Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File: 3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier: tLWq4CzcyEgnxyQOmPtEjtiU+EJFlLi+2gvWhvLSW0c=
Subject key identifier: 79:70:C0:33:73:33:75:D6:F6:2A:85:20:26:56:44:81:8C:C3:A4:35
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer: /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial: 0199FCFD3CC56B7EB1A23B473B282728C91A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number: 08B8
Signing time: Sun 19 Oct 2025 15:01:18 +0000
Manifest this update: Sun 19 Oct 2025 15:01:18 +0000
Manifest next update: Mon 20 Oct 2025 15:01:18 +0000
Files and hashes: 1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: 1838HtvMbkr+6qUQ3/L4N1pdoz9hwwY2VAiDr3qPV4g=)
2: tmyLpJpJchhVaXtc4hY4-3-tLv0.roa (hash: ptDhwK/duydywl6VxB7EOOZhOpM1y3n5bCF72ET2KLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:3c:c5:6b:7e:b1:a2:3b:47:3b:28:27:28:c9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Validity
Not Before: Oct 19 15:01:18 2025 GMT
Not After : Oct 20 15:01:18 2025 GMT
Subject: CN=7970c033733375d6f62a8520265644818cc3a435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f4:d9:c7:9a:e6:8f:9c:6e:4f:07:e9:bb:62:
1e:98:06:96:76:3e:80:ac:5e:79:47:33:63:89:70:
85:31:c1:2c:a5:61:82:7e:1f:6b:05:4f:2e:98:89:
2a:c6:cc:99:3c:12:07:4a:91:cc:e2:cb:05:d7:7b:
be:15:f5:28:d2:cc:ba:f3:11:3d:f6:b4:e7:63:f4:
0d:ba:61:c5:f9:11:c3:5d:2a:32:f1:7d:6c:1f:e2:
24:ae:84:45:0e:7b:85:1c:9d:11:e9:d9:8f:31:55:
24:f4:3a:c9:49:19:e4:d3:86:51:71:81:11:5e:7a:
fa:a5:24:3c:8a:1e:8f:0c:40:1c:62:fc:9b:43:3b:
25:0d:95:21:f8:a7:a7:04:4d:a0:03:5f:c6:30:b4:
15:56:cf:61:5f:68:cd:6c:96:8b:67:a6:0f:77:0f:
81:c9:a2:47:2c:51:a8:fb:00:9f:b2:e9:be:20:32:
3d:a3:28:05:4e:6c:08:5a:33:de:d0:8f:6c:e7:87:
d6:49:1d:c1:34:8f:0b:c3:92:2c:5a:60:bf:da:0c:
1b:57:e6:27:ba:21:42:b0:25:6c:a9:72:0f:ff:2b:
3f:d2:74:14:19:76:64:fe:b2:64:18:85:4a:0b:19:
81:66:96:e9:f4:b5:9b:62:df:28:3f:c3:74:49:ce:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:70:C0:33:73:33:75:D6:F6:2A:85:20:26:56:44:81:8C:C3:A4:35
X509v3 Authority Key Identifier:
keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9a:fd:ab:4b:2a:cb:c6:97:f7:76:27:bd:5d:3e:b2:fa:44:
e1:4d:ae:f0:2f:8b:42:2b:fb:63:c8:4c:8e:6d:dc:1f:1f:71:
fc:1c:f7:66:0e:14:f1:48:ff:86:76:fe:5b:04:63:c1:f3:31:
11:c0:68:67:c0:e9:f2:d1:76:0d:1d:79:e4:b1:84:c7:6e:00:
de:7e:96:57:b6:e1:92:66:8e:6a:9c:c4:fb:1f:c0:f1:29:99:
f4:93:39:66:1a:8f:eb:00:a5:b6:b5:23:85:9e:9e:7b:c2:0e:
8d:48:03:44:b9:5e:f0:91:15:35:29:67:9a:c6:29:a9:5b:0c:
52:73:6e:f6:69:c7:64:24:51:fa:e6:eb:97:20:2d:c5:07:18:
07:02:2a:22:2f:2f:d0:b4:1a:b2:45:4f:27:c2:ef:3c:a5:04:
48:4f:36:1e:df:8d:ce:32:37:2f:ee:af:de:4b:de:7a:d8:11:
84:ac:0f:06:aa:03:7d:da:c3:82:11:ea:0e:bc:a0:b7:73:60:
0c:60:cb:2d:0e:1f:6c:0a:e9:be:8f:54:bf:fa:73:61:87:03:
52:3e:a2:54:e0:d0:41:49:dd:f2:3c:e2:f0:69:1f:98:68:5e:
a9:1a:98:98:b0:6e:1c:2f:5d:f5:0f:1a:6f:d1:28:59:06:02:
ab:98:9c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:26 2025 by rpki-client