Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: p1B1KAXUhO7gAaBWgQdea57HSoYmo/KQnQpTSUbjsg0=
Subject key identifier: C1:22:4C:8E:67:50:1C:66:2D:D9:25:87:0E:AF:D0:BE:E5:C6:1F:AF
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 0199FC58777609203CE00EC1D5E0CD2A8382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 0FF8
Signing time: Sun 19 Oct 2025 12:01:20 +0000
Manifest this update: Sun 19 Oct 2025 12:01:20 +0000
Manifest next update: Mon 20 Oct 2025 12:01:20 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: dqcjRKqElxQZzVCGZuhkkHUsKb8WO5YyRDlGucXkOhM=)
2: f98-QGGyvPNag3NBWDooTVrQ2vI.roa (hash: HJhPbHQVg92t7q01K4xm1xNnj11AYPaciJd3bC3Ng+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:77:76:09:20:3c:e0:0e:c1:d5:e0:cd:2a:83:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: Oct 19 12:01:20 2025 GMT
Not After : Oct 20 12:01:20 2025 GMT
Subject: CN=c1224c8e67501c662dd925870eafd0bee5c61faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:64:5b:5e:ad:cb:5e:53:16:59:1c:08:37:
4d:91:a9:c9:1f:1a:cf:97:5d:e7:5c:72:56:4e:62:
5a:f8:bb:20:7c:f5:30:3c:b8:70:1c:ce:ed:f2:09:
31:a5:b1:cb:39:18:a3:c4:22:c5:f9:91:02:de:f4:
a5:c4:a0:b7:7f:4a:08:b3:c4:f1:95:21:5f:85:17:
39:b3:f5:32:a7:4f:d3:24:2f:3d:4a:4d:a4:ec:5f:
00:f2:25:92:d7:cf:db:c1:2e:98:22:04:ac:a9:96:
ef:63:a8:84:34:6b:fa:3e:a8:5d:39:ef:6f:2e:3f:
c4:10:0e:3f:0c:9e:e6:19:c7:2a:f4:cf:d3:fb:e0:
3c:08:1c:ad:3b:a3:1a:bd:eb:23:67:a8:3c:57:f3:
54:f9:48:c8:3b:eb:b7:7e:56:d7:32:79:b9:e3:3c:
50:36:75:1c:d6:5b:b6:55:51:74:8f:e7:bf:71:e6:
06:e9:fe:00:db:d4:df:ab:f1:ef:72:fc:02:de:31:
9b:1b:cd:3f:90:cc:8b:90:72:e0:17:39:4e:3e:a7:
c4:87:7e:6e:7d:9b:dc:85:f7:c3:0c:fe:e0:c5:06:
52:b1:d0:59:dc:39:2c:b7:0f:b1:c4:b4:15:f6:1a:
90:e6:ac:7a:81:ff:bc:cc:55:35:fe:18:be:64:fa:
bd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:22:4C:8E:67:50:1C:66:2D:D9:25:87:0E:AF:D0:BE:E5:C6:1F:AF
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8f:32:7f:80:cc:a9:3a:6c:65:08:dc:a7:7a:3e:66:cf:d7:
76:0f:71:4d:c4:45:5a:b3:ca:70:c4:69:79:e2:7b:eb:d4:68:
38:c5:f2:55:22:2d:5f:17:12:8c:a9:9c:1b:f3:fd:b3:16:85:
74:79:6c:b3:d2:a5:89:b1:cb:dc:e0:1d:12:be:68:b7:3e:79:
90:d0:89:c5:2d:d8:86:e4:2e:72:09:e3:2b:62:4f:cd:27:97:
2e:fa:b0:03:7d:8c:b7:c9:b2:e8:8a:bb:63:81:c3:0f:bf:e5:
17:36:f9:72:90:1e:71:4a:6b:44:e7:f4:07:93:5c:90:33:88:
07:b4:33:98:f3:1b:f7:ad:6f:64:a1:89:11:f2:0e:3c:56:51:
9f:61:f1:64:9b:d6:ff:40:9d:a5:15:aa:30:3e:28:4e:93:c9:
3b:2f:d6:04:f3:1e:c3:85:da:1f:6a:fb:98:da:93:9d:2f:8a:
c7:03:8a:4f:b3:de:80:ff:3c:bf:75:65:a6:09:6b:72:c0:35:
9f:4f:79:aa:4d:12:fc:c2:df:cf:07:b0:86:f8:43:48:9b:89:
65:24:ff:7d:cc:ff:b2:1f:45:14:89:80:6b:c2:46:63:f2:88:
58:e3:3f:a3:70:49:64:e6:35:c1:fa:4d:4b:0e:95:ba:d6:f7:
60:20:f5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:03 2025 by rpki-client