Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
File: 3OSkxIQPyaX9IUphmqiHtbdiS_U.mft (raw, json)
Hash identifier: bv96UMdNR8z/zIlIy8O53mqXITMrS6ofirHF+b7EojM=
Subject key identifier: AD:09:16:6A:B2:C9:2C:77:CC:40:95:71:FC:35:DB:BB:A1:45:67:7D
Authority key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
Certificate issuer: /CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Certificate serial: 0199FEEC02A784CD6068C695F3A29E40F430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 00:01:43 +0000
Manifest this update: Mon 20 Oct 2025 00:01:43 +0000
Manifest next update: Tue 21 Oct 2025 00:01:43 +0000
Files and hashes: 1: 3OSkxIQPyaX9IUphmqiHtbdiS_U.crl (hash: d2ug8g63NQ3ohwSIg/ygzg4Gc6FX1yb6Kh3M7nJ7yzc=)
2: SlznhF9EiZYGKKClhlcBqpQpcMg.roa (hash: Jy5c7P7JMODRFjsTTWh43LUlPZcqwSCq10CJL1zOqOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:02:a7:84:cd:60:68:c6:95:f3:a2:9e:40:f4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Validity
Not Before: Oct 20 00:01:43 2025 GMT
Not After : Oct 21 00:01:43 2025 GMT
Subject: CN=ad09166ab2c92c77cc409571fc35dbbba145677d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:4e:b1:49:1c:9b:9e:74:c6:23:53:c0:31:
c3:af:97:a7:2e:79:70:60:98:95:1b:d4:98:8e:9c:
df:50:21:f6:0a:93:4c:00:be:2c:5d:dd:56:24:94:
6e:66:c6:bf:1e:95:45:fa:a5:08:f9:9c:b2:ca:fc:
f6:da:6a:bc:07:05:69:f0:61:fc:13:ee:1d:1e:72:
7e:5d:0a:85:f9:a9:46:cc:c7:93:96:25:46:d9:40:
db:ab:d1:5d:76:7b:d1:62:3e:bb:4e:57:aa:86:66:
8a:2a:b6:44:ee:00:f2:2e:a4:f0:50:23:88:55:b5:
cb:8f:f6:14:2e:92:98:26:a0:51:b4:fc:ff:5c:c4:
f7:d7:02:b3:1f:70:ac:db:6d:94:ef:7f:01:6c:59:
4a:23:fd:e9:f1:24:ab:6a:60:a3:e7:80:2b:51:05:
8f:da:41:3b:76:44:4a:1d:b8:77:1f:28:b7:2f:72:
97:16:18:f4:03:dd:4d:fa:9e:80:fd:34:b5:80:2d:
87:99:76:17:e3:15:3d:72:62:7d:7c:2a:da:23:3e:
df:d5:11:6d:5c:71:5c:73:61:7c:d7:72:a8:4f:dc:
bd:2c:cc:16:32:99:96:e5:40:b9:76:76:84:d4:34:
b5:b5:56:ff:86:ff:44:87:57:06:4c:49:ca:a4:1e:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:09:16:6A:B2:C9:2C:77:CC:40:95:71:FC:35:DB:BB:A1:45:67:7D
X509v3 Authority Key Identifier:
keyid:DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b4:78:d0:2e:75:c5:ce:d7:a1:1a:1f:10:97:82:21:97:7b:
1a:9b:36:14:69:07:26:e0:3b:4b:f0:97:bb:5f:90:cf:ff:1f:
fc:f4:67:c1:cc:bb:39:a9:67:d5:e4:d8:56:6a:55:45:a1:ed:
c9:4d:8c:03:d3:00:2f:94:6c:ae:96:fb:36:eb:2c:83:77:4a:
d2:bb:e1:63:e0:23:b4:1a:64:33:27:93:3f:47:90:ee:d2:85:
5f:d6:7f:95:84:02:76:d9:6e:45:4b:b7:ef:bd:c3:f1:20:23:
ed:1c:83:5a:83:d1:66:b8:9c:e2:06:09:06:8e:95:cc:b2:00:
f6:f8:8f:94:27:4c:8c:c7:6c:94:c7:59:fb:6b:cb:3c:ec:09:
a8:33:69:b5:71:22:c3:4f:30:02:93:e8:4a:e8:99:84:50:e8:
a4:ad:38:31:5d:d2:cf:08:13:8a:eb:3c:2a:63:37:6e:78:ac:
4e:82:98:67:6a:48:73:1c:05:61:7c:4b:78:6a:98:ca:be:96:
3d:05:1b:01:c0:50:8d:ca:02:12:49:98:c1:b5:d1:2d:b9:2d:
dc:f4:39:a9:01:f3:f7:56:eb:f3:06:49:db:24:92:f3:b0:aa:
42:c6:62:af:ed:cf:1c:75:f6:6b:95:44:84:07:0f:8d:9e:37:
45:d1:10:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:21 2025 by rpki-client