Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
File: 3ciCMsB94s3Llur551FVC6pmxYg.mft (raw, json)
Hash identifier: j4B6NpiP0RL0BIYL++C3uzh9PD86Y9/O58q444FPiGM=
Subject key identifier: 99:D5:9F:F8:29:4F:13:B8:FD:52:E2:20:FF:08:56:78:DA:13:3C:5A
Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
Certificate issuer: /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Certificate serial: 0199FF592FBE4A78F538AE4662861687EF49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
Manifest number: 0E46
Signing time: Mon 20 Oct 2025 02:00:58 +0000
Manifest this update: Mon 20 Oct 2025 02:00:58 +0000
Manifest next update: Tue 21 Oct 2025 02:00:58 +0000
Files and hashes: 1: 3ciCMsB94s3Llur551FVC6pmxYg.crl (hash: q87SQOQRJjC18b5uepfOiUctBJuHF0ZHmJ5Ym+Zfi94=)
2: OK60eEXoBVz15pEwVmX0yYULZbk.roa (hash: irOuBXNJpmhp7Bb40BZggz4rGVp00h/PvH1AyeAmbL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:2f:be:4a:78:f5:38:ae:46:62:86:16:87:ef:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Validity
Not Before: Oct 20 02:00:58 2025 GMT
Not After : Oct 21 02:00:58 2025 GMT
Subject: CN=99d59ff8294f13b8fd52e220ff085678da133c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:c9:e1:58:48:4d:24:45:cc:49:df:32:4b:
e2:e5:01:c1:d2:4b:15:78:b3:e8:ab:bd:2d:75:65:
cd:77:bd:b1:d3:19:a5:d6:51:4d:52:08:ca:b3:c2:
96:b3:70:dc:e4:81:83:f9:6b:c4:23:e0:96:a5:ad:
f0:b4:1f:a9:d3:8a:30:23:d8:2c:5c:06:88:1c:1b:
18:b5:ae:23:57:ae:65:94:59:b0:1a:fb:8a:7d:35:
60:a6:ba:40:0f:6f:36:a9:c1:23:50:2e:8b:1a:22:
74:c2:62:a3:99:c5:41:ac:47:4b:d4:40:05:8a:16:
29:d3:2f:e7:8e:a1:f7:c1:6b:69:08:de:b6:2f:e9:
d4:5f:95:04:0f:a0:c8:72:3f:f7:38:1e:0c:41:ee:
f5:ac:ff:ef:60:f7:44:26:32:53:19:19:64:cc:76:
f1:84:0d:11:bf:c3:15:9b:55:01:4d:8c:53:eb:c9:
6e:9b:92:9b:b2:00:e0:76:3c:f9:f2:16:8b:e8:74:
df:53:0b:2e:8a:3e:f2:be:96:3d:a5:79:1a:d3:02:
27:b6:3c:d2:4a:59:db:32:43:f7:50:3b:b1:07:9b:
d0:e0:9b:6d:1c:95:b0:3b:da:12:e5:1f:20:8d:28:
40:fe:8a:59:b0:2e:98:79:91:62:f5:25:03:04:1d:
32:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D5:9F:F8:29:4F:13:B8:FD:52:E2:20:FF:08:56:78:DA:13:3C:5A
X509v3 Authority Key Identifier:
keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:07:b9:10:22:57:23:01:0a:37:98:3d:72:b1:0a:94:96:79:
76:75:69:9b:ee:f6:b0:a8:1b:88:9a:3e:34:23:25:a2:d0:ff:
0f:f4:11:1b:35:e1:e2:7c:96:2b:02:d6:3e:fd:9a:c1:9e:85:
e2:61:2e:66:2b:19:51:c8:7c:4f:db:da:9b:b0:aa:90:ac:e3:
03:28:37:a9:b8:49:04:ff:52:49:c9:e1:db:4e:8e:24:b9:b4:
39:3f:29:bc:e0:a7:74:53:00:3a:3f:0e:93:98:05:7a:8f:de:
4a:05:71:2a:af:fe:f6:fe:a0:fe:ae:b4:77:d2:da:bb:fc:be:
4f:6f:5d:05:d0:38:3f:5f:68:f3:0c:f2:4a:fe:84:48:52:f3:
60:37:43:c8:58:cc:e7:88:80:5b:b6:f0:d8:a4:1a:7c:86:e0:
32:58:b9:1c:b5:a1:13:17:16:95:91:6f:d4:fd:02:3e:0d:8e:
89:ec:7e:1d:9f:d4:64:da:2c:e5:e6:4d:b5:52:7c:ba:53:57:
15:93:0f:f7:00:ee:b1:ca:56:25:8d:4c:a2:22:05:81:c8:39:
a5:f3:a3:18:96:fd:77:e6:de:81:c2:43:47:6d:7b:7b:c6:2a:
cc:80:56:16:e2:88:91:fc:5c:e1:f2:3d:ba:ea:ce:90:16:67:
60:dc:22:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:42:26 2025 by rpki-client