Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
File: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft (raw, json)
Hash identifier: EVZ47ktICIFw2x2C3/GbhwZdFvbON8fXGEWDqEMX5rY=
Subject key identifier: BD:4B:83:25:80:17:8E:8A:83:FC:21:FE:94:0C:7B:CF:68:AD:88:D6
Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
Certificate issuer: /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Certificate serial: 019A0411266F566F70F0ADB12E9211C073C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
Manifest number: 1024
Signing time: Tue 21 Oct 2025 00:00:23 +0000
Manifest this update: Tue 21 Oct 2025 00:00:23 +0000
Manifest next update: Wed 22 Oct 2025 00:00:23 +0000
Files and hashes: 1: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl (hash: /FruQwD/4tAFXEiQvJFLgepv6DAGbDnoqrYLsbUk0Go=)
2: s199ikwEffBbz4N51o9Z93m71rk.roa (hash: Tb9twTEkz+iPQZdYGEiHKKRquApELQ9qVFqV3IE19gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:26:6f:56:6f:70:f0:ad:b1:2e:92:11:c0:73:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Validity
Not Before: Oct 21 00:00:23 2025 GMT
Not After : Oct 22 00:00:23 2025 GMT
Subject: CN=bd4b832580178e8a83fc21fe940c7bcf68ad88d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:d3:83:f0:ae:2b:e3:c3:8a:20:37:03:2f:
5c:ee:2b:02:47:3a:95:54:c2:f3:a4:b6:f0:d7:29:
ce:9b:52:de:a4:18:9d:4f:b2:6f:19:b5:a0:23:6f:
19:b0:4e:df:b1:8f:86:a0:cb:be:3a:b9:0e:e2:7d:
ee:bf:a9:5f:8e:ec:ed:e8:82:1c:f9:fa:6e:16:21:
d4:1e:83:56:37:35:1a:50:31:80:8b:6e:5b:6b:38:
66:e7:cb:24:41:e3:33:08:f6:d0:0c:35:0c:2f:8f:
cc:f8:8b:09:e7:b3:7e:a2:1a:94:ad:3a:c8:b2:b6:
02:9f:44:35:58:b2:30:1f:49:e6:76:ee:3e:15:63:
eb:5c:f8:d6:b3:15:d5:46:aa:55:71:a8:36:f0:f7:
3c:c3:45:fc:d8:4f:f6:b5:db:10:f7:ad:fa:3d:f7:
ad:a3:fa:5c:dc:d2:bf:d6:2e:96:29:29:bd:ba:5e:
6d:e9:d8:8a:21:92:5b:66:b3:91:4d:e2:ef:a4:0d:
4d:37:23:f7:97:44:c0:75:05:b7:85:c2:09:c2:0b:
1e:6d:29:39:ad:17:a1:e5:32:79:c3:d2:c8:60:c1:
af:68:24:d7:60:cf:dc:a9:f3:07:07:16:be:43:09:
d2:13:4b:63:82:4a:2c:02:22:02:1f:c7:0b:35:34:
ec:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4B:83:25:80:17:8E:8A:83:FC:21:FE:94:0C:7B:CF:68:AD:88:D6
X509v3 Authority Key Identifier:
keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:59:e8:a6:b2:31:ab:d7:a4:47:95:07:95:e2:56:a1:02:82:
c5:85:40:74:e2:9b:00:b6:56:37:9a:03:4f:a2:06:8c:74:7c:
22:5c:c7:c1:ac:5d:36:40:6b:0a:1c:6a:16:9d:66:eb:b9:cb:
14:ff:a0:b6:36:e0:80:94:92:c5:93:a2:20:6a:86:6f:6b:74:
0a:c4:17:75:c3:62:b0:9a:4b:63:ca:38:e5:05:fd:3f:ef:63:
0c:87:c6:16:0b:65:5f:6f:a3:75:85:d9:d2:64:af:16:e6:1e:
3c:6c:db:8d:59:a8:ba:d5:d4:50:8b:8b:e2:f7:11:fd:16:f7:
83:c1:37:53:81:49:40:41:52:f0:0f:76:b7:f0:e8:2c:1c:39:
fc:68:8b:6b:de:df:d6:e8:17:53:37:80:1c:04:75:2b:be:d8:
2c:fb:f4:b7:0d:bb:3e:1e:21:74:19:a7:99:0e:09:33:6e:9a:
72:11:65:21:09:30:59:e7:37:30:03:24:27:24:f6:da:95:d7:
9a:de:37:aa:1d:2a:a5:a5:f5:70:fd:29:15:4a:a6:b9:57:3a:
10:54:bb:e5:ec:b5:f4:4f:ce:dd:1b:74:15:46:ec:b7:c3:b7:
c4:66:d8:0f:02:60:8f:66:e2:f8:2f:58:8a:42:b2:2c:d2:9b:
c2:e3:fb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:57:54 2025 by rpki-client