Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json)
Hash identifier: SuNyOjzAbwyZ93h1u5Gp9ejBVl123q+Qd25Uq+PKJ2E=
Subject key identifier: 81:BD:6A:CE:31:26:85:0B:2D:C9:66:5D:69:1B:E3:03:20:4A:0F:74
Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Certificate serial: 0199FCC65E639DBE308D3F5F91FBDF53F07C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
Manifest number: 163C
Signing time: Sun 19 Oct 2025 14:01:22 +0000
Manifest this update: Sun 19 Oct 2025 14:01:22 +0000
Manifest next update: Mon 20 Oct 2025 14:01:22 +0000
Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: 9CP8C6mBQAAtQRx9BzhLWyr24XT7zJDxcQV8HGRfAdM=)
2: bPbl9DKxYJUxR3ZUVzukhGWYurM.roa (hash: FAnYMWhXeH8TjI8m2ivn5nzVc0hLKvZ4QbjQQh/aekU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:5e:63:9d:be:30:8d:3f:5f:91:fb:df:53:f0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Validity
Not Before: Oct 19 14:01:22 2025 GMT
Not After : Oct 20 14:01:22 2025 GMT
Subject: CN=81bd6ace3126850b2dc9665d691be303204a0f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:4a:d9:ac:9c:1c:24:89:1a:4b:14:09:cf:
f9:0a:01:bd:5d:de:34:43:3a:d9:a9:c3:e8:57:bc:
bc:41:58:7d:f6:9c:14:d1:bb:3d:91:1d:f2:e2:66:
bb:b2:4f:ec:f1:42:3d:9c:fb:37:4b:dc:28:0b:92:
b9:6c:d3:09:fa:8b:8a:f6:91:19:27:d8:75:1e:24:
dc:a7:4e:c2:bd:de:4d:49:e7:82:63:4e:b1:12:14:
a9:0e:1c:f9:73:ec:69:43:ba:1e:c3:33:66:4b:6b:
f3:4e:0b:77:c7:01:bf:c8:7b:a9:81:ed:89:25:67:
2d:b2:2f:c8:2a:bc:db:1a:9c:a5:a9:9b:d8:56:0b:
c9:77:56:cb:f0:10:5c:35:e6:fc:9d:db:ac:11:32:
f2:20:2f:41:ee:84:ce:b5:c5:6d:a3:d9:4c:7b:6f:
b2:6e:f1:9c:d3:86:73:28:2b:ca:a4:20:35:38:5a:
2e:ab:ba:1e:9f:e0:22:95:9f:51:bd:05:eb:79:8a:
8b:12:cd:f5:e2:1c:d7:05:6b:85:14:c2:87:37:61:
e3:d1:74:0a:4d:12:7f:17:f2:24:e3:24:7a:b4:35:
b9:5c:e8:1c:03:62:ad:51:f4:ac:32:70:be:34:bc:
ce:df:ac:80:ad:58:e1:1f:70:ef:ce:a5:7a:e1:db:
44:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BD:6A:CE:31:26:85:0B:2D:C9:66:5D:69:1B:E3:03:20:4A:0F:74
X509v3 Authority Key Identifier:
keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:12:50:18:30:b9:6c:b3:45:ab:4b:91:5c:be:8a:9a:90:c4:
ad:98:66:9f:13:fa:71:a6:3b:2f:ee:7f:32:eb:87:94:98:8d:
e1:cd:57:1c:76:d5:d5:70:c8:92:ef:96:69:0d:13:21:77:88:
b9:43:ce:6e:4c:1d:ea:b8:c0:ce:4a:5f:d4:be:2a:0a:b0:d0:
0b:d3:c9:35:5c:cd:67:b3:10:46:ea:ea:21:c6:ec:18:0a:63:
52:87:cf:b4:24:c8:e9:73:73:e6:79:ad:73:a4:70:fd:e5:5e:
a1:23:f3:38:35:0d:0c:7b:7c:6e:e7:85:e1:54:57:82:87:0f:
ca:4c:2b:09:de:41:13:70:90:e3:17:58:ea:a9:68:6c:d2:58:
ee:15:f3:2c:27:0b:c9:aa:62:44:e2:b5:2f:ff:e3:69:ed:e4:
1a:ab:f8:16:6d:5e:17:d2:3e:d0:06:b3:8f:83:bf:e9:9a:a4:
be:cd:37:7a:c0:3e:df:45:44:d5:ce:4c:d5:ab:8b:42:36:84:
f9:7b:64:97:b5:2a:63:78:18:b6:3a:e7:69:e6:e2:a4:eb:74:
0a:a6:94:47:db:73:29:c0:38:3d:8f:3f:03:95:09:c9:18:4e:
96:54:96:0e:25:0b:ba:21:42:89:78:84:6b:0e:28:34:37:74:
9d:f8:05:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:33 2025 by rpki-client