Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
File: 3erZGbhaEwUdAgi34o3cyzmLFNY.mft (raw, json)
Hash identifier: RzAOButXtCwEoO4/bMeVU+t5vZiw6WetxrJhGFL0q1A=
Subject key identifier: 0E:19:CA:13:B9:85:DD:F7:24:95:11:EA:A8:6C:14:D4:A2:A1:E6:A8
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial: 0199FEEBD2A7392B3A5A62FCCC3059633637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 00:01:31 +0000
Manifest this update: Mon 20 Oct 2025 00:01:31 +0000
Manifest next update: Tue 21 Oct 2025 00:01:31 +0000
Files and hashes: 1: 3erZGbhaEwUdAgi34o3cyzmLFNY.crl (hash: W7f6i0bAflAV4EklOAHMfsHRQQbnRzwUwoh81oAlzUU=)
2: gyBGqWNKS8K0vTNBAA3GKNL77Vo.roa (hash: BXXbMCiaPDwWpKluJbMJNiQFpxOCWm/ZXx0AVN6V8Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:d2:a7:39:2b:3a:5a:62:fc:cc:30:59:63:36:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Validity
Not Before: Oct 20 00:01:31 2025 GMT
Not After : Oct 21 00:01:31 2025 GMT
Subject: CN=0e19ca13b985ddf7249511eaa86c14d4a2a1e6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6e:ab:e5:3a:0e:19:ec:58:88:cf:99:bb:79:
77:e1:69:74:3f:72:d3:f0:5a:ca:63:25:b7:07:d8:
56:14:d0:6e:99:c1:55:37:5d:02:96:c0:9d:ec:da:
32:dc:de:20:0e:5f:c9:b4:f5:57:7a:1d:08:bd:fe:
69:92:61:48:aa:22:36:58:5c:0c:89:3c:fd:ef:97:
ae:c5:2f:e9:6a:2b:cc:5b:80:59:22:27:5e:be:ea:
17:f8:e6:e7:07:4d:98:c2:d4:4a:04:e7:b2:80:e8:
fd:f0:a6:a7:39:f1:f3:05:63:73:00:d2:97:9f:c9:
de:86:85:ac:51:ff:99:b9:e2:df:13:5c:98:1c:5c:
25:34:a5:b6:11:58:02:d5:f3:55:a7:4a:fa:91:7a:
68:be:6b:7f:e7:92:8d:ae:05:4a:9d:a4:1d:95:de:
83:43:93:ac:52:4e:f7:8a:1f:36:7c:cd:c6:80:0c:
01:c5:f2:40:c4:a5:ea:6d:46:a0:e8:c7:8a:04:3a:
f2:17:48:19:b4:51:ff:a2:a3:1c:ae:97:74:c7:c0:
1b:5c:7b:5c:3f:f5:0b:69:bc:84:ec:9b:b0:9f:4b:
cd:f8:df:2f:b2:42:03:46:df:6c:8c:62:5e:38:e4:
64:57:d8:44:6b:6e:09:bb:ed:d8:81:07:d4:46:7b:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:19:CA:13:B9:85:DD:F7:24:95:11:EA:A8:6C:14:D4:A2:A1:E6:A8
X509v3 Authority Key Identifier:
keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6a:11:a4:30:60:9b:b9:7d:22:fe:b3:a8:07:ac:ef:7a:ff:
a7:8a:30:bb:00:ed:46:be:6b:b5:b9:f3:7f:60:d2:30:8d:33:
43:ff:eb:02:ce:1e:e7:1a:87:a5:43:4e:d4:4d:8e:87:0d:f7:
52:dc:20:e5:1e:9e:87:d2:4f:27:2f:ac:d2:95:06:16:b4:75:
9a:b5:5f:74:78:ae:45:b6:de:38:31:83:6e:48:e7:53:37:65:
98:cf:5b:c5:e9:a7:f1:89:57:1b:ff:e0:c9:ac:a2:58:ad:1d:
e6:87:8e:4b:10:bb:0e:74:4f:1e:31:9d:ca:70:ec:9e:2e:67:
38:16:94:3e:c2:65:bd:dc:47:16:8e:52:76:bc:7e:10:ff:22:
33:16:ca:24:70:b4:2d:47:b2:37:c5:29:37:ae:8d:f6:2f:cc:
1f:a4:82:25:cd:fe:60:12:d6:42:95:0b:49:af:80:0a:62:9c:
4e:d5:68:5f:dd:69:e4:f4:20:71:53:bd:ca:81:d7:19:c4:8e:
e4:46:fa:b6:06:d4:20:40:14:2b:37:29:c0:7c:82:05:93:54:
bd:a0:b9:ba:0b:f1:c7:7c:22:27:4c:bf:70:66:da:02:f8:42:
f2:c6:60:03:f8:ba:b7:ab:47:ca:25:29:75:d0:6e:4a:e8:be:
14:2a:61:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:08:23 2025 by rpki-client