Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
File: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json)
Hash identifier: gM2ZRnSvPSytneXPkks6V9IBKy1BgrcnPPeLysJl6Tw=
Subject key identifier: 68:6D:E1:89:24:D4:18:87:CA:7F:8D:35:BE:F2:22:D4:84:45:1C:F4
Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
Certificate issuer: /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Certificate serial: 0199FC214DA2907A5E5DC9FEC0F88380499D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:04 +0000
Manifest this update: Sun 19 Oct 2025 11:01:04 +0000
Manifest next update: Mon 20 Oct 2025 11:01:04 +0000
Files and hashes: 1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: EpgVLbeflxgk+8kdCyQNHDQLK5xgf9Ra/3/J7ZNExaw=)
2: b5tCOGfZlXjj3Rp4LI2wyRIwTZc.roa (hash: Ux81ccFaPxD7MPa+kjPcqatGWLTvR5GEGbxi2D0f0BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:4d:a2:90:7a:5e:5d:c9:fe:c0:f8:83:80:49:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Validity
Not Before: Oct 19 11:01:04 2025 GMT
Not After : Oct 20 11:01:04 2025 GMT
Subject: CN=686de18924d41887ca7f8d35bef222d484451cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:4b:6b:a4:55:7b:20:58:07:2d:c8:87:41:
fd:d8:e2:dc:c7:86:39:c4:c9:21:97:5a:0b:66:19:
a6:7e:f0:b4:c1:2b:6a:66:26:0f:d6:3d:79:b1:52:
55:2c:a7:28:a6:a4:14:f8:fd:ac:80:bf:d2:15:fe:
96:c0:f7:90:8c:82:2a:c1:1b:b5:bf:64:e3:1f:50:
ea:68:3e:40:b6:15:c4:31:ec:33:31:ce:12:13:7d:
89:14:69:a7:31:34:e5:c4:d3:28:7a:ad:69:26:4b:
47:58:0c:75:e1:d6:3a:3f:e8:58:92:62:5f:68:ca:
52:56:a6:a4:11:c6:b9:3c:2c:93:a9:ae:ce:0a:9d:
42:3f:42:82:70:b9:a0:fd:af:38:8a:d4:02:9a:c2:
eb:c3:ed:15:bf:fc:0f:27:4e:2f:17:d6:33:d3:f1:
27:f7:d1:3c:ce:1a:ff:e7:7d:c8:25:e9:fa:b0:ab:
40:67:dd:3a:5c:2f:95:08:e3:42:ba:94:3a:fc:63:
4e:c7:81:a5:c1:75:68:fc:a7:e5:ad:27:d8:7e:3c:
cc:79:d2:e7:59:d7:af:c5:9c:f1:e5:4b:65:21:f2:
6e:1b:10:b2:eb:88:a9:81:22:55:dc:c8:3f:7d:de:
d3:64:7f:e2:5c:ab:ce:9e:23:bb:b0:07:5a:09:8a:
ed:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6D:E1:89:24:D4:18:87:CA:7F:8D:35:BE:F2:22:D4:84:45:1C:F4
X509v3 Authority Key Identifier:
keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2c:e8:34:6c:0c:f1:01:b4:36:a3:63:c0:c1:3f:94:30:05:
43:7d:a2:2a:c0:7c:ee:d6:de:8b:07:50:07:4e:2c:bf:02:80:
5e:50:0e:1f:bd:96:b6:e2:52:5e:39:6b:89:a7:58:f5:1e:f3:
8f:d8:c5:39:e3:b9:54:fa:29:9d:f3:99:2b:12:5d:b7:4d:32:
77:4a:ff:92:e8:cf:4f:d5:08:41:b8:25:48:b5:86:22:c6:a4:
2a:66:1d:38:57:3e:4f:44:fe:6d:3d:8e:58:54:6c:23:de:a9:
a3:a9:a9:02:9e:10:72:7f:93:f6:e0:df:ef:cb:f9:75:c0:0e:
3a:76:46:16:62:aa:0d:bc:5d:20:31:0f:2b:77:2b:04:a1:71:
a7:53:a1:7d:41:21:c0:f3:c1:77:b9:99:b7:48:70:41:47:18:
09:88:af:86:a1:19:35:77:62:26:6f:77:14:b2:fd:8b:d5:36:
2d:37:c0:f0:2a:84:bc:ac:27:a7:71:e6:6a:e2:20:d1:ea:07:
8c:da:a8:13:90:67:fd:c2:f7:17:8a:3b:af:da:3f:09:ef:af:
4f:e4:e1:3b:ea:13:4c:d7:37:09:38:6a:f5:7f:89:06:d5:3e:
7a:11:b0:d9:87:21:c6:c5:97:c9:c0:3b:e3:f4:9e:31:bd:49:
b9:72:69:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:53 2025 by rpki-client