Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
File: 3OVg8OyFDainwPjW84JRAtTeSs4.mft (raw, json)
Hash identifier: nG+eHDtJkM+dD4+PqIRtZghkThoG0UwtFWetfNfuBCY=
Subject key identifier: 22:CE:D3:2D:93:89:D3:22:40:CC:6B:C8:F9:19:75:AF:81:50:8F:10
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Certificate issuer: /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial: 0199FDD8E8BE1CE55E37E916144472EDA2D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:01:14 +0000
Manifest this update: Sun 19 Oct 2025 19:01:14 +0000
Manifest next update: Mon 20 Oct 2025 19:01:14 +0000
Files and hashes: 1: 3OVg8OyFDainwPjW84JRAtTeSs4.crl (hash: UKxWXHtN7vUNvZU/6KGzYK030h5sHae4fCaSd6G4kmc=)
2: cvAMZ-azozJjAwqBJfc2rmmZkME.roa (hash: Gewk40CVQw5q21r2SfPnFc/pGMGpE0T4SZt3vyzVUaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:e8:be:1c:e5:5e:37:e9:16:14:44:72:ed:a2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Validity
Not Before: Oct 19 19:01:14 2025 GMT
Not After : Oct 20 19:01:14 2025 GMT
Subject: CN=22ced32d9389d32240cc6bc8f91975af81508f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:58:94:6f:9d:18:09:4b:86:7f:18:2b:00:
30:23:e5:09:2b:f0:ce:7a:61:20:96:55:c3:d3:9c:
02:9c:ec:d5:83:5b:85:e0:2f:6a:f4:41:6c:a6:6b:
b2:ef:55:ce:4e:c8:bf:7b:ee:27:e2:2e:58:97:83:
7e:f9:cf:fc:7d:19:44:d1:4b:c6:4a:ac:35:8f:e2:
73:67:99:cc:fe:c8:a0:32:ff:c9:af:95:55:05:d5:
48:c8:0d:7d:90:ed:02:38:32:fc:dd:15:84:9d:96:
da:71:aa:3d:2b:6d:da:9b:47:74:07:ff:0d:e8:d6:
30:55:61:2e:59:a8:2a:12:16:bb:59:5d:de:e0:68:
55:e5:f9:18:b6:a7:57:f2:96:2b:69:7c:a2:f0:55:
df:2e:12:b8:42:46:0f:04:3e:67:75:19:f5:60:aa:
b2:96:2c:d3:ec:9f:6d:29:d6:19:07:47:46:85:0a:
c9:d2:59:4a:dd:e9:dd:e2:f9:f5:3f:7e:03:eb:44:
02:cb:e1:7f:25:46:c1:02:ee:2b:cf:52:c2:f0:b3:
e2:9b:f2:29:42:00:c8:7e:78:ca:34:b4:26:f5:e0:
01:39:2f:da:85:dd:2a:d7:26:2a:72:8d:cc:d4:1f:
24:57:08:87:a7:60:56:54:d4:bd:b2:c0:47:9c:c8:
a4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CE:D3:2D:93:89:D3:22:40:CC:6B:C8:F9:19:75:AF:81:50:8F:10
X509v3 Authority Key Identifier:
keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:03:98:f9:e5:0a:28:83:73:05:39:4a:9e:71:1e:45:b3:cb:
72:b7:b1:40:fa:72:3c:7d:b3:f2:a9:6c:6a:0a:62:e0:1e:9f:
f6:5e:cc:5d:9d:48:0b:49:2c:fd:b6:c3:4b:f0:fe:be:ba:74:
7c:8d:5d:b9:0a:37:e3:5b:cd:71:a5:15:1e:b5:c1:eb:ec:6b:
51:68:a3:38:5f:d2:b6:00:25:cc:b9:58:62:84:bf:dd:58:5c:
eb:eb:5c:36:13:a5:2e:58:3f:2a:be:28:14:59:a3:90:97:2e:
17:7d:fe:28:0e:9b:fd:45:c7:14:6e:6a:e2:68:e2:c8:bb:7d:
7d:18:57:f1:36:40:f6:4a:70:d8:a9:e0:77:d8:cc:a4:4f:47:
9a:e2:1a:a5:95:4d:59:df:eb:5e:6e:61:23:d1:a8:4c:f8:82:
22:0e:d0:b1:b3:32:9b:d3:d3:db:44:67:c8:83:88:3f:6b:ae:
e5:d8:db:4b:4a:7c:b1:50:06:86:25:f0:d5:55:3c:7b:76:68:
75:05:83:b0:eb:5a:cb:a0:d0:5c:a5:18:5a:68:fd:e3:74:4c:
d5:1b:2a:ca:a3:a2:e1:ab:0c:63:35:e9:e8:30:30:eb:31:50:
f5:d8:f0:82:9e:14:b1:32:eb:a2:1a:80:b1:6c:1d:15:a0:8f:
bd:65:d0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:41 2025 by rpki-client