Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
File: 3tcjnbgdYfmNWGODzMEl1mEGyzA.mft (raw, json)
Hash identifier: 6vvNbsgnFORS7npMdmScWKdZEWpqMpZZunBzd9x36dI=
Subject key identifier: 4A:97:B0:BB:B6:08:37:1F:15:F6:72:98:A4:C3:74:8E:C4:74:86:F9
Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
Certificate issuer: /CN=ded7239db81d61f98d586383ccc125d66106cb30
Certificate serial: 0199FCC6A3BA116AEAC86C5693C56D2B68C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:40 +0000
Manifest this update: Sun 19 Oct 2025 14:01:40 +0000
Manifest next update: Mon 20 Oct 2025 14:01:40 +0000
Files and hashes: 1: 3tcjnbgdYfmNWGODzMEl1mEGyzA.crl (hash: FANcX75Oq8Dn4O9rhL+WE02HsR+9VXdabMPq0fu4fqY=)
2: E2CYjkWjcDRjmlm-uGqq2cX3-bw.roa (hash: SlY4rIEahH8X3kEcUUwCddcbIz7/S16cK2GTdrw1N+Y=)
3: EpMLaYChUvPW43eW66M41o2KSpc.roa (hash: PU2MBAWGAP6VAtPvAGor5W80iPyTDbgTBn9WAJahQLs=)
4: w0PKwUFljbRq5uVzYVthjHLkXQY.roa (hash: 6g4grLiYtJiUu1m03msVb0si+AZ8cTE6ZMD8wFTtcLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a3:ba:11:6a:ea:c8:6c:56:93:c5:6d:2b:68:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30
Validity
Not Before: Oct 19 14:01:40 2025 GMT
Not After : Oct 20 14:01:40 2025 GMT
Subject: CN=4a97b0bbb608371f15f67298a4c3748ec47486f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e5:e9:7a:47:af:d1:47:2d:7c:f4:10:fb:34:
f9:f7:1d:ee:93:8b:5a:02:6b:6d:fa:9c:0d:0b:e4:
1a:6e:13:db:43:63:df:ae:03:5d:8b:8f:dd:77:d8:
f8:af:ab:00:ce:03:4e:2b:c9:16:97:8d:d2:27:5c:
39:9f:6a:8a:71:fe:33:66:0c:c4:2b:31:7d:4c:72:
08:44:a3:71:f2:81:ce:e9:c8:8e:5b:d9:79:b3:62:
59:6b:75:4d:e8:4c:0d:ca:69:08:e3:a6:18:e5:b2:
ae:f9:a3:93:3d:ab:26:33:52:15:81:d2:97:dd:f9:
ca:e4:e5:46:ed:56:f0:d2:d4:08:a5:33:d1:e5:9f:
7f:d1:80:64:57:2e:62:41:2e:73:11:66:02:68:17:
a1:47:f2:fc:b2:fe:15:2f:75:1c:ff:7a:51:6e:9d:
9f:76:32:1a:54:03:92:2c:1c:0e:cd:1b:a2:41:36:
3d:f7:f6:d6:d8:1a:35:35:4e:40:f4:7a:7f:6e:b6:
09:ef:04:97:21:87:bf:6d:2f:ca:a2:87:23:9e:04:
88:4a:2f:46:d3:4c:c2:8a:62:bf:17:96:8c:3c:79:
ef:00:c2:bc:76:3a:6c:94:00:8c:4d:1e:48:77:65:
fb:11:90:c3:59:bb:75:6b:c8:5a:b2:3b:db:12:ee:
08:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:97:B0:BB:B6:08:37:1F:15:F6:72:98:A4:C3:74:8E:C4:74:86:F9
X509v3 Authority Key Identifier:
keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:11:5a:a1:4d:b3:3b:9c:12:6b:45:01:91:8f:ed:f0:8b:05:
aa:13:bc:88:91:c7:fd:ee:21:4f:f1:12:70:7d:34:55:91:7d:
98:16:0f:3c:3a:72:17:c9:54:c1:39:30:7a:e5:6a:d5:f1:06:
4f:e5:fd:ee:05:a0:40:73:e5:79:b9:1e:1f:f5:d0:f6:45:7d:
b5:15:22:3f:46:e5:6a:f2:f2:4d:c0:0a:ec:9d:a5:8e:f2:14:
23:9b:54:34:0d:f7:15:bb:fb:e6:58:b3:25:e8:1e:09:fa:40:
0b:ee:d6:a3:c7:b6:c0:34:e7:15:78:49:10:e0:6e:ae:bf:3e:
b8:13:6d:77:f5:7c:65:01:04:75:a8:2b:15:01:1b:cc:35:26:
07:ec:87:83:68:08:12:07:38:e6:ad:cf:6f:29:56:76:6e:87:
e2:ef:07:d4:42:5a:ab:a5:a7:d4:41:03:3b:69:6d:67:3e:3b:
6b:06:e8:d4:a2:3d:21:2c:5a:75:03:53:ff:ac:05:09:6c:8b:
84:e5:c4:7f:de:98:6e:4a:12:29:1d:87:72:8a:ed:e6:67:4f:
e7:45:bf:d3:d3:19:f1:06:10:2d:2e:b2:4d:f5:35:ef:bf:b3:
e6:fd:eb:fd:22:b6:e9:bf:f5:9d:a4:61:7c:b7:6c:1d:ee:d6:
bd:d5:cc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:10 2025 by rpki-client