Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
File: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json)
Hash identifier: YnwVrHcJVaJiZxO6hNHNemq4yBea1vxuHPGgcyJMKhE=
Subject key identifier: 40:B8:C7:E9:B2:DF:B0:51:1A:CF:E2:BB:41:7E:2A:0B:25:7C:9B:1D
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial: 0199FAD84B4AB387DFBABA97E2B3E0A051A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
Manifest number: 1563
Signing time: Sun 19 Oct 2025 05:01:42 +0000
Manifest this update: Sun 19 Oct 2025 05:01:42 +0000
Manifest next update: Mon 20 Oct 2025 05:01:42 +0000
Files and hashes: 1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: Kfmntca2s8SyAhQr0syPOqkBh+YVTbSwNcpKYDy9A/4=)
2: KgwBKHljj7pwEemei4izTFatz2I.roa (hash: eVDUYtbHqOXwc5M3emIOpC/IOXEvGmty2120RNJjtQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:4b:4a:b3:87:df:ba:ba:97:e2:b3:e0:a0:51:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
Validity
Not Before: Oct 19 05:01:42 2025 GMT
Not After : Oct 20 05:01:42 2025 GMT
Subject: CN=40b8c7e9b2dfb0511acfe2bb417e2a0b257c9b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:39:94:4a:55:a4:1e:b7:c2:6c:46:e7:15:3e:
0c:b9:f4:d7:a1:94:78:e4:cb:f8:25:8e:ca:ab:b2:
21:62:cc:7b:53:2a:88:c2:7d:61:05:99:74:50:65:
78:af:c8:ed:70:53:d4:60:83:4b:71:21:33:b3:03:
20:99:d3:e2:ea:bc:af:c7:05:09:90:8f:0b:cf:b6:
ac:b0:a9:cf:ef:f4:08:a4:80:aa:59:d1:c6:c8:dd:
01:97:2f:51:ea:39:47:9b:d6:6d:4d:f6:7a:de:de:
18:54:a8:99:e1:65:48:a5:8b:92:12:cd:82:63:4c:
88:93:4a:d4:9c:fc:bc:64:be:6a:32:63:22:14:bd:
50:1b:53:42:4d:13:17:ba:31:40:d6:40:8a:a8:7e:
bb:07:3d:5f:5f:74:d7:90:f0:37:db:33:77:07:df:
37:ea:7b:dd:ba:e2:85:78:c0:33:7a:79:66:14:40:
08:2e:cb:45:5d:58:4c:bd:1e:f8:5d:3e:97:13:fd:
ff:9e:ae:c9:c5:cf:ae:dd:54:43:99:05:8b:a3:03:
c2:03:24:8f:77:ba:10:ed:37:21:e0:06:38:9b:28:
76:a1:a9:79:6d:e5:2c:ff:e9:65:c0:20:60:9c:ae:
26:60:72:c6:4d:ea:8c:a2:df:36:10:b8:4b:33:aa:
70:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B8:C7:E9:B2:DF:B0:51:1A:CF:E2:BB:41:7E:2A:0B:25:7C:9B:1D
X509v3 Authority Key Identifier:
keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:db:56:92:39:98:82:36:4d:49:70:66:da:73:62:a5:42:4a:
1e:a5:c9:5f:60:85:c3:f1:20:32:2f:98:0e:a9:00:76:db:26:
88:27:8a:f9:0a:19:80:dc:7c:e8:c5:1a:0b:b1:91:bd:ea:ce:
d8:8e:d1:d2:16:e7:13:b2:77:79:d5:ff:4d:e0:1c:0e:55:3f:
4f:f8:0a:ca:4c:f3:14:82:97:10:30:b9:2d:67:9b:9d:18:05:
0e:41:ae:cd:4a:2c:4e:28:87:d0:94:ef:3f:96:41:97:3c:ca:
74:29:18:7d:ca:45:c7:fb:2a:6d:54:a4:6b:76:29:7e:7f:cd:
50:8e:dd:88:51:4e:ad:b4:26:fa:b0:d4:ac:be:5f:69:0b:60:
b7:bf:2e:a5:27:fe:c1:fd:e4:9b:ba:9e:08:6e:24:c1:47:c4:
7b:57:f3:98:b1:49:89:69:ac:90:c2:89:72:f1:c3:3d:9f:da:
e1:eb:a5:69:f9:28:2f:83:b8:25:2f:41:d6:a3:c5:57:06:40:
2a:8b:40:a0:19:2a:ce:1b:96:ee:e4:3c:52:e3:a4:7f:6a:9e:
a8:9c:0f:e7:f8:66:49:eb:fc:38:58:f5:35:67:88:a9:e2:d3:
3c:3e:c9:a3:49:c5:92:ee:13:65:85:9b:44:23:3b:2c:75:f9:
4a:ed:d0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:52 2025 by rpki-client