
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
File: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft (raw, json)
Hash identifier: 5AJwDM5SOjosUIOqt5o8BrEEuFwpuCde8rZdasTM0J0=
Subject key identifier: F6:21:37:11:F3:5A:BA:44:06:70:A3:D9:85:4F:77:95:3B:28:3A:79
Authority key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
Certificate issuer: /CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Certificate serial: 0199FF59C498654DE99947EA65CEC1B13295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 02:01:37 +0000
Manifest this update: Mon 20 Oct 2025 02:01:37 +0000
Manifest next update: Tue 21 Oct 2025 02:01:37 +0000
Files and hashes: 1: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl (hash: lPzYNDXS+Gh5wncxaOVjzGpQvJCruyEevID3W+fdWAA=)
2: 5gG_Zi7UzMpPtarM4YgRPE41P0Y.roa (hash: h4U+fDKpUfUkNJ413pa9utTlvK0hGY5RmFrs2JwFVFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:c4:98:65:4d:e9:99:47:ea:65:ce:c1:b1:32:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Validity
Not Before: Oct 20 02:01:37 2025 GMT
Not After : Oct 21 02:01:37 2025 GMT
Subject: CN=f6213711f35aba440670a3d9854f77953b283a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:2d:aa:16:64:78:de:33:9e:c2:7e:b0:30:
51:70:ee:fb:ff:0a:fe:79:1a:86:52:58:34:5e:c3:
f3:51:be:de:2c:6e:da:47:d3:a2:ee:f7:fc:68:e4:
11:c4:9e:7b:62:62:8e:9a:78:ae:e9:25:76:e7:8c:
92:9d:cc:55:7d:0f:79:1e:a3:b7:7b:a5:c4:9e:2d:
da:9e:54:63:82:ac:48:59:10:6a:a0:cf:ca:2c:1c:
51:df:78:58:33:3c:66:da:6f:19:71:c9:ca:b1:9c:
8f:38:9f:9b:6e:0e:24:a7:f0:1c:ea:47:8c:b9:74:
58:d0:1a:b9:3d:2a:fd:ba:ac:da:ee:bc:e5:3d:40:
50:a4:56:d7:39:88:d3:57:10:7b:32:63:dc:c8:82:
ea:20:16:5f:2c:18:80:3e:89:f6:b0:8a:04:bd:04:
6a:4f:50:d2:6c:81:78:89:0f:f6:71:37:a4:01:1b:
fe:13:b6:e4:1d:9c:87:79:25:55:12:10:1f:f2:3e:
ba:4b:34:5e:a5:93:93:7e:64:ff:61:43:b9:3e:82:
64:9a:bd:ec:e3:ac:72:15:bd:47:3e:3a:87:63:eb:
e0:e5:5a:ed:20:cc:79:03:6a:28:75:f5:fa:dd:d1:
ed:12:86:01:2e:04:b0:e0:99:24:49:7b:d0:be:1e:
2c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:21:37:11:F3:5A:BA:44:06:70:A3:D9:85:4F:77:95:3B:28:3A:79
X509v3 Authority Key Identifier:
keyid:DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:09:74:35:e1:72:2f:61:9b:03:5c:6e:fc:30:d2:a1:47:c1:
07:1f:c4:29:8b:81:b6:d7:16:b3:25:53:da:95:e3:67:07:c7:
6d:a2:02:cb:02:9c:eb:8e:95:7c:07:2e:c1:a3:0d:e5:97:10:
e7:3f:a9:f2:5d:3c:f6:86:45:cf:64:6f:23:57:46:ce:b3:04:
41:6b:e1:9b:c7:2d:6c:93:f9:d5:0c:11:c7:ff:ea:79:5a:72:
6f:a7:32:a2:d6:22:65:f1:96:bd:6a:27:41:06:e7:84:86:6e:
78:7b:eb:06:8a:a5:23:37:29:0f:0b:ff:56:e7:b1:a1:9a:51:
b5:8d:ff:b2:f4:72:c4:2e:e4:43:6f:f1:45:35:6b:38:7d:30:
f4:ff:f6:b1:bf:c9:41:62:6e:5b:98:93:2f:86:b2:90:a4:49:
3b:63:88:cf:43:64:12:ab:c3:5b:60:85:b8:52:01:de:fc:2a:
01:f9:23:05:b7:28:6b:6d:de:21:eb:91:ba:2b:c9:cb:13:41:
bd:1b:94:ee:f8:68:d1:34:fe:ae:a4:c5:89:c2:60:73:a4:70:
7e:77:4d:46:69:f1:b8:ba:d1:5d:eb:8b:dd:70:58:da:10:89:
91:fc:0a:d5:87:c2:ac:8a:57:f0:8b:3c:e5:cb:fc:42:59:4a:
2a:0f:55:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:42:24 2025 by rpki-client