Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File: 3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier: e64R9S45PMTg3bM9T7UrF8iVMyCp1aYMhqPtktjj6AQ=
Subject key identifier: 7E:9C:02:C2:4D:45:4D:51:DB:BB:71:08:2C:F5:9C:C8:6A:EB:A6:D9
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial: 0199FC8F9B09C5F15E7359941BF8B7AD5016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number: 1296
Signing time: Sun 19 Oct 2025 13:01:33 +0000
Manifest this update: Sun 19 Oct 2025 13:01:33 +0000
Manifest next update: Mon 20 Oct 2025 13:01:33 +0000
Files and hashes: 1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: jIBdNo9/GgqsHmeGzYC26mUGrwzs+qcLqGYqUqtOkOQ=)
2: jrzKo-lt5J6MsHDsEMxREvgxfZ8.roa (hash: NadiGgxjhYXuzdbS81cV9tBbpe6k6vvKuOl8KjAS3hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9b:09:c5:f1:5e:73:59:94:1b:f8:b7:ad:50:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Validity
Not Before: Oct 19 13:01:33 2025 GMT
Not After : Oct 20 13:01:33 2025 GMT
Subject: CN=7e9c02c24d454d51dbbb71082cf59cc86aeba6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:b6:ca:52:63:96:2e:2d:dd:fb:56:e2:c2:
8c:4b:98:8d:04:c2:ec:55:0e:01:e4:22:c6:82:90:
f8:90:e5:d2:25:89:92:7d:5c:31:1d:4b:9e:02:72:
2b:d0:d9:32:27:84:6b:50:31:20:a9:4f:f3:0e:98:
ee:18:3b:d4:2d:d3:94:3e:f1:d6:54:ef:e4:b0:ad:
78:5e:7b:45:51:54:f3:af:f2:36:28:8b:58:85:c7:
f3:6d:99:3b:c9:0f:19:f0:80:91:05:a9:f1:18:c9:
99:41:2c:91:8e:85:f6:94:dd:cb:07:eb:2c:0b:44:
d2:53:87:3f:94:5b:fb:e1:48:7b:e9:36:ba:18:0f:
b1:d6:1b:a8:70:27:a7:7e:ec:6c:60:aa:6c:22:2e:
4f:a5:52:a5:ba:7a:e8:99:37:dd:f0:c9:19:ca:6f:
84:ca:dd:f6:bd:9c:a8:9c:e4:84:08:6e:80:da:ef:
29:56:74:2f:58:ff:c6:29:99:4d:05:fc:07:10:e8:
50:f6:c4:1c:d2:77:43:2a:bd:f2:c6:8b:f6:17:86:
c3:5f:f1:63:5d:78:1a:0d:0c:97:ba:a9:20:99:e3:
c4:62:eb:06:67:b6:a7:65:2e:56:eb:7a:7b:15:1f:
ae:2d:98:f5:44:71:d3:6b:c7:77:45:05:c1:da:20:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9C:02:C2:4D:45:4D:51:DB:BB:71:08:2C:F5:9C:C8:6A:EB:A6:D9
X509v3 Authority Key Identifier:
keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:9a:7f:67:63:c9:3d:be:fc:1b:28:1e:f0:35:47:87:d3:f0:
7b:f7:e3:57:ec:b2:64:fa:7d:6d:58:f2:ea:61:ac:7a:92:ce:
cc:f2:e4:00:4e:3d:62:63:da:3b:31:38:d4:5e:ec:4b:3f:c3:
e0:15:df:1e:fe:7e:81:e0:58:05:c4:f9:ae:c2:d5:f3:87:a5:
7d:da:b5:00:70:29:4c:f4:df:52:32:42:33:51:92:0a:88:a7:
e0:2a:68:c9:8f:bc:6c:2c:c0:b4:a6:b1:75:6a:68:ec:f5:90:
60:34:20:58:d7:de:59:85:a6:3a:5e:18:e1:df:28:33:4a:77:
c2:db:63:33:b2:45:b6:57:0b:14:50:e3:8d:72:62:9e:26:d9:
f1:7a:be:64:22:df:cd:00:7b:56:67:04:3d:f3:ce:d0:73:79:
56:c0:d2:2a:3a:65:02:cf:a5:2d:b9:00:51:4b:3d:91:10:49:
ba:9e:80:3c:4f:08:35:bd:90:94:f2:fe:12:17:ae:93:56:dc:
9d:83:93:f2:94:28:9b:4b:37:71:a0:a6:43:a5:2e:e5:a2:86:
a6:64:d0:ca:df:3e:9c:d5:2f:33:25:58:d4:f2:00:1a:07:64:
65:9a:51:25:4a:28:28:13:fb:c8:cf:e4:f0:73:d7:54:de:72:
26:18:43:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:31 2025 by rpki-client