
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File: 3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier: +S5Ooy9FnMsMmHTmJoJMYTXsGTQRnJWExzh1YjbhoFc=
Subject key identifier: C3:5C:4B:42:21:33:F3:9A:2A:74:A4:18:13:85:48:E7:09:5D:9E:C3
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial: 0199FBEB3CD3117C1CED43941D9B9221ED72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number: 075A
Signing time: Sun 19 Oct 2025 10:02:01 +0000
Manifest this update: Sun 19 Oct 2025 10:02:01 +0000
Manifest next update: Mon 20 Oct 2025 10:02:01 +0000
Files and hashes: 1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: 7yITEOL5A2WQUl35bkKZmW2f45wFqAwh/63hJi4JIIM=)
2: HrIwTwMD6cd99R3d7bEiTOryXZg.roa (hash: 1wrHqn0lkUk+GnZl+JBgqFqtnLiVA3gNpwduqpO2T9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:3c:d3:11:7c:1c:ed:43:94:1d:9b:92:21:ed:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
Validity
Not Before: Oct 19 10:02:01 2025 GMT
Not After : Oct 20 10:02:01 2025 GMT
Subject: CN=c35c4b422133f39a2a74a418138548e7095d9ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:19:b5:05:62:d3:70:97:1a:a3:5f:95:1f:
75:60:a9:bb:a0:d0:80:24:7f:9e:6d:94:ae:4a:8f:
6f:18:e2:7c:79:6b:6e:fd:27:f7:35:df:d9:20:83:
53:d7:78:1f:9e:4d:99:9a:7a:55:5e:d0:c8:57:f1:
5a:04:3f:8c:52:93:3f:c9:6e:c7:01:19:9e:22:b8:
42:00:46:bc:11:f6:5f:ab:2c:10:59:5d:b0:69:e4:
1b:f0:2e:88:01:bd:54:7a:5d:91:9a:13:bd:d3:a0:
9d:d9:3f:c3:12:ff:1f:7f:a5:c1:21:39:81:46:f4:
5d:47:df:98:b5:a0:2e:c9:9b:44:ed:e5:44:e8:26:
8d:fa:84:8a:01:ab:f8:82:02:c8:c8:12:c6:f6:ce:
29:e8:93:88:da:47:0a:b4:9b:c1:6d:1a:8e:d7:9a:
f2:d1:b7:4b:27:83:29:2b:1f:03:47:3c:1a:7c:91:
f5:67:7d:ae:94:d9:fe:be:65:e5:75:e9:1f:e2:bc:
73:f8:17:1c:f5:49:1e:37:ad:59:8b:10:b3:71:44:
bc:67:59:4b:48:0f:3c:20:94:a9:d1:68:90:c9:dc:
8c:78:26:7c:67:cc:10:0b:ff:31:55:a1:1d:94:0b:
14:a5:f2:02:d8:ae:ce:4f:2d:97:c7:ce:d4:20:51:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5C:4B:42:21:33:F3:9A:2A:74:A4:18:13:85:48:E7:09:5D:9E:C3
X509v3 Authority Key Identifier:
keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:91:7b:c7:6c:a4:ac:b1:4a:9b:c9:d2:1e:a4:33:ee:8e:45:
70:a6:96:5a:29:10:e4:d4:5f:c8:e9:21:2b:a5:ce:43:6c:e3:
2d:bc:a3:27:8a:71:0c:20:76:9b:c3:c4:45:82:23:25:78:17:
ef:ac:ec:9d:52:f6:8f:e4:84:6e:92:bc:fc:c1:53:be:1b:60:
0a:8d:9c:bd:00:14:18:66:86:9e:cf:a1:d9:1b:00:05:6f:41:
10:75:49:53:04:a5:a0:17:d0:15:10:9a:bc:42:e0:50:d8:24:
3f:fe:23:dd:44:34:66:c9:b5:aa:4f:75:8e:14:bd:ec:fb:18:
0a:e0:d1:f0:8c:7c:c1:95:0a:95:07:ea:20:5f:27:3f:89:fa:
e5:26:c0:60:12:0c:10:39:e9:74:6f:39:ca:13:cd:08:6d:13:
fc:e5:6f:f5:b5:4b:09:d9:da:f0:ef:14:f1:3d:09:3a:61:4d:
94:d3:dd:09:5a:76:af:3e:50:97:c1:1f:2d:c2:26:b8:f1:dd:
df:b3:ae:54:c0:18:6c:b7:c5:b0:9b:74:d6:3c:85:33:d8:47:
45:6a:19:87:83:8f:18:0f:db:57:39:d0:72:7c:cb:8b:05:bf:
02:37:c9:5d:7a:54:1b:09:17:d5:be:68:54:76:6a:1a:b0:af:
47:26:91:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:09 2025 by rpki-client