
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
File: u3dSpxm3QKDgJE3SnGUy95FRZGs.mft (raw, json)
Hash identifier: n50NiS8hdVJPvFQyikRa8sEVEonBgEvlvKXdaUssD2k=
Subject key identifier: 28:B3:D6:73:8E:3D:E8:C7:3B:31:4F:3B:0B:C0:0C:B3:0C:74:72:38
Authority key identifier: BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B
Certificate issuer: /CN=bb7752a719b740a0e0244dd29c6532f79151646b
Certificate serial: 0199FC8FBDECDEAFCADBCB7E13D7A81112D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
Manifest number: 0198
Signing time: Sun 19 Oct 2025 13:01:42 +0000
Manifest this update: Sun 19 Oct 2025 13:01:42 +0000
Manifest next update: Mon 20 Oct 2025 13:01:42 +0000
Files and hashes: 1: qthh4gNq1SL8vSN5_lWJGt2pcwI.roa (hash: B+0i/tQ7fiCSFHOJ8ekqNZr6VbEaL85Z1TQ1N6rfs1I=)
2: u3dSpxm3QKDgJE3SnGUy95FRZGs.crl (hash: OmH8HmeKjENEkeNvQmVb2bmVP2xHlaaQDl9LFTb79Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:bd:ec:de:af:ca:db:cb:7e:13:d7:a8:11:12:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7752a719b740a0e0244dd29c6532f79151646b
Validity
Not Before: Oct 19 13:01:42 2025 GMT
Not After : Oct 20 13:01:42 2025 GMT
Subject: CN=28b3d6738e3de8c73b314f3b0bc00cb30c747238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:17:51:f9:2e:f5:7b:52:51:a6:a1:a6:ea:
c2:0a:da:7f:1c:40:86:5b:57:04:d1:a7:7c:bb:52:
d6:71:ad:66:7c:ee:22:9d:df:a0:c0:f9:b2:01:79:
c2:b9:1c:bc:fe:c0:a4:54:79:87:79:91:d9:09:ae:
ec:70:1f:15:a0:d6:4c:05:4b:4f:2b:af:b5:76:42:
1b:e2:f1:78:92:35:bf:9f:ba:68:b3:a8:21:8f:01:
5f:26:d0:fd:cb:6c:34:ba:3a:0e:e7:2e:02:0a:90:
ee:82:8a:44:36:de:6f:02:6d:79:66:99:c2:3c:48:
25:95:c2:fe:dc:ce:0e:7f:d1:a4:ac:8e:44:19:7c:
f3:1a:cb:98:4d:bf:20:7e:97:fa:5c:ee:1a:dd:c3:
73:11:90:7b:d7:e1:21:fe:2d:93:0d:f2:84:f5:a0:
33:ed:4d:a8:9c:3a:ba:42:a5:13:ee:2c:10:1f:74:
54:46:a2:a0:3d:ee:a3:76:08:41:bd:82:d8:46:ff:
64:2a:d1:7c:b4:fd:09:25:b6:7e:f4:e3:4d:0b:93:
8a:92:61:88:5c:ae:27:16:af:2e:19:da:1b:e6:4c:
43:b8:7e:b3:d7:cb:09:14:25:fd:eb:8c:b8:64:7e:
ad:e2:4e:b6:4a:e4:c6:69:c2:3c:75:e3:dd:e4:59:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B3:D6:73:8E:3D:E8:C7:3B:31:4F:3B:0B:C0:0C:B3:0C:74:72:38
X509v3 Authority Key Identifier:
keyid:BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b5:c9:85:c3:c4:ed:2e:80:df:7d:5f:38:04:f5:5d:63:49:
5d:0f:fc:41:00:bb:29:5a:91:71:3b:8c:64:d3:3d:7e:da:7a:
83:b3:f1:15:d2:94:64:70:63:9e:8b:87:88:7b:75:a2:17:0d:
17:d7:89:14:b1:2d:6b:8d:d9:0d:ff:34:05:04:4e:1b:9a:b4:
02:77:81:88:74:df:65:9d:67:fc:cd:50:a5:47:5a:35:5b:56:
5c:bb:69:a0:53:7b:7b:6c:f2:6d:13:02:09:f3:de:ee:ce:6c:
58:5b:fc:6a:85:00:32:2d:35:ce:1a:8a:64:52:81:6a:8f:58:
db:2b:f2:e7:bd:45:2d:db:86:9d:cd:33:2e:ff:f1:1e:0d:f3:
60:2b:85:d5:2b:a8:c0:a0:52:13:fb:86:c7:c7:81:a7:95:4b:
f0:71:3e:7c:f9:2d:68:3f:4d:56:c1:74:f7:7f:57:48:b8:db:
06:79:cd:81:81:35:2e:3c:9c:76:16:04:5a:fb:26:1e:75:71:
27:12:b5:78:db:04:54:00:25:30:49:ed:22:b4:79:f7:b7:c7:
74:93:b5:8f:6e:94:38:2e:a9:89:86:4a:23:25:da:e4:e5:c0:
f5:28:09:3d:f1:1d:57:b3:b5:9d:cd:8b:a0:25:60:fa:4f:6d:
93:2b:8e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:39 2025 by rpki-client