Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File: 3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier: JEc1pmdcPXSrEsJyGYmDU6MdEdZ8F47ONRbRqXQISz8=
Subject key identifier: DD:95:A1:C3:56:1E:4E:57:01:AD:52:0B:21:A1:75:A2:A8:E6:48:46
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial: 0199FB7CC9CAB5FD1E1E427A01BEDF172003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number: 14EF
Signing time: Sun 19 Oct 2025 08:01:23 +0000
Manifest this update: Sun 19 Oct 2025 08:01:23 +0000
Manifest next update: Mon 20 Oct 2025 08:01:23 +0000
Files and hashes: 1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: v+BtconMrSoeQNp4dIg5HgLwGXKlYKHpBcMs7B8JhEE=)
2: UXWSLhVlTXSrRh4vQjiJGZfTc28.roa (hash: GwWbj030dqXFgPoZUUmrOygMcwYdz6TWzzcKF95NLWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c9:ca:b5:fd:1e:1e:42:7a:01:be:df:17:20:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Validity
Not Before: Oct 19 08:01:23 2025 GMT
Not After : Oct 20 08:01:23 2025 GMT
Subject: CN=dd95a1c3561e4e5701ad520b21a175a2a8e64846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:44:ee:5c:ad:d1:89:14:a6:11:57:9e:2b:
d6:50:ed:41:0b:c1:d1:17:02:de:41:f4:36:67:51:
09:33:de:e4:87:ef:44:a7:0b:34:92:f6:02:be:f5:
a1:e7:58:d4:15:68:e9:70:ce:90:76:d0:3f:e4:e1:
71:93:6d:dd:33:b8:79:55:79:e6:4e:bd:62:d2:db:
c5:7c:bd:5d:e5:00:72:8b:6d:7a:f5:22:67:9f:cc:
17:c1:a3:19:83:75:d0:d5:eb:51:6f:8d:ea:0d:56:
a1:05:da:95:83:21:15:32:b6:58:20:e3:85:2f:94:
1b:24:83:96:eb:b1:f2:4d:67:6e:9a:07:22:b0:df:
74:c8:a8:5f:5a:f6:b5:c9:f0:65:07:e8:ba:4f:c2:
74:0e:0c:2f:27:98:03:95:fd:96:f4:e9:07:90:79:
0d:e9:07:d5:ee:94:cd:4e:6f:07:25:86:72:e5:7d:
fa:aa:47:3b:08:c3:84:d3:4f:61:b1:25:51:ec:57:
14:10:4a:53:66:f3:96:1e:87:9f:e1:93:fa:76:95:
20:ea:d8:45:43:34:d8:01:2a:c3:f9:6a:62:16:4b:
d3:74:ff:1c:d7:ff:12:11:f2:6f:84:bd:4b:f9:a3:
c9:0f:11:f5:4c:53:f7:c3:6d:45:3a:fd:1e:d0:e9:
65:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:95:A1:C3:56:1E:4E:57:01:AD:52:0B:21:A1:75:A2:A8:E6:48:46
X509v3 Authority Key Identifier:
keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7a:c6:9a:4d:65:59:02:1b:97:b9:fd:f6:78:25:12:9f:65:
f2:2a:6c:08:69:68:34:83:68:f9:d0:b7:dc:23:6c:4e:06:e0:
d2:90:1a:10:68:c9:cb:de:3d:e8:5a:15:ce:71:56:43:0a:e4:
62:a8:a9:5b:bd:c6:cb:41:7e:1f:b2:7b:39:8a:9a:f4:67:6a:
27:f7:29:4e:87:87:06:92:e1:fd:49:e7:7c:1e:bb:12:6c:fc:
57:e3:38:2a:3b:42:5f:f3:ae:0d:63:64:dc:b8:50:2c:64:4f:
a6:73:44:ee:2b:2c:36:b1:84:2d:8b:6e:83:06:0c:89:63:2f:
57:72:13:ee:b1:7e:15:3d:d4:ac:1b:7c:45:ad:e3:35:30:e3:
f1:17:a1:41:dc:7d:56:5e:b6:cb:b9:5d:35:63:72:cc:e6:3e:
7e:bc:49:d3:61:9b:32:58:a8:8b:13:3d:9f:71:8e:b1:2c:c6:
b7:49:73:e8:80:48:97:2c:0c:77:a7:64:1d:a9:ab:44:34:70:
13:b8:a1:84:0f:c1:6c:19:ea:1f:19:b7:57:30:cc:44:70:31:
f8:36:2c:8d:42:2f:db:6b:6f:97:2b:3f:09:96:1f:6d:81:13:
c4:75:85:b8:3f:5e:86:4b:77:73:e2:38:41:0d:9f:b1:5a:3b:
c3:c8:db:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:20 2025 by rpki-client