Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: 9OzqQKR01WbMVgH5pik2OzwLojT4P4isgCTHzKEzNQo=
Subject key identifier: 83:29:DD:BB:3F:76:FC:57:66:B3:3E:63:D6:44:BB:5F:1E:DE:29:89
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 0199FB45F7638BDF8DF8795333492AB8BA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 0674
Signing time: Sun 19 Oct 2025 07:01:30 +0000
Manifest this update: Sun 19 Oct 2025 07:01:30 +0000
Manifest next update: Mon 20 Oct 2025 07:01:30 +0000
Files and hashes: 1: 1eJwg5skWWcGDXFLNTcOwNfaXOs.roa (hash: 7FGDI31rrxDDlErzYzWSkDOB2c3i2HKAdvNrAxAMr8I=)
2: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: cHISqCwg5MKZucTfinL+2+ixfdIzK5nZ7xZGecCPxOY=)
3: Pu9BTwuj73Y1OYZEEjY0ZHH4Hw0.roa (hash: wFwRyxZLAd3FNxCgO3OSOt8i3+YrAeILPNwkW0awCVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:f7:63:8b:df:8d:f8:79:53:33:49:2a:b8:ba:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Oct 19 07:01:30 2025 GMT
Not After : Oct 20 07:01:30 2025 GMT
Subject: CN=8329ddbb3f76fc5766b33e63d644bb5f1ede2989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:75:c8:4f:30:dc:7b:20:be:88:04:95:55:01:
db:aa:1e:0d:14:dc:e8:ce:e5:df:8d:91:fc:97:26:
83:ea:8e:68:49:84:72:6c:94:e8:26:ea:19:ce:eb:
4e:9a:a2:15:bd:ff:ae:26:66:a8:e3:79:82:c4:0b:
e9:f7:ab:df:e6:46:0b:bd:d1:4b:89:62:f3:62:17:
96:fb:a0:67:00:78:ca:75:81:c0:52:bf:b6:c6:8e:
d7:6b:b4:a5:bb:74:1b:e2:2c:b3:33:ee:05:8e:ed:
2e:50:67:42:b0:87:d1:77:e6:c2:8a:b1:06:e8:80:
3f:af:60:c2:c1:d7:56:12:d0:6f:db:a6:ad:38:8e:
a1:f3:f8:0e:bd:77:e7:5a:1e:35:3b:c1:30:39:b3:
4b:fd:e3:cf:c1:75:ce:9b:72:e4:3c:cf:07:5c:f5:
1c:ec:e3:95:5b:f6:ae:92:bf:e2:2f:77:5b:98:b7:
ab:ad:8c:c4:5a:54:1d:06:8d:05:63:38:3d:fe:ca:
d5:f7:9f:d7:19:73:51:80:18:33:ff:e7:2f:46:d6:
76:94:92:7a:ee:ac:1c:c2:c8:bd:e4:86:23:ee:d5:
a4:57:1a:63:af:04:04:38:80:87:5f:3f:d1:45:18:
f1:a3:c0:94:8d:e2:77:fc:f1:1e:d0:b3:9b:d1:81:
f2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:29:DD:BB:3F:76:FC:57:66:B3:3E:63:D6:44:BB:5F:1E:DE:29:89
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cc:f2:1e:45:e8:bf:78:3b:ef:da:e5:d9:d6:84:1c:ef:4c:
42:17:4c:2d:7c:5b:7c:fc:b3:87:16:4e:c0:35:18:31:c1:80:
d5:bc:58:7b:ea:6c:74:3a:eb:7d:bd:a0:84:c6:e2:4f:4b:f2:
13:3f:b8:a1:59:9c:24:cc:ca:96:75:0a:66:71:0f:f4:5b:e9:
91:70:12:6b:3e:d9:94:95:4d:cb:22:88:a1:09:c5:45:6e:60:
34:fd:b6:b0:8a:33:38:f8:2d:4c:b9:5e:6a:23:03:5e:26:bb:
02:cd:7a:8d:5a:3f:c9:60:c8:88:ca:04:0a:25:38:cc:68:20:
01:46:57:b8:26:74:be:6a:e9:53:dc:5e:6c:18:d3:45:e0:8d:
78:64:21:4c:62:1b:16:26:8e:6d:ba:77:03:32:b8:40:5e:ae:
45:f3:95:7e:5a:9d:82:86:cf:f5:43:91:e1:97:84:3f:fd:e9:
b8:5c:08:92:b8:7a:81:dd:cb:6d:28:62:cf:3c:07:82:2d:76:
41:b6:97:87:7d:d6:f5:37:77:35:b9:23:26:cb:10:3e:0a:47:
2f:26:1a:e8:b0:a0:91:7b:59:c9:91:c6:e8:58:75:d2:d8:38:
d0:7f:dd:ec:ca:a7:04:13:68:04:0c:9a:13:10:bf:4b:3b:57:
b4:45:03:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:44 2025 by rpki-client