Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier: qLn6ucFs4VBvESmC4lUsZGMjD+aY0/+Ws6uSLU9j0ZM=
Subject key identifier: 3C:64:89:A3:42:63:4E:B1:CB:14:91:AF:B2:7A:E7:8A:F5:8C:FA:CC
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer: /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial: 0199FDD8F8D9521DFA0EB6D455EA1DC7FE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number: 0DC8
Signing time: Sun 19 Oct 2025 19:01:18 +0000
Manifest this update: Sun 19 Oct 2025 19:01:18 +0000
Manifest next update: Mon 20 Oct 2025 19:01:18 +0000
Files and hashes: 1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: SLGQbTFjZED+Ac0jnxNSfio0fpQQZOPEl9LqFqTaH6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:f8:d9:52:1d:fa:0e:b6:d4:55:ea:1d:c7:fe:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Validity
Not Before: Oct 19 19:01:18 2025 GMT
Not After : Oct 20 19:01:18 2025 GMT
Subject: CN=3c6489a342634eb1cb1491afb27ae78af58cfacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:34:bb:b5:74:31:f6:3a:3e:56:19:15:e7:8c:
60:f0:ef:c0:68:51:b7:b7:d7:0c:95:f6:4f:ef:11:
33:72:47:07:3e:e3:84:a0:58:ad:8d:8b:51:79:c0:
a3:0e:69:ea:f9:3b:d9:e5:3a:38:88:8e:a4:ac:03:
63:cc:6d:16:d3:3a:18:a3:1f:1e:20:1a:d6:0c:2e:
d5:07:b7:fd:88:a8:18:60:eb:5f:14:cc:c7:72:64:
e9:c4:50:8b:9f:e1:80:cc:f5:31:1a:71:ed:b5:81:
73:fa:f2:6b:71:e0:7c:ad:3b:18:c2:91:f2:44:13:
fc:99:6f:a8:54:21:b8:a8:f7:a2:0f:98:a9:32:11:
e0:ee:c0:29:b6:23:61:5c:52:59:1b:86:d4:b2:63:
e7:ce:60:9c:e8:ff:4f:da:d0:c1:15:a0:f9:44:a1:
a9:28:4b:e8:d0:6c:14:2e:5b:50:3f:e9:be:9b:12:
23:45:b3:b3:37:66:b8:12:83:29:9d:d5:96:7b:05:
de:fd:bb:eb:60:e7:96:69:93:24:4d:1d:2d:72:5c:
d5:46:5a:04:71:78:8b:4d:6e:9d:15:e3:d6:ad:7e:
7b:c9:4d:e5:76:25:dd:ee:78:bf:79:47:85:06:bf:
f0:33:48:f0:01:be:04:28:dd:6c:93:ab:43:8f:72:
ec:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:64:89:A3:42:63:4E:B1:CB:14:91:AF:B2:7A:E7:8A:F5:8C:FA:CC
X509v3 Authority Key Identifier:
keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:79:7b:bb:24:d1:94:a4:90:fc:2b:7f:a5:77:56:c3:76:94:
02:c3:16:86:db:03:5d:54:bb:70:c1:d8:b2:8c:71:73:c2:f8:
a9:93:d8:41:b3:ec:1f:1a:09:72:df:6a:8e:00:18:59:01:de:
14:2c:2f:58:b4:e7:21:da:07:fa:f4:38:fc:23:10:00:60:97:
d8:9c:d8:45:4d:67:9b:71:3a:33:f4:1e:45:fc:be:99:b3:53:
b4:8b:c1:d7:a8:22:2b:5d:2b:85:55:14:b4:75:5c:db:06:21:
83:a4:29:a0:1d:78:e0:c1:88:42:d8:4c:a2:6c:bb:4f:7c:c2:
f3:1f:44:91:63:20:52:78:98:da:26:ac:8e:a1:2c:16:83:9e:
0b:b4:20:fe:4f:cc:ff:ee:26:16:c5:04:05:73:e7:8a:d8:2a:
10:d8:b8:45:14:32:42:4a:6e:1e:90:31:73:a0:91:5c:66:9e:
66:c3:91:64:11:b8:52:1b:c4:95:21:83:41:4f:b0:ea:be:7d:
ce:cd:79:f2:5d:a8:5f:82:3f:51:7b:a1:cd:80:ed:2b:b8:12:
53:0c:ab:2b:c9:85:5c:a1:d2:b8:d4:71:fc:36:7f:1a:6d:f8:
9c:ba:be:f6:3e:33:67:77:a8:0e:a4:e3:59:d5:ee:4a:97:a6:
1c:4e:62:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:30 2025 by rpki-client