Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: L5ILT+ZR/0eK+GJUtoBumjJuTIy0NtgnrfzjUSdP03k=
Subject key identifier: 7F:C9:ED:10:3A:85:AC:C6:75:7E:25:3B:1A:86:58:18:BB:FC:6B:45
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 0199FC2149EC7EC0B81A686D78F12344E1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 15C3
Signing time: Sun 19 Oct 2025 11:01:04 +0000
Manifest this update: Sun 19 Oct 2025 11:01:04 +0000
Manifest next update: Mon 20 Oct 2025 11:01:04 +0000
Files and hashes: 1: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: oi0OMwN43UnYlTCalkHbBHYn7kIfXMdY8Oe8VJQr5Xk=)
2: EoONLCC0uBU4UnkK6hGEDKnLwOs.roa (hash: BvTXgf3VZmemwuiX/6PvTlFRYmGF/FW7bb7KGQyaCiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:49:ec:7e:c0:b8:1a:68:6d:78:f1:23:44:e1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Oct 19 11:01:04 2025 GMT
Not After : Oct 20 11:01:04 2025 GMT
Subject: CN=7fc9ed103a85acc6757e253b1a865818bbfc6b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:ba:33:d1:54:54:ef:1a:00:60:3d:45:84:
ee:1a:be:f1:50:93:8e:c8:bf:4e:18:ea:ee:3e:f5:
90:3d:47:48:9f:93:40:b8:db:d4:c5:2d:37:da:9d:
24:a5:e1:96:ca:7a:55:36:1e:9b:cc:37:13:f3:f6:
be:84:66:00:59:69:8a:6b:43:c3:d7:b0:c8:f5:a0:
94:27:b0:92:b8:4b:78:b0:d0:d8:bd:57:ed:fd:36:
d9:82:55:e8:33:9b:fc:a0:7a:64:99:17:ba:4f:fd:
6b:07:00:8a:0d:06:b6:3c:2c:b6:f5:2a:3f:ca:3a:
a5:e7:11:40:de:c2:eb:9c:db:a7:d1:82:8f:92:e2:
9f:cd:a9:53:c9:06:de:1f:b2:2a:2a:e3:41:8b:b0:
51:60:5a:f2:cb:fb:de:ec:68:2d:af:50:be:52:1d:
ca:7d:96:69:d5:c7:9f:a1:9c:d3:c5:56:d1:9b:6f:
d2:49:e3:ab:0a:fa:74:14:63:e2:b1:c8:38:65:a2:
c1:6c:96:5d:c1:54:80:7c:23:2d:03:5b:89:1a:96:
0a:f5:99:b6:ca:73:0f:53:a6:bd:ec:1c:d7:03:39:
62:53:fb:91:bf:d3:14:78:90:62:04:1a:c5:8c:f0:
73:1a:23:3b:f8:5f:9f:69:68:50:97:dd:80:b3:3d:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C9:ED:10:3A:85:AC:C6:75:7E:25:3B:1A:86:58:18:BB:FC:6B:45
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a9:e7:c9:8a:b8:31:23:1f:d6:e4:87:9e:6f:11:08:7c:bf:
3f:e9:7b:16:41:b3:04:d2:e1:8b:e9:c2:6b:25:ae:74:31:f1:
7d:2d:c0:75:35:5f:d5:ef:7c:a3:04:e0:60:7e:54:b4:72:90:
50:cd:d2:a2:19:f8:b7:b0:c9:df:79:53:4b:d3:e4:97:2b:10:
1a:c3:be:f0:a3:cd:65:26:0a:b4:21:1c:95:97:84:20:1b:d9:
53:fe:7c:42:b5:12:f3:2b:05:a7:8a:08:25:c9:54:19:8c:6a:
13:4e:96:b6:d6:47:4c:b9:44:8c:b0:04:13:d8:c3:da:f1:c8:
77:2f:29:df:75:30:79:a8:ad:93:51:e3:37:62:07:d8:32:dc:
ed:99:f2:f4:fd:05:f1:cc:9f:dc:ad:6c:64:c5:aa:22:19:eb:
e5:46:91:0d:fa:09:58:27:69:6a:57:3d:bb:37:8e:70:81:3d:
64:e3:77:fe:3f:58:87:b2:90:6a:2e:27:65:19:19:7c:cf:fa:
64:7b:ea:f9:54:1f:11:85:6b:8d:fa:ec:b1:96:2d:0b:62:e8:
35:1f:e9:17:f0:f4:81:5b:7c:61:8d:25:72:d3:44:2a:ca:8c:
a1:03:dd:e6:75:02:8b:9b:be:44:d4:5b:8a:b3:08:97:f8:01:
5c:8b:a2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:30 2025 by rpki-client