Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.mft
File: sz3NILWulcFy0y7XKevzBhl7I-c.mft (raw, json)
Hash identifier: gw2z5lB/vzzxWBHkSEoyk4JJMuMQIICaT5c92Xwz+6w=
Subject key identifier: EC:13:94:3D:8D:5C:6C:5C:82:85:36:EC:02:FA:D0:FD:7C:0F:99:B9
Authority key identifier: B3:3D:CD:20:B5:AE:95:C1:72:D3:2E:D7:29:EB:F3:06:19:7B:23:E7
Certificate issuer: /CN=b33dcd20b5ae95c172d32ed729ebf306197b23e7
Certificate serial: 0199FC8F2A148B95F0C040D68AA6E2AA0396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sz3NILWulcFy0y7XKevzBhl7I-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:04 +0000
Manifest this update: Sun 19 Oct 2025 13:01:04 +0000
Manifest next update: Mon 20 Oct 2025 13:01:04 +0000
Files and hashes: 1: CIm7PdRT4tGc0ohUd0vMkXyk2Z4.roa (hash: bKi9ERQ3HDvQWS3A9n+SnlJFymCAx7E6eQcIAFgcP7o=)
2: sz3NILWulcFy0y7XKevzBhl7I-c.crl (hash: f63AGQV8uen34uUjHdQiCI+E0+kUzZevm3BKZXXmMtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sz3NILWulcFy0y7XKevzBhl7I-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2a:14:8b:95:f0:c0:40:d6:8a:a6:e2:aa:03:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b33dcd20b5ae95c172d32ed729ebf306197b23e7
Validity
Not Before: Oct 19 13:01:04 2025 GMT
Not After : Oct 20 13:01:04 2025 GMT
Subject: CN=ec13943d8d5c6c5c828536ec02fad0fd7c0f99b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:76:14:74:8d:5c:a8:e1:37:0f:dc:af:4c:cb:
3a:0f:35:e2:2a:b4:fc:f6:57:2f:1d:ab:d7:bd:ee:
85:fd:81:42:38:f9:d9:48:b7:18:4b:79:c3:cf:05:
bd:96:b5:ff:0e:e6:b1:aa:47:f7:68:0a:82:1e:82:
87:2e:88:6f:f4:5c:ab:57:23:ef:06:29:0a:1d:f4:
2f:2d:d3:a7:f3:23:c5:fe:91:e9:b3:19:b5:32:88:
dc:77:94:8f:90:c5:aa:ad:b6:0c:26:5b:6c:51:a1:
33:33:ec:bc:b5:a3:33:32:97:2a:b0:82:08:76:52:
d9:5e:99:3c:de:42:fa:c9:15:0a:c2:f5:cd:e4:6c:
31:5e:0b:7a:e0:bb:f5:c7:75:ec:0d:93:6e:05:83:
8b:0d:1c:dc:e1:d9:27:9d:52:a5:68:ab:88:68:a5:
31:b8:5f:bc:04:0b:f7:90:1f:3a:5a:28:64:7d:0a:
2e:2e:d8:9b:92:fd:f4:bf:35:a5:74:12:fc:94:40:
4d:a9:71:39:ae:04:37:9f:08:9c:48:92:ac:91:fc:
e8:33:10:03:f5:fa:f8:95:7f:74:ea:95:af:86:38:
b5:a1:47:96:ed:cc:7f:6f:5d:c7:3f:d3:16:69:4e:
b8:08:94:d9:70:e7:d4:b0:a7:b3:79:66:01:f8:6e:
30:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:13:94:3D:8D:5C:6C:5C:82:85:36:EC:02:FA:D0:FD:7C:0F:99:B9
X509v3 Authority Key Identifier:
keyid:B3:3D:CD:20:B5:AE:95:C1:72:D3:2E:D7:29:EB:F3:06:19:7B:23:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sz3NILWulcFy0y7XKevzBhl7I-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:38:66:97:9d:7e:25:17:60:fb:9d:90:fc:36:4d:90:8d:9e:
ef:d8:b9:64:fc:fb:25:85:be:e6:a6:3f:a9:4f:e7:b9:ee:eb:
7c:fe:23:44:0b:c1:9e:f6:31:0e:ee:a1:69:73:28:5c:03:bb:
ca:dc:92:ea:76:12:6c:ab:63:e0:35:2f:69:85:28:b8:ca:fd:
aa:4a:8c:f7:3d:4b:a5:bc:9a:8c:ee:97:b4:1c:0a:dd:cf:1b:
a6:9b:68:37:a8:6f:ac:60:a8:53:95:88:51:2e:3c:9a:0d:9a:
1a:07:f0:ba:98:23:51:3f:5b:ab:a0:bc:45:09:ce:a1:fa:19:
12:d3:ce:f7:f4:d1:15:7c:10:cd:99:7f:c6:b0:f9:8f:01:ef:
eb:e0:ae:70:7b:91:04:71:8d:61:f1:f4:7d:e0:97:8c:77:50:
94:4e:e8:e9:68:51:5b:a1:c1:56:3b:fc:25:22:c5:20:a7:41:
8c:43:14:cb:c8:ac:ef:b7:63:53:f9:d6:e4:f5:f6:43:66:c0:
55:dd:be:3f:27:a2:62:98:05:c0:57:c5:54:34:0e:aa:8b:9e:
52:92:66:64:0c:41:62:de:70:44:e5:54:9c:80:4d:6a:9a:84:
d5:30:59:63:3d:03:5c:74:7f:ed:0a:c1:28:eb:85:93:eb:20:
31:ec:5c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:17 2025 by rpki-client