Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
File: 3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json)
Hash identifier: hDL8D3x4KGXSGeiXNjibIzSdTtwnZkpkjHPQ6qr22z0=
Subject key identifier: 00:1E:0B:9B:3A:15:9F:91:9B:53:EA:AB:FC:AE:7A:F8:08:F5:C2:E7
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial: 0199FCFDA1F86ECF41FB7D17635B9D963BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:44 +0000
Manifest this update: Sun 19 Oct 2025 15:01:44 +0000
Manifest next update: Mon 20 Oct 2025 15:01:44 +0000
Files and hashes: 1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: K6lhyfJtNZJZ4HdGAINPUFHRZ+48OfiullMznu8JDH4=)
2: Q6UDfcr6-wjzrSR02hz91bMMgCQ.roa (hash: Ri+ho1nwscaoaR+lGA/lmNvU5bMAzGg4wnbtbjS6IAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a1:f8:6e:cf:41:fb:7d:17:63:5b:9d:96:3b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Validity
Not Before: Oct 19 15:01:44 2025 GMT
Not After : Oct 20 15:01:44 2025 GMT
Subject: CN=001e0b9b3a159f919b53eaabfcae7af808f5c2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:3d:e6:87:a1:02:92:7a:90:1d:f9:42:fc:
08:f9:f9:aa:b9:49:c9:26:aa:f8:82:6a:c3:8b:ae:
83:1e:31:52:5a:f0:f8:6c:57:c6:9b:ae:31:b5:19:
a4:f2:ad:67:3c:0f:72:5e:be:41:49:a4:b6:f8:9a:
d5:37:0c:9d:75:42:96:6a:04:38:fe:51:3a:fe:6b:
f6:78:91:94:5d:8f:8e:f2:c5:77:f0:1b:a0:bb:1a:
cd:e6:9d:b0:eb:a1:91:24:c2:5d:b5:f6:2a:c6:c0:
bc:0e:eb:72:f7:14:d1:bc:21:2e:0f:a3:96:67:e7:
a0:cc:eb:09:c4:aa:3c:0c:e4:93:f0:dc:c1:eb:79:
87:f3:2d:95:48:d2:e9:08:2e:0d:25:c3:83:54:2e:
9b:47:0c:86:c3:df:47:e6:13:f9:50:5d:49:ee:70:
8e:5c:31:74:05:2f:96:10:7d:f4:6a:a2:fa:51:2b:
bf:e6:a7:c3:fb:1a:26:de:b6:6e:fa:07:a8:db:96:
1b:96:bd:77:ba:31:75:42:73:b9:f8:f9:7c:64:f3:
27:28:56:cd:74:ed:0d:ae:1f:67:91:a3:f8:9a:c2:
68:31:9f:21:c3:8b:18:00:92:7c:2b:cb:51:2d:94:
17:45:fe:fa:0b:94:92:8e:42:79:9e:fd:2f:2f:8a:
c6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1E:0B:9B:3A:15:9F:91:9B:53:EA:AB:FC:AE:7A:F8:08:F5:C2:E7
X509v3 Authority Key Identifier:
keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e4:a3:f6:8c:37:4b:55:ed:8f:c7:8b:45:30:85:d4:d8:c1:
58:65:82:20:ee:2b:5d:f7:b8:c9:0f:58:af:1b:e9:c9:5e:51:
b7:ef:65:4f:c2:ff:ee:33:e3:e7:89:92:5c:c1:fa:8f:db:1c:
c8:30:0e:85:52:38:53:b1:d0:88:aa:b0:94:97:4c:f2:22:dc:
80:f3:7e:88:41:41:08:96:0a:52:35:67:74:13:05:15:d5:d2:
a6:30:bb:eb:e0:e7:9b:6d:7a:89:79:96:c9:fa:2c:86:13:91:
0f:86:33:02:f5:31:46:34:12:6a:68:57:94:b4:53:5b:a7:19:
40:2d:da:94:6f:fa:9d:6e:5d:ed:4f:63:4d:47:2e:f1:3e:14:
fc:b1:7a:1a:61:7a:cb:4c:44:60:79:50:a3:ff:a8:45:91:18:
18:0d:57:f5:77:ed:36:a7:0f:e6:30:e2:bc:43:1b:56:61:76:
e1:c9:1c:b9:29:50:8c:25:fd:00:36:57:7e:44:f1:32:7c:a8:
97:5e:ab:35:34:07:62:8f:85:ec:dc:89:ee:be:66:34:1e:98:
e2:6b:60:2a:55:3c:3c:e2:65:f9:fc:21:83:94:0d:61:f4:63:
ea:63:a2:3a:29:8a:50:63:43:f7:a9:59:01:fa:85:6a:c9:d9:
4b:4a:2c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:46 2025 by rpki-client