Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier: FRUy8S9mXKLLYCKNPdoNwaWNmtt4wOCVnY3O9wQ6G6Q=
Subject key identifier: ED:BC:4E:A3:24:1D:72:32:26:0D:F7:26:05:12:D4:2A:8D:CF:CC:CD
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 0199FE0FF2009391DF73786D773E4EFE06F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 20:01:21 +0000
Manifest this update: Sun 19 Oct 2025 20:01:21 +0000
Manifest next update: Mon 20 Oct 2025 20:01:21 +0000
Files and hashes: 1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: 3KoRzqecTsVDLMKiUYhUjHfDLpw0Sz8UYeEv8980de0=)
2: aUaxmc4yn8DWQgssucohLW2GTOs.roa (hash: SOdn4BM+lJeHsX2EdSBfNJjI/S1sYp7gdR+GcCunEpg=)
3: v8c3Ww_Eihi-LvyDOVvXBJwo9F8.roa (hash: 0sTmm1OvDNHW8cfRGw9gOppSFK5VfYqSrXVw8T0yJBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:f2:00:93:91:df:73:78:6d:77:3e:4e:fe:06:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Oct 19 20:01:21 2025 GMT
Not After : Oct 20 20:01:21 2025 GMT
Subject: CN=edbc4ea3241d7232260df7260512d42a8dcfcccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:36:b1:5d:2b:63:d9:20:ca:a0:ce:68:25:bc:
c8:14:80:a9:2a:d7:e9:4a:e6:13:c0:ac:b5:0b:fc:
13:ea:d9:95:37:b6:36:40:e1:5d:7b:6b:fc:c0:20:
ba:f4:a9:10:cc:48:09:68:1a:19:d8:4c:6f:28:b9:
73:9b:cf:14:fd:86:f4:65:de:d4:71:41:66:4c:3a:
da:81:63:ee:64:8a:e4:79:d0:fe:69:e1:df:67:fe:
b0:3f:c5:d8:15:db:58:34:eb:c2:fa:9e:00:0e:ef:
43:23:9b:9e:7a:fc:49:d8:f9:1f:c8:ae:47:16:a9:
e2:9f:4b:71:56:38:3b:42:67:ca:4d:7c:2e:b6:70:
0d:ce:e2:3e:5f:5c:6f:50:c0:c7:5a:9a:a8:e4:7b:
d7:d4:c0:18:d4:48:19:b1:b9:16:37:3b:7c:81:64:
25:f4:ae:4b:e1:b9:ba:6a:f2:3d:e8:9f:e7:3f:82:
26:47:39:f2:65:53:3c:36:d3:6c:1f:76:c2:17:b6:
c9:bd:30:7c:9c:48:c2:1f:d9:92:c9:e5:4d:46:dd:
25:eb:d1:6d:5e:61:59:a1:bf:8a:e5:2b:22:75:0a:
7c:14:98:d7:74:a0:7f:14:38:39:40:63:69:9b:8e:
f9:ea:39:39:ef:06:8c:50:57:45:b2:79:61:2d:be:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BC:4E:A3:24:1D:72:32:26:0D:F7:26:05:12:D4:2A:8D:CF:CC:CD
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:40:45:34:13:06:15:70:f4:47:1d:83:72:81:3b:86:28:93:
3c:4c:ae:3a:1a:54:4c:9d:18:9a:e7:fa:4a:5a:f8:ef:c5:00:
26:02:63:ed:c7:8f:eb:5d:59:79:39:c3:8f:66:03:d0:26:1e:
7f:1f:8c:a4:3b:bf:ce:78:69:98:d6:f9:cb:29:19:d3:91:c5:
76:bd:6d:82:02:62:30:74:04:5d:65:75:0f:c9:71:ab:ec:8d:
fd:28:d8:79:a9:f1:d9:20:cc:06:a1:df:0c:be:d1:4a:35:0f:
fb:b0:44:d0:46:7a:6a:d8:9a:09:39:89:a5:73:c9:6a:ae:2d:
5f:10:a8:94:be:d5:65:c4:0c:bf:a0:2f:65:28:52:dc:44:9d:
59:9a:3d:c5:9a:30:61:2f:80:30:60:0e:ff:14:51:2f:57:55:
49:ee:79:5f:d0:ba:0f:06:ce:30:ef:fd:e4:c5:84:9d:2b:c6:
28:45:b7:69:ce:7c:90:a5:14:87:74:0c:e6:79:a1:93:37:cd:
9a:a2:8c:58:45:fe:1b:23:88:7d:6f:12:57:87:48:c2:fb:61:
c6:c1:49:1d:76:a7:f4:58:5b:f2:5f:5a:fd:dd:cf:1e:60:f5:
4b:1f:dc:70:1a:b3:91:c5:0d:8a:ba:74:ff:57:94:9b:b3:47:
80:67:3b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:47 2025 by rpki-client