Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: 7gzUh7dQemsK8rpyCCZ+hEfcHA4JwRBvZFpUiOi5xfc=
Subject key identifier: 3E:F3:92:27:96:D7:C2:F9:1B:91:E5:19:D9:54:98:11:A3:67:29:33
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 0199FC8F1CF36AC9EC936EE2FA7DCFBB6589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 13:01:01 +0000
Manifest this update: Sun 19 Oct 2025 13:01:01 +0000
Manifest next update: Mon 20 Oct 2025 13:01:01 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: Vo4M6rhtT8wnrEUrSwP1CxGuJfiBqXF6VBgHB8iR390=)
2: QYQzorGK1cakLmK4R7aZ_z5BtRk.roa (hash: K/JfnEYnWlRvZUne2cydti381OQHnxSabuUVM9ge064=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:1c:f3:6a:c9:ec:93:6e:e2:fa:7d:cf:bb:65:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Oct 19 13:01:01 2025 GMT
Not After : Oct 20 13:01:01 2025 GMT
Subject: CN=3ef3922796d7c2f91b91e519d9549811a3672933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f1:d8:26:ee:6b:45:1e:c8:26:f2:5d:06:d7:
b2:aa:cb:42:34:fa:f5:6a:4f:d2:15:06:75:3b:17:
64:00:d2:21:57:8f:01:02:05:8d:d8:83:99:91:25:
cc:f7:7f:2d:7f:c4:fc:1b:41:65:a1:7f:54:cb:7a:
25:be:8b:a4:a0:60:1d:6d:b7:21:2f:37:18:61:1f:
bc:79:be:22:40:48:24:0f:31:20:82:df:23:9c:87:
72:15:76:0f:f3:67:86:17:30:b9:ae:ff:02:a4:59:
54:b7:13:9a:3a:cc:6a:62:7a:39:9a:8c:e1:36:35:
a3:38:f2:1f:7d:4f:78:46:69:55:fe:62:5a:8a:63:
4a:a4:61:ea:3b:d9:33:d3:01:39:1e:0a:99:d4:15:
0a:c5:00:42:f7:68:7b:06:8d:df:67:c6:65:8e:81:
b5:dd:16:92:ba:5e:d6:97:8d:1c:98:e9:39:04:db:
aa:04:57:de:d7:8b:f4:66:49:91:38:79:f9:f6:9f:
8a:2f:5e:a5:a6:e1:d4:1f:f8:ba:00:25:29:7d:96:
f1:b2:81:51:1b:c3:b6:91:0e:42:fe:f3:03:d3:34:
bd:42:0d:f9:4b:1e:2c:34:57:b6:44:f6:5a:ac:dc:
e0:5a:9d:24:77:49:fd:42:ec:1b:23:f5:d6:dd:0c:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F3:92:27:96:D7:C2:F9:1B:91:E5:19:D9:54:98:11:A3:67:29:33
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4b:34:99:fe:bd:44:ea:d5:5b:7d:36:77:09:4b:aa:2f:bb:
25:1d:e3:29:96:7f:c7:85:b4:0e:7d:60:3d:31:a9:df:c1:99:
4d:e0:8a:3e:4e:c0:39:e8:27:4c:92:13:62:c9:27:34:fe:b6:
cb:f1:df:39:f9:f2:af:7a:5e:36:6b:7f:78:01:e0:0a:23:84:
94:d0:80:c4:9b:cf:af:cf:44:45:50:d9:3a:4d:ab:77:10:6b:
67:a1:ef:80:e1:6a:17:11:e6:18:35:a2:b9:13:7c:b5:12:40:
69:3b:83:bb:f7:9b:fa:93:aa:5a:a3:b5:a5:80:af:42:bd:e3:
66:09:b7:31:70:d3:2f:e6:8d:7a:0f:f1:18:d3:5e:03:01:01:
e1:91:69:2d:cb:9b:d5:d7:f3:ba:a3:3c:c5:f3:8c:59:73:40:
79:67:30:cb:e1:c0:48:18:62:b5:6b:07:fa:68:58:50:9f:85:
f9:ed:7d:79:5a:d1:90:bc:a3:f8:fe:00:d0:88:77:b7:b3:2f:
b9:11:63:89:25:44:a9:47:72:dc:b5:e5:42:62:58:56:52:f8:
f5:4d:04:92:f3:7f:49:65:a4:bb:59:0c:2d:39:66:a5:03:5f:
5b:31:88:38:df:50:4b:f3:b5:46:73:5a:ce:ef:28:38:d5:31:
3b:cd:40:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:23 2025 by rpki-client