Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
File: 3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json)
Hash identifier: UC+6VmRragCdmiHmefdDUwhvVSMDeFi4QcdxO9jz1jQ=
Subject key identifier: E5:9F:BC:4F:FA:A7:B9:80:BF:DA:40:26:D6:ED:37:2B:94:1E:E3:D0
Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Certificate issuer: /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Certificate serial: 0199FF902739DB7CA46D348C0F453BFDC8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 03:01:01 +0000
Manifest this update: Mon 20 Oct 2025 03:01:01 +0000
Manifest next update: Tue 21 Oct 2025 03:01:01 +0000
Files and hashes: 1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: /fcccD/jsoFx86qiNNjQedXb7hjyVOTQpKfNBRzDbiw=)
2: 4aMsThSQ8pto7QNh_kFB73sOXo8.roa (hash: HEBFusOcNgQfdZRF0U/he5dAzzkTri4ddTPSMK0+giU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:90:27:39:db:7c:a4:6d:34:8c:0f:45:3b:fd:c8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Validity
Not Before: Oct 20 03:01:01 2025 GMT
Not After : Oct 21 03:01:01 2025 GMT
Subject: CN=e59fbc4ffaa7b980bfda4026d6ed372b941ee3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:ba:17:b9:e5:89:57:78:7b:a5:26:46:20:
4b:9f:44:12:15:7a:c0:77:4c:b2:25:24:a4:2a:65:
eb:e2:2b:1a:c6:e7:2c:6d:b3:c1:63:63:f6:45:7b:
cf:d4:b5:4d:2b:f4:ee:27:e2:da:47:34:0a:77:b3:
ba:36:57:0e:c1:53:ac:90:61:f3:98:84:02:38:e7:
40:f1:0d:75:09:f9:ce:d0:78:ef:77:83:b0:0e:1f:
c5:75:be:11:5c:83:76:80:87:3a:9e:b3:06:b0:78:
42:bc:91:2d:37:e0:02:c3:f9:4b:31:33:dc:44:f7:
66:a3:df:10:7c:ff:af:b2:e0:8d:0f:85:15:53:0e:
82:fc:77:0e:ab:a0:66:35:cb:02:86:78:02:e6:c1:
fc:73:67:d2:30:8c:31:40:fa:0a:b1:d2:dc:2c:7a:
18:05:53:4e:e0:19:10:f8:a2:94:4c:cb:ca:86:00:
a7:4b:ff:f5:32:f2:2f:18:1b:22:0f:f8:a5:c1:1b:
32:14:b1:2e:9c:ff:75:33:8e:d3:01:88:91:40:d4:
5a:05:0e:fd:31:f8:ff:e5:d2:8c:49:c9:83:4d:a8:
be:e7:c2:2c:18:61:78:b4:52:ca:cf:f2:82:1a:31:
da:84:6e:31:96:c3:de:30:99:d6:db:d7:4d:35:32:
57:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9F:BC:4F:FA:A7:B9:80:BF:DA:40:26:D6:ED:37:2B:94:1E:E3:D0
X509v3 Authority Key Identifier:
keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:76:09:50:78:96:da:e7:54:39:60:a0:1b:cb:05:60:99:a1:
ab:c5:bf:95:dd:ca:6b:42:49:01:3c:36:92:9b:8c:e0:19:90:
13:56:39:fa:6a:db:a8:4b:f9:61:b4:b6:a5:1b:27:71:91:be:
20:a7:59:ae:7e:40:5e:87:56:7f:6b:db:88:9a:43:48:19:40:
ba:f9:b4:09:2d:e1:b8:57:a7:31:a6:6a:35:70:43:5f:63:c6:
a1:93:8c:4d:16:26:bc:e1:9b:0b:4e:f5:b3:02:b9:53:31:ac:
3d:c7:00:6a:d9:ec:05:b6:f1:3c:4e:d3:9d:82:93:c5:2d:c1:
d4:85:99:ea:2f:19:05:09:c8:bd:5c:b9:92:0b:64:1b:0f:ce:
e7:1b:d7:26:f2:99:d4:3d:0c:22:be:fa:88:aa:e6:4e:d7:58:
ef:af:85:7c:92:2f:89:01:b8:16:25:d3:96:ce:5e:85:ff:44:
f2:b6:7c:c8:e6:f0:cf:d7:e6:5f:c9:c1:94:57:5c:74:15:f6:
a7:2d:58:c9:b0:4f:8e:0f:1f:c1:e9:31:9a:f4:d5:f2:b8:f0:
90:9c:a6:05:21:3a:d0:2e:08:41:93:55:99:50:b0:5b:a5:0a:
4f:13:a8:f4:3b:e6:31:78:ec:38:1e:9d:4d:e6:a6:7f:d8:63:
41:55:cf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:15:37 2025 by rpki-client