Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
File: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft (raw, json)
Hash identifier: DrDNIwiKY+xz0G63CeHZrD4MrfOD29E/foo0GhrsUfk=
Subject key identifier: F9:D2:1F:E4:69:25:72:B2:0C:75:73:01:2E:17:03:82:1A:C2:68:B2
Authority key identifier: DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
Certificate issuer: /CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Certificate serial: 0199FC58C819BF1A08945AB453FCC93BC6CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
Manifest number: 1603
Signing time: Sun 19 Oct 2025 12:01:40 +0000
Manifest this update: Sun 19 Oct 2025 12:01:40 +0000
Manifest next update: Mon 20 Oct 2025 12:01:40 +0000
Files and hashes: 1: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl (hash: INbSpBJhBbH8RTDfma0flZhzCpZnBjRKEJ8s0bbx4S4=)
2: LYPvA08Q5up42ir_ROLNJePR6WM.roa (hash: 2Ysa/oCUxmnS7fKzOGdKW8YJA2KVw4PdW/o1jAQ6yws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c8:19:bf:1a:08:94:5a:b4:53:fc:c9:3b:c6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Validity
Not Before: Oct 19 12:01:40 2025 GMT
Not After : Oct 20 12:01:40 2025 GMT
Subject: CN=f9d21fe4692572b20c7573012e1703821ac268b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:24:fd:69:05:57:84:f0:1d:fa:5b:be:64:
25:c8:7b:a8:3d:29:ce:f3:b6:11:e0:42:86:a8:2e:
0c:83:76:e1:fd:3d:6b:52:f7:22:16:da:83:49:25:
8b:d1:21:bd:5a:fc:1f:76:32:9c:66:42:0d:b1:2b:
b9:01:46:46:50:f0:1a:07:58:1b:3f:93:ec:e2:18:
d0:60:43:4b:ab:0e:e4:20:74:72:db:1c:ce:88:8c:
a5:f4:67:88:84:79:8e:81:1e:35:59:8a:93:c3:32:
fc:0f:d4:16:ab:e9:b7:4a:f5:4f:88:67:64:a8:d5:
6e:13:25:2a:2f:96:b8:a1:77:de:8f:91:bd:c7:d4:
a7:57:61:69:6a:2e:39:81:7b:22:e2:cc:d4:ac:48:
4c:fb:09:32:5e:99:45:f6:95:75:10:41:16:d5:17:
c9:1a:7d:ba:de:f2:9d:a8:bf:e0:ca:72:00:53:a2:
72:32:e1:6d:bd:ed:b0:7d:0d:76:37:0e:8a:ce:c0:
cb:c1:96:e7:94:91:4d:7c:22:6d:80:48:7b:d2:69:
02:ea:35:e2:12:f6:10:b5:50:f2:55:d7:19:d1:79:
61:8d:6d:11:7e:e1:e6:f8:48:ef:0f:4c:de:d9:81:
9a:e2:91:1c:de:06:e0:fe:5c:b0:00:31:fa:7f:34:
64:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D2:1F:E4:69:25:72:B2:0C:75:73:01:2E:17:03:82:1A:C2:68:B2
X509v3 Authority Key Identifier:
keyid:DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:50:9d:e9:28:df:98:56:0e:95:03:19:c1:82:df:48:a8:b3:
c3:89:7a:06:a0:fc:f9:3f:bd:bb:f4:c9:9f:1a:f5:04:72:ba:
8c:14:5d:40:ac:46:f9:8c:98:46:d8:94:86:96:db:6c:50:cf:
5d:85:f4:c2:51:42:e1:e2:de:46:ac:3a:77:d0:2b:16:83:fa:
b4:43:2a:ab:74:42:04:97:08:6c:8e:16:e1:97:3a:c7:97:c3:
fa:39:90:ff:e3:b4:ef:aa:7f:40:42:7c:79:af:6d:52:76:3c:
3a:db:d6:4d:c8:44:81:e3:3c:87:6f:4f:b1:af:fd:02:d8:a3:
80:d0:d2:ce:02:22:75:c6:da:46:d9:b3:5e:3e:12:e1:13:88:
46:40:72:64:ad:5b:fd:fa:26:fd:db:08:fc:3d:1e:42:33:01:
5a:ce:a4:42:2a:95:4b:90:24:20:1f:85:aa:1c:60:ab:6c:84:
1e:30:27:82:67:5b:4a:83:4f:f7:f4:d2:8a:0e:c6:bb:1f:7a:
83:19:03:b9:f5:cb:d4:2c:4a:fe:1c:c6:bd:76:07:d5:97:77:
2b:f3:5b:4a:88:76:43:7a:83:23:af:67:77:a7:ba:97:4a:9d:
b7:96:8e:80:c0:81:85:01:f4:c8:32:00:d9:c4:a3:fb:03:7e:
54:32:da:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:17 2025 by rpki-client