Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
File: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft (raw, json)
Hash identifier: 8sEk08SBMEHwKqV+9semCjzc6mER1lzAzC9HoutUkZM=
Subject key identifier: A2:EC:A9:63:8B:15:70:EE:78:E5:EB:71:CC:72:F3:D5:0A:A8:0F:9D
Authority key identifier: DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
Certificate issuer: /CN=de23f18c576d6fa609133533c0d0e38d7732c652
Certificate serial: 0199FC21929212C062305F0BD9CF29E0304C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
Manifest number: 038A
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl (hash: cGYUgfoFHgiAJOhwDWMvtV1qQXRzlUpdpmREw0P3r38=)
2: _uzKcHUnRqCblBfJ7LQOWwPDs9E.roa (hash: QtEg8CgvNKFjK8sDnq+KQm/gvMScP6wDUlBc5heZNlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:92:92:12:c0:62:30:5f:0b:d9:cf:29:e0:30:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de23f18c576d6fa609133533c0d0e38d7732c652
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=a2eca9638b1570ee78e5eb71cc72f3d50aa80f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:45:e5:85:c4:a6:70:12:d1:fa:55:25:b7:
e9:93:d5:a1:5a:eb:89:67:73:d4:e3:4c:b3:81:f1:
c3:5c:e1:88:6a:0f:e1:39:79:74:ab:e3:30:f0:30:
b7:d9:09:89:ae:1c:2f:08:f3:f9:ab:55:90:81:22:
da:2c:1f:3b:38:c2:cc:02:30:b3:43:d2:69:f8:25:
da:99:b4:de:96:ef:59:e8:84:0e:c2:ae:5c:79:c6:
03:93:4e:06:18:52:7e:12:7c:bc:e5:1b:40:82:a3:
aa:9d:c9:17:2c:3c:35:20:cd:66:1f:ac:0e:29:e0:
73:9e:2b:50:f0:70:6b:92:62:d6:e1:84:c3:8f:86:
98:96:28:f0:87:6d:59:1d:d5:d7:b4:03:7c:a6:3b:
f8:77:66:2d:fc:89:9b:62:d4:f4:10:d0:52:7c:6d:
64:02:3d:f7:88:97:00:d3:31:1e:bf:03:0b:b5:bf:
71:9e:3d:a1:1b:4b:15:6e:24:55:f6:bf:0c:96:31:
f9:e2:30:ea:a4:8f:25:80:23:a3:a0:b2:90:a1:e0:
15:bd:69:cc:ba:93:e4:a7:b6:3e:21:89:44:5c:d2:
27:41:65:36:25:e0:10:8b:ba:de:5a:54:29:e2:fd:
bf:77:68:37:5b:b5:4b:95:d1:0d:4d:03:72:23:ce:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EC:A9:63:8B:15:70:EE:78:E5:EB:71:CC:72:F3:D5:0A:A8:0F:9D
X509v3 Authority Key Identifier:
keyid:DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5e:8c:d1:b4:08:c2:96:a8:ee:c6:29:ff:54:10:1c:21:af:
2a:04:63:b3:c7:43:c3:ad:97:07:1d:f6:2c:05:83:31:6d:2b:
f3:b6:ab:b7:8e:20:75:ce:d5:67:60:02:00:2e:24:84:b5:82:
b4:4b:72:38:4c:9f:62:e3:39:97:00:d1:63:53:74:ef:00:45:
a7:09:af:31:5c:62:54:67:5e:37:33:a1:d9:d0:b2:d1:e5:22:
19:b9:14:d8:a3:c3:59:47:d4:c1:fd:80:1a:ea:40:06:52:d0:
1a:17:a6:03:c9:da:de:86:d5:9b:5b:7d:87:c0:ff:ce:f7:5e:
a3:0a:c9:6b:6f:d8:f2:76:fb:6d:7a:c2:2d:ff:f2:8a:18:24:
32:2c:af:c5:ed:84:96:a6:4e:67:5c:55:21:9b:95:a9:2f:22:
00:68:4f:70:bd:7a:cd:3d:f8:9b:e6:33:37:84:1d:3e:dd:ad:
a3:08:7c:ac:a2:8a:14:29:cd:5f:65:93:1b:49:00:84:c6:96:
28:e6:92:e9:bf:ac:d5:4d:1d:51:1b:52:b4:74:44:2f:71:b6:
50:33:72:0a:08:a0:fe:3b:f7:af:78:28:12:14:11:8d:88:bc:
1e:21:51:12:51:18:b3:3c:80:3f:85:1e:c3:74:36:31:36:1e:
fd:51:b2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:31 2025 by rpki-client