
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: KpG9cStP09WewfhZTFY+t1lsoL4TbT6lBpYGh78xEUM=
Subject key identifier: 7D:4F:3C:A1:D8:90:84:5B:77:7E:4F:2B:A7:67:5A:2B:7E:AB:8E:03
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 0199FAD84070F8ACE11B2C6DA9DDD884A065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 1024
Signing time: Sun 19 Oct 2025 05:01:40 +0000
Manifest this update: Sun 19 Oct 2025 05:01:40 +0000
Manifest next update: Mon 20 Oct 2025 05:01:40 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: O7GKFU5NSzzoys+rQ81fBNxW3ywZcfF+j8gShJWh5aw=)
2: GJgS7xgFqg_T1Brv5T3Z3VSHSQs.roa (hash: qcKfQ/V3fbXzE7gbTkc10cKeggN9uhLupcmee0zeuj8=)
3: gDn1RHCMxQyNW_pGfUDeAoFsteY.roa (hash: aOveJJ3ah1WLjPcvfI87OOrTavXERjpgS9XWi0GEgq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:40:70:f8:ac:e1:1b:2c:6d:a9:dd:d8:84:a0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Oct 19 05:01:40 2025 GMT
Not After : Oct 20 05:01:40 2025 GMT
Subject: CN=7d4f3ca1d890845b777e4f2ba7675a2b7eab8e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:de:16:c3:e6:9c:c0:c1:81:9c:88:13:08:bd:
7c:41:10:a1:c9:51:f1:9c:29:62:64:46:22:fc:69:
e4:4a:12:e8:f4:95:11:c4:26:b3:fd:2e:bd:73:09:
31:b3:28:91:ff:94:b0:72:b8:3c:78:62:2f:ee:26:
0f:70:0c:16:77:a5:8b:18:97:49:61:27:8a:54:0b:
f0:35:82:cc:21:07:f8:f5:ad:81:00:e5:b8:93:17:
6c:4c:c4:7c:32:c5:ca:6b:68:b7:0e:8d:3a:5d:81:
f5:17:ba:fb:b8:40:dc:d2:1c:e8:0e:1f:ec:55:39:
99:58:b0:45:57:5c:78:51:eb:97:ae:10:b5:c4:ff:
71:78:b3:02:ec:df:91:3e:e0:e1:53:e5:3a:13:7a:
4e:4d:8e:88:19:0a:1c:fc:b8:93:5c:59:9c:df:ce:
b5:44:1b:1f:56:8f:b0:a9:b1:0b:d5:14:94:ee:07:
3a:db:8c:3b:47:9f:97:50:b6:6e:59:60:09:9c:87:
15:f8:75:20:3b:53:f5:e0:51:7e:2d:74:45:a5:7b:
09:8c:af:19:47:46:d1:02:7a:0c:c3:89:94:0c:a7:
bd:bd:7c:6a:68:8e:c3:76:14:47:67:d9:02:2e:1b:
1f:ca:20:63:a3:43:a5:2d:ab:f1:fb:83:cb:0f:d5:
5e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4F:3C:A1:D8:90:84:5B:77:7E:4F:2B:A7:67:5A:2B:7E:AB:8E:03
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:78:96:60:ec:d7:09:f1:b3:24:aa:92:ae:e5:13:91:2a:1c:
53:57:24:9e:0a:61:25:4d:11:42:ce:32:08:35:86:21:8c:f8:
d1:d5:9b:1f:56:82:e8:bc:84:d6:09:79:fd:7c:de:49:48:47:
a7:96:2b:37:7b:0a:ae:c4:18:bf:5b:fe:e3:8b:41:01:50:93:
e6:85:6f:dc:70:ec:81:44:c5:61:33:1c:23:fb:6c:a4:8a:91:
1c:38:87:8f:33:3d:4f:04:bc:02:f4:d6:49:bf:aa:cd:1c:15:
03:94:1b:29:81:a0:03:86:da:1c:23:44:4b:3c:af:65:d8:53:
d5:9a:44:0d:d0:e0:53:86:f6:99:b8:6f:24:c6:a5:99:e3:48:
54:2b:3a:be:4c:71:cb:cc:58:1f:49:f1:b2:1a:78:77:89:0f:
a7:18:d4:fa:b5:8c:3f:62:8a:d8:6c:df:b2:07:30:2a:a4:52:
93:7b:5e:97:c0:87:33:64:6f:4f:a6:f2:a8:90:15:c7:6c:8f:
04:61:d7:d4:b9:0f:79:0c:86:91:86:86:7d:cb:fb:c7:76:7b:
8d:2f:fa:ee:4b:3e:0b:99:32:1e:12:5a:be:2b:17:43:80:07:
44:c5:8a:5e:b2:49:a1:b0:c7:18:23:e9:c4:d9:db:34:84:02:
e0:e8:fc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:07 2025 by rpki-client