Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier: Z8e+Cjazw0auWd4hurkpWpOA0O9DoL/pOGphO+Lw8BY=
Subject key identifier: DB:8A:25:BE:C6:99:9E:4D:D4:C9:67:B7:67:98:99:D6:36:ED:44:40
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 0199FD6AE69F6054628FAD99B41B7301B6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 17:01:05 +0000
Manifest this update: Sun 19 Oct 2025 17:01:05 +0000
Manifest next update: Mon 20 Oct 2025 17:01:05 +0000
Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: MQKcPZz6AcdBwMDWH5JqBjBfaTdQb9kQbj8zpHdi2MQ=)
2: ZJCu1yU9m3Cq5WWLkeWOotibU-k.roa (hash: km1a7hNobV+/Bq/2l3UQLOxoqTuuQQAxWKpbP+WCwQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e6:9f:60:54:62:8f:ad:99:b4:1b:73:01:b6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Oct 19 17:01:05 2025 GMT
Not After : Oct 20 17:01:05 2025 GMT
Subject: CN=db8a25bec6999e4dd4c967b7679899d636ed4440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:af:e9:ce:25:fe:70:6f:48:ec:0b:38:d3:
96:6f:3d:5e:f0:d7:1a:f6:cc:7f:aa:ef:99:72:ef:
df:8e:12:fc:b6:91:37:a5:bf:93:19:16:c6:f3:87:
35:e6:21:e0:8c:6e:d9:45:a6:0d:80:9d:e4:b6:b6:
ab:01:4f:83:17:8d:4d:21:70:a7:b9:55:f3:9c:c6:
5e:e7:30:e6:b6:15:5b:8a:5f:c1:82:6d:4d:58:ae:
0e:2c:fb:1c:39:86:93:24:7e:0b:9e:59:0f:6d:b1:
8a:de:72:11:db:d5:ec:ea:21:ce:ab:5a:eb:70:fc:
87:37:ad:d8:36:01:de:60:cc:1f:0e:04:92:19:4e:
94:b9:03:9a:a7:8d:02:1a:d4:ab:6f:3d:2e:2b:b6:
c6:06:da:24:99:d7:ac:5e:78:e9:f4:e9:40:c9:60:
f1:37:2d:63:92:74:1e:19:ae:46:f5:c8:4b:4b:3e:
d2:f9:fc:69:ad:fc:5c:98:25:2f:94:11:59:6d:94:
f7:62:ad:ee:c9:9c:cd:80:7a:68:7a:8a:96:f3:8c:
18:d2:93:35:8e:cb:29:4b:6f:d9:55:2c:55:91:c8:
eb:fa:b8:c4:c2:33:40:6f:29:fd:6f:56:1a:bb:81:
ad:73:75:14:a4:a0:65:03:47:9a:07:d0:21:52:ce:
37:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8A:25:BE:C6:99:9E:4D:D4:C9:67:B7:67:98:99:D6:36:ED:44:40
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:90:59:73:97:1c:96:68:62:a7:e3:df:e2:df:f3:1a:31:a6:
95:f5:5f:12:8f:c4:40:28:8b:a3:74:c6:23:e8:e4:05:d8:3c:
85:2f:ef:0c:ea:1f:e3:f0:57:66:02:41:84:2b:83:4c:38:13:
80:91:cd:7e:09:53:79:7d:be:6c:1b:ba:79:3d:2b:fd:ba:c1:
28:59:12:d4:96:c7:7e:2a:4f:1c:2e:23:6d:59:be:6d:ab:ae:
a6:51:e5:41:0d:0b:de:f3:e2:9f:53:30:a5:c4:f1:41:bf:6a:
fe:75:47:7b:36:8c:06:b8:c0:cd:59:b1:c6:a3:8e:07:0b:d8:
64:db:a0:7d:7e:bd:d4:37:29:aa:b1:a8:0a:9e:5c:8d:f6:12:
d0:df:d5:50:0d:43:37:fc:6b:29:31:b8:58:ef:f2:d3:c1:ae:
ac:0f:36:91:05:28:1d:dc:e8:03:28:27:6d:96:17:67:ac:46:
44:d2:59:ad:03:43:55:7c:a1:ef:64:6a:08:34:ef:25:6a:26:
c6:04:e8:e2:40:78:22:51:da:32:0b:4d:06:e4:21:bf:d1:6d:
9a:7f:3b:47:a0:85:e3:84:74:1e:9c:1f:fb:40:c0:d0:48:90:
3d:d6:83:80:a6:87:f6:94:e0:35:8f:85:89:9c:ed:ac:a6:69:
ac:9c:38:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:04 2025 by rpki-client