Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
File: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft (raw, json)
Hash identifier: sKGYDlNgICwbNgW5SPJ90L/EC+tbSldXz8+c1z5hqdw=
Subject key identifier: 4B:0B:4A:AC:77:47:73:D3:5F:D8:94:B6:A9:A2:E5:7D:4F:FF:EA:44
Authority key identifier: DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
Certificate issuer: /CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Certificate serial: 019A0035116BA1B3659535C07E04174D8959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
Manifest number: 0F65
Signing time: Mon 20 Oct 2025 06:01:09 +0000
Manifest this update: Mon 20 Oct 2025 06:01:09 +0000
Manifest next update: Tue 21 Oct 2025 06:01:09 +0000
Files and hashes: 1: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl (hash: 7azlprXUpc6WS0sR8bqT+GsSxTnZD3FXB8BOv53w6Ok=)
2: Kw550ydpOki0PWOYy-6z5BR-VIE.roa (hash: DJKKlAPQ1FQMVESwtaTdBMt71sNwkspOh/dlMgsjkTY=)
3: fcEpjbgKYOO71SWou3_dCE-kLKk.roa (hash: zROet63WRPPKV6TiwIGdua33aTn4W6zOjjUbs9hhWRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:11:6b:a1:b3:65:95:35:c0:7e:04:17:4d:89:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Validity
Not Before: Oct 20 06:01:09 2025 GMT
Not After : Oct 21 06:01:09 2025 GMT
Subject: CN=4b0b4aac774773d35fd894b6a9a2e57d4fffea44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2c:84:82:34:80:e4:44:46:3a:a3:42:74:1f:
57:40:31:ab:1c:74:4d:dd:ff:b1:e6:37:49:96:8b:
bc:11:4c:b9:9c:eb:8d:c2:bc:19:67:55:71:f9:ca:
45:5f:1c:89:e2:74:68:65:d8:39:ec:90:84:a8:fa:
f0:26:cc:fb:0f:dc:f0:68:53:db:f8:38:b5:4a:02:
0b:30:a1:95:8d:9a:50:5c:b6:fa:25:a9:d3:de:24:
da:17:dc:f8:35:ec:24:bd:cb:aa:50:67:35:bf:2f:
fb:c3:97:9a:88:1c:b7:61:4e:35:ad:48:d1:51:55:
b6:dd:7c:e3:e8:95:7a:b4:2a:0b:1a:cb:af:70:31:
41:1d:26:72:f0:e2:c0:e1:99:fb:66:c0:6f:19:37:
66:2d:03:1e:1f:11:51:00:e6:3a:6f:2e:ea:4b:94:
b8:b5:d2:f6:4f:ff:ab:21:61:37:a8:7b:d4:9e:1a:
62:59:17:ab:27:ec:b2:f0:56:df:4f:af:59:bf:46:
fd:e7:33:e4:9c:f8:33:df:dc:90:1b:64:60:6b:3b:
d4:e7:46:af:1d:14:2a:03:c1:e4:26:72:7b:04:55:
92:05:1a:74:14:d2:4c:bb:1c:d2:b6:58:56:eb:6d:
6a:bb:bf:63:0e:42:71:1c:42:5e:29:a4:ae:d5:29:
e7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0B:4A:AC:77:47:73:D3:5F:D8:94:B6:A9:A2:E5:7D:4F:FF:EA:44
X509v3 Authority Key Identifier:
keyid:DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:09:64:48:58:84:dd:36:d6:a3:7d:b6:cf:67:f4:33:01:31:
22:46:18:a1:4c:7d:04:4c:93:32:43:c2:77:f6:ee:13:03:1e:
54:72:46:16:85:99:85:c4:c3:03:fa:89:7d:d5:8f:65:37:39:
64:ce:81:e4:51:46:e8:9a:3d:f2:29:a4:10:3c:ae:54:22:4b:
4e:a1:d0:0b:fd:66:52:f3:3b:58:86:55:b2:81:31:ca:1e:e0:
38:ce:63:c8:79:c1:f6:69:68:ab:32:4f:6b:85:b3:e3:af:5b:
37:79:8a:cb:5d:0c:43:f7:b4:48:5d:2f:85:3a:5d:7c:e4:77:
e8:91:6f:b3:c1:ed:8e:a4:b1:fe:f0:52:15:c9:7e:63:07:bd:
d6:cc:df:e1:3a:28:79:22:97:4e:79:a7:8e:70:4a:90:5a:be:
05:18:cb:48:b9:10:71:63:91:41:4e:27:5f:4a:7f:1d:ad:f8:
3a:e0:50:3b:7c:bc:68:79:0c:4f:37:fd:41:24:1b:8b:a5:a2:
f6:04:13:01:37:fe:dc:c7:72:ff:95:c1:5a:ae:c1:2e:ff:f1:
d2:4e:b0:ef:2f:e4:23:c0:82:e6:f9:7b:38:39:ee:cf:f2:f1:
20:15:56:91:8a:af:dc:49:3f:ca:17:62:bb:c2:d2:82:9a:ac:
82:98:18:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:57 2025 by rpki-client