Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: IzCzXDFN398sHRVNknujS36iEfIRa4vO7x6aZoJcpUo=
Subject key identifier: A2:BA:FE:F0:ED:4B:D7:99:43:89:7B:5B:36:F9:51:CF:4E:08:81:8E
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 0199FCFD9117598EE5399A56D2213C214BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 15:01:40 +0000
Manifest this update: Sun 19 Oct 2025 15:01:40 +0000
Manifest next update: Mon 20 Oct 2025 15:01:40 +0000
Files and hashes: 1: 1-r8ngTnAMIWnigi3kZKRlPxzAEg.roa (hash: 4upInjfh8BMDhZW1GMRFLRcUKFy4sgss61UjVbuCcN4=)
2: 3bHFI98fNrO-AI7iYMdoY6Cy4Ec.roa (hash: jNavEGcWKNfNKB84/MmKoUJXT5oHj4PAQhOkM5ErTv4=)
3: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: 6HWIgWCcvln0qEXMtcsRzdL8kysFoXcpGi4HEua/uk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:91:17:59:8e:e5:39:9a:56:d2:21:3c:21:4b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Oct 19 15:01:40 2025 GMT
Not After : Oct 20 15:01:40 2025 GMT
Subject: CN=a2bafef0ed4bd79943897b5b36f951cf4e08818e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0a:ae:ea:85:88:1b:9d:ce:e0:4a:57:c0:7f:
9e:c3:32:f6:04:2d:9c:4e:01:02:79:52:5d:2d:7f:
ef:6b:82:d5:38:6b:4a:b8:34:9e:c8:0f:a1:75:a0:
44:51:89:2a:3d:02:65:e3:98:c2:49:d5:ea:72:4c:
47:11:2b:f9:8b:9e:32:5e:82:53:53:6c:4d:1f:44:
60:a1:16:f5:66:86:28:83:2a:64:5f:39:a3:63:1d:
aa:8f:4c:d6:c5:3e:d3:5d:44:8c:b7:8d:91:4b:01:
70:59:80:e5:08:48:aa:9c:53:c2:c3:ac:c8:c6:c9:
d5:52:78:14:57:47:27:e8:0c:7d:7b:36:69:20:2f:
07:25:4b:20:e8:1d:6b:23:4e:31:64:e3:a7:ea:6e:
91:5a:a9:b6:02:c1:ed:b0:a1:49:aa:4e:52:af:66:
af:f6:e6:b0:14:1b:9f:f3:19:35:3b:3b:8e:09:bc:
8c:47:cc:93:65:72:2b:98:e4:cc:24:04:50:64:d9:
90:0e:83:71:bb:2d:6d:ea:12:7c:b1:3f:a5:27:22:
a7:d5:e9:c6:65:74:a3:95:9c:25:5f:60:3f:f4:7f:
f1:06:17:31:53:cd:47:d7:b9:d7:55:cf:f7:69:bc:
6b:f7:21:5f:e7:98:d7:ab:77:2a:4e:0a:2f:81:40:
d9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BA:FE:F0:ED:4B:D7:99:43:89:7B:5B:36:F9:51:CF:4E:08:81:8E
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d6:15:da:26:08:df:ff:4d:1b:86:86:44:91:5a:19:51:62:
35:21:1c:48:d9:8e:e0:54:34:67:b1:e6:93:09:eb:72:7d:d3:
44:12:f5:0a:11:da:86:b9:3e:5c:04:6e:31:b0:97:05:ba:f7:
ea:0b:a0:62:b0:36:4c:58:4b:68:12:38:da:0e:a7:23:96:e7:
07:e1:ca:64:e3:30:b3:f9:d3:df:d2:7a:98:4b:a4:35:b1:bf:
cb:35:d0:a8:0f:52:d3:e9:d2:51:b3:42:37:12:88:33:ca:1a:
df:3f:02:7b:cd:dd:47:78:de:7a:61:76:b4:56:bc:f0:c2:a0:
7e:37:23:1c:7a:cc:46:fb:b9:ae:da:23:7a:51:2a:9c:e8:64:
5c:18:d4:83:01:f0:e6:3d:54:70:76:f4:02:00:40:d1:ae:18:
5f:03:1a:86:e9:8f:76:b6:68:17:3f:53:69:06:bf:c8:30:39:
a4:6e:13:ea:2f:6f:c9:51:ae:bf:6e:11:bd:74:12:97:69:56:
a0:e4:ed:ad:03:61:57:a8:86:b3:80:7d:8b:5c:b2:54:72:89:
48:73:f0:7c:ef:10:f3:33:31:a4:63:c5:80:e9:2b:ec:ce:08:
e2:7b:db:80:6c:eb:cf:8c:d3:be:e3:cc:c1:26:0a:d9:0c:ba:
92:a3:e0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:03 2025 by rpki-client