Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
File: 3HbS9D7BffyAXNsF8AChV5ie1Eg.mft (raw, json)
Hash identifier: U8M+RkdKsy8uE0+6bDvbqJtFt/ABYNEo1Dy1hZDVi1M=
Subject key identifier: 16:4E:C9:AB:9E:B8:2F:55:68:A7:C8:17:62:B8:A4:23:E0:76:34:B1
Authority key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
Certificate issuer: /CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Certificate serial: 0199FB7CDE27FBA90010E7FD7457E959BD61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 08:01:28 +0000
Manifest this update: Sun 19 Oct 2025 08:01:28 +0000
Manifest next update: Mon 20 Oct 2025 08:01:28 +0000
Files and hashes: 1: 3HbS9D7BffyAXNsF8AChV5ie1Eg.crl (hash: vzHBHmKDTlD7G4FrPOtmrrYf41db0ka65/CBQaaIUxs=)
2: vMasAu2YCDgiGttPAAgT_LUqims.roa (hash: vZV6QUfnrQuKBHkkqaJTtSdtOrcdYKhNNa/gcjcEoTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:de:27:fb:a9:00:10:e7:fd:74:57:e9:59:bd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Validity
Not Before: Oct 19 08:01:28 2025 GMT
Not After : Oct 20 08:01:28 2025 GMT
Subject: CN=164ec9ab9eb82f5568a7c81762b8a423e07634b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:40:7f:2a:fd:b5:b5:37:e1:3c:8d:ad:17:
8d:1a:5c:90:e4:7e:f4:a5:58:1a:c4:24:02:2a:8c:
03:14:02:2d:4a:cb:6f:7b:5a:9b:20:43:8f:bf:51:
bb:80:1d:3e:7f:63:9d:4e:90:40:5d:45:31:02:8d:
23:cb:23:ae:b1:59:6d:12:42:11:88:3c:c9:14:45:
75:f6:96:96:fb:d0:68:81:bb:46:2f:09:88:7d:b6:
fe:4d:c6:3c:2b:fe:39:b0:01:a7:13:38:8c:6d:b6:
1b:61:eb:14:d3:a8:5e:98:d3:f2:11:11:2f:f3:e9:
94:ab:b6:5d:bd:b1:34:df:e6:88:e8:83:e7:1e:3c:
32:a8:fb:bd:72:63:38:47:16:b5:46:68:80:3f:a7:
73:4c:ec:25:2f:be:54:26:c9:de:3a:4a:de:f6:f6:
d0:5d:d6:0a:ef:0a:19:8b:c7:dd:f8:21:e5:00:63:
25:61:04:df:d6:66:67:ec:08:31:92:cd:7a:67:e0:
d2:bc:8a:eb:b4:09:80:95:9c:a8:a8:ec:01:3a:27:
d3:8c:0b:91:b6:c6:9f:b7:b2:a4:39:9a:6c:fa:5a:
7c:98:16:92:c0:08:38:8a:04:4d:e9:ce:df:ce:92:
9b:a9:7f:22:89:4c:dc:ae:d4:fb:8b:79:e4:dc:a6:
ca:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4E:C9:AB:9E:B8:2F:55:68:A7:C8:17:62:B8:A4:23:E0:76:34:B1
X509v3 Authority Key Identifier:
keyid:DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7a:15:79:86:54:40:02:55:96:78:a7:92:84:c5:dd:64:f0:
58:af:a2:c7:32:ce:1e:d7:be:88:e5:cb:46:82:9c:38:c0:16:
8d:40:38:9d:14:1c:b5:d9:28:af:14:97:34:4c:ef:c2:a3:33:
80:3a:e2:56:d0:69:81:64:f6:50:1a:02:9c:dc:ba:dc:8d:9d:
eb:2d:fe:cc:a2:62:f2:1c:e3:5a:92:be:b0:ab:85:a9:a5:bc:
ea:ba:bb:d9:8f:3a:c7:7d:3d:a3:b4:58:a1:b9:6e:55:29:0b:
b4:0e:38:46:4f:b3:22:ae:61:26:be:f1:0e:07:0e:e3:96:d7:
2d:62:1c:a3:d6:a3:cb:1e:98:e7:92:d2:a4:93:87:70:90:6f:
81:a2:4a:6e:b4:b1:e4:55:d2:8c:44:95:65:16:a8:f4:a2:84:
69:cf:e7:3f:d9:5b:d3:a1:35:cf:2e:3a:d4:06:fa:5c:3c:52:
08:2e:bb:f6:d1:7b:22:60:dc:cc:47:b3:d2:c8:dd:1d:1e:25:
e1:c0:8e:b2:f0:82:ef:08:c0:0b:08:3d:46:41:16:a6:fc:12:
bb:ed:d6:ba:83:65:77:cf:57:5a:6a:05:58:30:f0:02:39:1b:
d6:68:4c:85:2e:ad:47:f3:f0:3f:32:b2:47:95:84:1f:ad:8c:
5a:8a:f3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:53 2025 by rpki-client