Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
File: edQ3WEq9tIITYw3KpfAMnSw8wXk.mft (raw, json)
Hash identifier: geGJzAxVYXsdaFeTZDrnOs/P95uZfgAtz24LGyRS/bA=
Subject key identifier: 32:76:32:7F:40:39:C2:47:33:5E:49:29:30:0C:E9:4B:DF:64:73:5C
Authority key identifier: 79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
Certificate issuer: /CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Certificate serial: 0199FE46CC853E7079AC4100CE9AC0EA4ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
Manifest number: 1192
Signing time: Sun 19 Oct 2025 21:01:16 +0000
Manifest this update: Sun 19 Oct 2025 21:01:16 +0000
Manifest next update: Mon 20 Oct 2025 21:01:16 +0000
Files and hashes: 1: _6bJkuzxLJMC8zZKQrB-nCnecco.roa (hash: GqXUAXRZkYfH9YlSLUwHS7QBNR7+ywl2PUwYOYs72Io=)
2: edQ3WEq9tIITYw3KpfAMnSw8wXk.crl (hash: dpGWu6T+i5teZrIabtCagZnZhCyTxHSa8BChet553nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:cc:85:3e:70:79:ac:41:00:ce:9a:c0:ea:4a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Validity
Not Before: Oct 19 21:01:16 2025 GMT
Not After : Oct 20 21:01:16 2025 GMT
Subject: CN=3276327f4039c247335e4929300ce94bdf64735c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:68:a9:48:6a:04:e1:71:c7:ec:ca:fd:3b:34:
cd:f6:9e:9f:48:f9:34:b4:5d:bc:44:77:53:1a:b4:
f5:37:9c:27:ee:46:cd:26:06:8a:7e:bf:ec:9a:6d:
13:d7:48:68:08:fc:75:44:38:a7:91:57:a5:52:21:
f7:7e:e7:fd:fa:0b:68:30:eb:d4:88:24:25:01:24:
d7:f7:a9:9f:c9:9d:41:3d:ee:c2:e0:39:4a:c4:83:
53:e9:45:59:0a:f7:09:38:5f:8b:b9:a5:e8:db:21:
27:c4:03:fe:07:20:88:ed:95:e2:e3:5c:76:fc:2e:
34:c8:92:98:c9:61:aa:7c:3b:86:c6:26:75:d1:be:
48:ad:e4:1f:1a:81:c4:41:c8:d1:65:b4:af:3e:bf:
49:c4:78:96:d8:dd:b9:b9:fb:50:3b:c2:24:3b:1e:
a1:a6:b5:fc:b7:b1:4b:f9:24:53:c6:8e:40:f1:3b:
91:d8:00:76:0f:90:f8:db:66:c4:3b:66:f0:ed:b7:
68:3b:1f:8b:e8:69:14:1e:3d:19:4a:7f:5d:89:11:
21:98:01:6c:63:0a:ca:74:87:34:63:20:5a:e6:e2:
12:9f:70:ef:dd:d0:ff:db:28:c1:ee:05:6b:2d:1b:
36:a7:29:4d:f8:fa:6e:fa:82:14:64:9d:c9:db:1b:
4a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:76:32:7F:40:39:C2:47:33:5E:49:29:30:0C:E9:4B:DF:64:73:5C
X509v3 Authority Key Identifier:
keyid:79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1b:2c:2b:6b:f8:45:47:0f:40:f0:1d:d9:53:94:88:26:8b:
01:95:47:91:b5:6d:50:ea:9e:a5:4c:69:34:42:5c:21:12:f1:
6d:f1:a2:03:00:64:ab:ff:52:e2:0b:70:bc:21:e4:bd:05:7b:
e5:14:cd:8b:f4:0a:c5:22:7f:ae:37:58:20:64:15:e8:52:5f:
dc:4d:0c:e6:ce:1e:6c:c6:bc:25:6a:da:b7:06:92:21:f4:1e:
c2:57:24:5e:a6:70:33:fd:11:c7:17:d1:0e:6d:1a:58:e7:e6:
fa:96:0b:97:ad:b7:7a:52:6c:ea:a0:ce:15:dd:4a:77:e2:86:
82:aa:b9:38:d0:ff:3f:f5:ea:9e:f9:ef:15:d8:ba:28:bd:15:
2f:f7:94:b6:4d:86:13:8e:61:ad:05:96:62:de:ec:23:78:30:
ab:b3:04:f8:b0:1f:fc:8d:4a:7e:b3:36:fc:0c:4a:f0:3b:73:
da:c4:63:06:25:08:0d:5a:eb:ec:ad:15:1a:6b:ec:f6:bd:4f:
80:ac:6c:b1:f7:bf:cc:57:aa:ff:24:68:89:49:c5:f8:e5:99:
5f:df:d4:cf:9e:bc:ed:1f:00:46:7e:fd:d7:d4:7c:6e:7c:65:
4b:1f:00:97:f6:bb:3c:b4:1d:f0:5b:0d:62:cf:3f:ab:73:75:
43:d2:84:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:19 2025 by rpki-client