 20:01:44 +0000
Manifest next update: Mon 20 Oct 2025 20:01:44 +0000
Files and hashes: 1: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl (hash: IXL8/2V0008ROVbkSYVRHOk5HuoXmoNUfyVDFtU7M9o=)
2: 8W-Z7iZTKA-3rkNjiAd5VURXMsw.roa (hash: 2BY/rA9giuFltjXSROUw0wjIihHos+N8ZqL5OdXbUVw=)
3: SiGDnp8oSt95ArckPVGAAWtJUNs.roa (hash: j9ZTEJfSb12eUtJGUY9GVfUETUmyTkhHBnRZ+wXplM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:48:b1:ea:3d:c3:8a:b7:45:8b:f9:64:8d:b0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc327af32a98492757b200ea040db24ec3136592
Validity
Not Before: Oct 19 20:01:44 2025 GMT
Not After : Oct 20 20:01:44 2025 GMT
Subject: CN=30ac41e5dceea31a473c568fa5a3758d5a350966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dd:23:42:29:84:56:a0:19:d2:9c:0b:56:71:
88:f5:6c:ee:55:76:a6:56:38:72:94:f8:3a:d8:06:
c5:60:a0:dc:b6:88:cf:01:ac:a7:e8:50:fd:bd:28:
7b:47:60:51:de:61:bd:87:d4:29:aa:74:b0:85:dd:
32:e8:19:f7:a3:e1:ef:9d:d0:f0:60:a5:76:de:ed:
a4:a8:92:04:be:ce:ba:96:93:7b:b3:80:e9:cb:3a:
f1:7a:8e:d2:dc:a4:25:aa:3b:75:c2:9c:d5:38:30:
fb:70:3f:63:30:49:71:02:ce:12:51:4d:84:b4:7e:
ce:59:ff:8f:04:3a:ec:72:26:3e:20:9f:b2:8d:b8:
a5:e0:ba:fa:10:12:0b:2a:3b:41:f7:65:ec:6c:9d:
48:96:f8:0c:9b:d8:85:79:fc:9f:e1:05:2e:89:43:
ab:f6:2e:16:3a:7b:61:cc:05:17:42:42:95:6d:07:
58:0a:96:74:96:28:5c:0a:76:6b:9a:7e:b9:1f:8a:
4e:86:49:8a:e6:20:96:38:70:76:89:04:fb:42:fc:
c9:4a:23:03:f2:f4:89:f2:22:a1:76:52:fd:d2:3a:
0f:74:0e:55:b6:10:c2:98:a1:da:56:ca:ba:03:9e:
0b:2d:dc:b5:9e:aa:2f:13:7a:a5:9b:24:0c:8d:68:
41:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AC:41:E5:DC:EE:A3:1A:47:3C:56:8F:A5:A3:75:8D:5A:35:09:66
X509v3 Authority Key Identifier:
keyid:DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:11:11:e5:61:41:53:cc:49:e3:e8:36:2a:d2:40:b8:ff:80:
5f:c8:02:c0:43:ba:43:1d:48:50:f5:45:9c:80:dc:83:46:5f:
04:25:d8:95:ca:c7:5d:09:73:5f:25:d2:80:c6:b1:08:83:35:
20:44:9b:48:79:82:18:8a:28:9c:35:24:b9:d9:0e:7f:d0:4e:
e9:87:4f:16:95:b6:ae:3d:eb:1d:20:12:7e:d9:4e:06:82:5d:
17:72:26:d4:c8:ac:dc:16:81:e8:58:5b:5b:2f:38:ec:1b:f9:
54:7d:a0:f4:b1:ad:30:70:68:8a:da:44:80:bf:55:ad:eb:ea:
70:32:00:99:71:95:8d:92:62:b3:ee:6f:31:cc:7b:f9:08:78:
cd:81:18:f9:c1:d4:a2:47:b7:e4:30:b9:bf:f8:cc:86:73:3f:
bb:b8:ee:fb:da:d5:05:e4:ea:a9:fb:0b:f8:bc:56:8b:2e:ba:
e8:cf:b2:a5:36:8e:54:b7:7b:19:ad:77:62:5c:aa:e3:4b:7b:
7d:56:0d:59:55:70:e4:15:50:3f:54:3c:79:97:e3:fe:b4:17:
ef:38:88:03:97:c5:3e:dc:10:f1:2a:2f:49:8e:54:35:ac:86:
51:9b:51:c4:d0:77:8e:76:62:fe:46:52:45:32:ab:73:c8:e9:
ca:52:3f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:22 2025 by rpki-client