Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier: izRWYeBbtpgAhltRuL6fkRS/NZm9Seiy/Rfz7BriP18=
Subject key identifier: 40:48:34:83:7B:46:F4:38:C2:98:DD:0F:30:58:CF:23:1C:60:8A:63
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 0199FFC89C81848C9AECDB26968CB2A509E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number: 1197
Signing time: Mon 20 Oct 2025 04:02:41 +0000
Manifest this update: Mon 20 Oct 2025 04:02:41 +0000
Manifest next update: Tue 21 Oct 2025 04:02:41 +0000
Files and hashes: 1: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: KGVA7kUzHUj+kULZ8/ETNWSo980rsFfHcwaGgFaHlAA=)
2: 4PgtcW6j7xPoaJPy67vk2tMAXu4.roa (hash: fufIwyPbWqbMyORM68+h1FhSNKXbFzjdgG7WcXkavWU=)
3: cUPSsBWZ4irx4TApxzbroJpf5do.roa (hash: 6GPPFraRfTGyKrm5jIIIVF8Jt+KHlsZR8YFMwLgpuuE=)
4: xqYP462dYCt-0eOV8zXikdtxg14.roa (hash: YzKJbzm4Szaaz/1aNRHY+rmqu5/8YwNywOTzBNgzdeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:9c:81:84:8c:9a:ec:db:26:96:8c:b2:a5:09:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Oct 20 04:02:41 2025 GMT
Not After : Oct 21 04:02:41 2025 GMT
Subject: CN=404834837b46f438c298dd0f3058cf231c608a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:12:82:f1:1a:76:d8:02:9f:48:d7:c0:fb:c9:
be:1c:58:0c:98:98:9c:04:e7:af:ce:0e:36:22:d4:
ab:b6:f0:08:4c:d2:52:de:bf:e6:a3:ee:80:ea:8b:
45:49:ac:37:aa:25:69:31:35:fe:3b:14:ff:0d:c8:
9f:e6:49:de:d1:c3:b0:60:78:7c:e7:8a:4a:31:1f:
b1:f7:14:37:60:17:e0:44:2d:0b:8a:e0:1b:9b:5c:
ec:72:eb:e1:d8:fe:e8:9b:aa:3f:a9:29:bf:74:db:
98:6c:59:6d:57:b0:95:bc:ab:a9:6c:36:31:cd:73:
07:15:82:d3:15:57:7d:3d:7e:b8:c2:8f:85:33:5c:
97:40:42:a1:8b:15:f5:2b:57:91:cc:59:2b:0e:e3:
18:12:2c:57:b9:2f:d7:3c:b9:d4:fa:16:5b:6c:a6:
ba:33:50:9c:ad:a3:20:11:84:eb:4c:db:12:84:fc:
c2:86:0c:92:e3:00:08:da:3d:fb:33:29:92:0a:1b:
19:c7:cc:05:89:9b:36:1e:d8:27:f1:9b:84:a0:cd:
60:94:b5:19:70:56:bd:f0:0d:d3:cf:c0:73:6a:e3:
75:e1:a5:a7:ad:d3:5d:4d:ea:44:36:a0:23:08:67:
b0:22:ef:ae:90:fb:fb:ea:53:69:cc:d5:f0:5e:a5:
37:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:48:34:83:7B:46:F4:38:C2:98:DD:0F:30:58:CF:23:1C:60:8A:63
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:16:35:47:be:3b:58:e8:d4:67:03:e0:89:74:7b:89:f8:2d:
9c:48:ac:46:f5:dc:29:4f:82:7c:30:c1:d6:ae:15:c4:9f:34:
f8:76:84:2f:81:cd:89:af:b3:c5:98:ae:a7:f1:5c:22:54:a8:
4c:d4:4b:e6:1b:74:a9:27:1a:3a:dc:9e:bc:33:f1:1a:ca:9d:
0e:19:76:5b:32:ff:1b:14:bc:9c:4f:17:02:db:e2:79:f0:f1:
84:0a:34:7c:c0:6d:ef:f1:ed:b5:6a:9b:fa:97:9a:2c:3e:f2:
e4:96:7d:d4:af:21:48:67:74:b5:b7:f2:d0:73:00:1c:44:2e:
cd:5f:7a:23:3e:68:25:6d:b4:f8:93:76:3c:0d:56:ab:db:40:
fe:b2:6a:0f:18:91:88:b6:52:86:fe:f6:c0:62:14:c2:2c:d2:
08:be:51:5b:5c:2e:25:16:23:b0:83:33:69:1a:35:77:0d:ba:
82:a6:41:b2:76:a3:b0:28:fa:e2:16:de:95:31:c2:fe:03:67:
f6:e9:59:bd:7e:85:07:b5:a1:5d:89:31:d1:43:19:e6:ef:31:
5b:3a:5a:1d:72:63:55:26:0c:94:5d:6e:16:23:3b:17:a1:44:
8b:1e:e4:e3:8b:4f:c5:ec:ec:cc:a0:8d:53:df:eb:6c:2f:c4:
e2:c2:ae:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:12:36 2025 by rpki-client