Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: XUgH2Xfx7iZEUnhPD8Kjvs/eq04EzhGh088C1iLBzBY=
Subject key identifier: E9:C0:8A:51:3E:E5:84:B9:2A:B2:8D:23:1D:8D:29:BE:95:F3:02:FC
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 0199FBEBFB6BAAC092A25F85CAF884D8FE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:50 +0000
Manifest this update: Sun 19 Oct 2025 10:02:50 +0000
Manifest next update: Mon 20 Oct 2025 10:02:50 +0000
Files and hashes: 1: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: FeFDFJkhOLFNZv1wXamVnZClBKWn2zAih8eMXLpVpmQ=)
2: KW800OmJGIdT7uikc0QcQ975IG4.roa (hash: dwHKNqVSICACPiCia+yUDPbsR26gug+E9f0Pra0zV6s=)
3: cEC9bPBmfz9Z43qJKU1IUGSC0lI.roa (hash: 4mEdeYIHzDK/DCJ4cVdrdS7DkgcRn2OeioiYgUbofOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:fb:6b:aa:c0:92:a2:5f:85:ca:f8:84:d8:fe:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Oct 19 10:02:50 2025 GMT
Not After : Oct 20 10:02:50 2025 GMT
Subject: CN=e9c08a513ee584b92ab28d231d8d29be95f302fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:d4:4d:35:14:5b:99:55:22:5d:04:cb:29:
16:bf:64:36:3e:ed:fd:74:a2:a8:bf:08:a0:02:fd:
82:5c:78:8a:25:31:50:83:30:c5:8e:e5:01:28:31:
4f:f7:b9:a6:6e:86:2c:0b:b9:ca:10:f5:49:77:8f:
c5:7e:6e:65:07:de:18:e8:32:a0:3c:b9:1f:2c:02:
ee:42:d7:67:af:74:3e:e5:9b:cc:90:de:4f:fd:c8:
7d:70:7e:da:25:37:44:f5:cd:ad:61:1a:11:43:d2:
e3:48:f2:54:7d:50:b0:f2:d4:98:e7:26:3e:1b:2a:
53:8e:b9:a0:ba:d7:8f:d2:f2:5a:bb:9f:8c:ee:e4:
29:d1:3b:71:80:e8:7a:ba:48:5a:56:06:72:ce:2b:
ba:e3:e3:5a:0a:74:d4:e2:d5:77:ca:bd:80:ef:26:
85:6a:3f:f9:70:e6:df:e9:62:fa:a2:6b:b5:70:fd:
af:a2:a1:87:98:74:a4:95:a7:18:3f:bc:5b:57:68:
01:a5:bf:55:5b:0e:e1:5b:bd:82:b9:c3:b4:0a:7a:
34:61:f8:a2:27:e8:d1:00:fa:2d:e1:f0:70:30:00:
7f:0f:fb:7b:1e:d8:50:04:83:a4:ec:46:5b:51:d4:
11:fc:ef:62:6a:f3:c0:65:39:6c:96:00:0a:c6:06:
f1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C0:8A:51:3E:E5:84:B9:2A:B2:8D:23:1D:8D:29:BE:95:F3:02:FC
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e6:f0:8e:28:a7:11:84:21:1d:bc:a6:fc:14:44:ec:c4:c5:
d5:9d:e2:55:7e:f5:da:d9:c4:8e:6b:7c:79:78:a4:7c:8d:ee:
6e:12:1a:d4:30:84:35:02:25:19:eb:62:fb:a4:63:48:0d:5d:
c8:10:47:a5:0f:de:52:43:7b:0b:ef:9f:1e:38:56:3d:b5:f6:
43:70:15:62:f6:35:aa:5f:50:a1:c2:d7:23:f1:38:f1:86:6f:
d0:21:1b:aa:c5:33:52:0c:91:17:bc:ee:e3:bf:86:9a:96:3c:
fe:e1:e7:35:3a:dd:5f:90:d6:04:b5:1d:04:b5:5a:04:b4:f5:
c1:6e:f5:bf:64:b2:06:a3:c0:10:f6:42:57:26:c3:a7:77:93:
c9:30:03:0a:97:93:0c:29:ec:95:fc:ba:d4:9a:85:c5:49:26:
9a:70:3a:2b:df:ad:7a:39:71:7f:d9:02:cb:e5:d5:10:37:63:
b2:f7:1e:ed:3c:83:b4:3d:87:f4:63:0f:87:02:f4:00:ef:ab:
c2:4f:a8:c6:db:61:c8:f5:df:ee:94:13:b6:5f:8c:26:2c:2a:
5f:48:46:96:96:c7:eb:16:77:c9:eb:fb:33:99:6d:c7:1f:d1:
fd:59:1c:31:af:99:22:de:69:2b:39:6b:1b:91:cb:32:34:b3:
e7:df:17:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:09 2025 by rpki-client