Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File: 3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier: 4klU+5SsEcwxsWf8ug5UM6KcY2TkHXC2a7T2ji+T2ik=
Subject key identifier: B7:E9:78:99:35:58:95:5B:9A:B5:C5:E2:23:69:E8:31:65:60:85:3A
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer: /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial: 0199FC5849746CB4050FCAFCDEC643AAA879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:08 +0000
Manifest this update: Sun 19 Oct 2025 12:01:08 +0000
Manifest next update: Mon 20 Oct 2025 12:01:08 +0000
Files and hashes: 1: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: BHqCbE6V46vwh7yjmkwnpFNOvfWP86iJOiqpIHZ4qC0=)
2: JiXA3NEuZkH0QXN05zeuUA5jMwY.roa (hash: YFDd4vweHXAu3AFKCBPOWScIToP/BlFEZooHjiGGKLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:49:74:6c:b4:05:0f:ca:fc:de:c6:43:aa:a8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Validity
Not Before: Oct 19 12:01:08 2025 GMT
Not After : Oct 20 12:01:08 2025 GMT
Subject: CN=b7e978993558955b9ab5c5e22369e8316560853a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:17:50:88:77:cc:40:ea:9f:4a:08:b8:6c:
42:57:43:ce:9b:15:7e:a1:43:54:2a:07:8c:10:f8:
75:06:b2:28:d4:22:8b:8a:c2:c7:3c:b7:34:c4:94:
36:a1:14:b6:16:3e:21:d0:d7:d4:e2:bc:02:55:c5:
f5:8f:f3:59:e5:b8:56:40:36:f5:a6:e0:2a:9b:36:
1b:d3:a4:6e:89:5c:e0:19:3b:16:c4:80:9d:52:4b:
c3:c1:af:4b:18:63:95:77:b5:7d:07:50:8e:ce:a0:
66:2b:62:3c:0e:15:ae:62:0a:74:8e:1a:35:37:76:
24:7e:93:0a:ca:53:f2:fb:e1:af:c1:8c:a6:1d:30:
9a:a1:84:27:e6:ec:fb:42:cd:5f:f6:83:90:71:13:
60:dd:ca:df:a5:3e:71:f4:a0:44:bf:bc:6c:6b:d0:
01:01:45:bf:aa:40:56:26:fa:4a:2d:31:12:8d:96:
b3:43:7e:56:e0:36:26:d6:81:30:2d:94:5e:ed:d2:
1b:28:a8:9a:c8:92:da:d4:61:9c:ab:4c:8c:bc:c4:
11:ba:59:00:12:19:fe:1f:e7:48:24:78:e5:d8:82:
ea:68:fa:b3:f0:c9:9b:38:26:24:17:b7:d8:9c:80:
23:00:de:4a:7e:90:1a:71:4b:2a:da:90:66:b3:57:
f5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E9:78:99:35:58:95:5B:9A:B5:C5:E2:23:69:E8:31:65:60:85:3A
X509v3 Authority Key Identifier:
keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0b:0d:ab:a9:78:5d:af:53:74:62:1d:f5:f1:e5:fc:a8:13:
00:07:7f:94:15:ec:19:88:d8:dd:53:8e:f0:ec:72:d0:fb:21:
b4:05:88:cf:d4:ab:34:cc:3e:02:fc:4a:92:4e:32:03:a7:1b:
78:b1:2b:76:d1:e5:3e:83:c5:a5:29:82:5a:95:8c:1e:9e:cd:
42:52:e2:d0:e1:18:36:ca:12:58:55:47:a8:8c:aa:cb:3e:71:
8c:49:5a:92:b0:0e:0f:1d:4b:1b:3c:f0:b6:be:cb:40:20:7a:
e9:a4:ea:f2:ae:68:14:c4:07:12:ea:e0:12:90:77:e2:4a:aa:
10:87:39:23:16:8f:9f:90:5a:5a:19:ae:f8:2b:8b:b1:e8:db:
84:3b:ce:eb:e8:0a:6e:ba:c4:b1:48:a6:3f:0d:b8:5b:9e:0d:
64:40:7c:15:6d:5a:65:76:ae:0d:ed:be:e0:eb:0f:92:8f:a0:
e0:01:e4:f9:ec:c5:a1:aa:6a:e4:21:40:04:62:75:2c:be:9a:
87:4c:fc:50:69:f0:aa:6d:69:74:eb:27:7c:21:c5:5f:9c:1d:
9e:4b:fb:78:0e:61:fd:b7:ed:7a:48:d7:7a:cc:c5:6b:ea:55:
9a:d6:9e:5e:17:10:2a:75:19:d1:12:85:32:f5:db:53:5a:b5:
f4:eb:95:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:01 2025 by rpki-client