Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
File: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft (raw, json)
Hash identifier: fFdIEuuF5gyfJNpEWtBr2guT6KDD03gciuJpNHC5JTs=
Subject key identifier: A2:A3:0B:ED:5A:31:21:B4:7E:78:C4:54:3B:07:45:73:97:97:92:3F
Authority key identifier: DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
Certificate issuer: /CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Certificate serial: 0199FBEC0C7170AF45AFBCA29D2EF7D62FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:54 +0000
Manifest this update: Sun 19 Oct 2025 10:02:54 +0000
Manifest next update: Mon 20 Oct 2025 10:02:54 +0000
Files and hashes: 1: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl (hash: seHuZpkqvc1ohKmrWMQY+9GgS7yb26VIUHfkQ+OZGwM=)
2: XQd1c0isqEth9h07f_gdrmhW6kM.roa (hash: WoVAodjsDqf5sS0K6LPcCANkMFHDsRKs5Hf+/9kb228=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:0c:71:70:af:45:af:bc:a2:9d:2e:f7:d6:2f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Validity
Not Before: Oct 19 10:02:54 2025 GMT
Not After : Oct 20 10:02:54 2025 GMT
Subject: CN=a2a30bed5a3121b47e78c4543b0745739797923f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:1f:c6:1e:97:73:ea:8b:c9:86:59:b3:9c:
f1:b2:aa:3c:46:e0:93:2c:aa:c1:cd:3e:a4:b3:bf:
c4:78:16:a9:02:3e:8c:c2:e8:04:35:8d:e1:d8:0d:
0c:ec:bf:46:dc:0b:8b:18:e6:70:2a:5c:8c:73:8b:
5f:9b:39:fe:49:18:96:2f:b7:43:2b:dc:d0:cb:48:
46:90:27:58:71:08:3c:e4:8f:7d:9d:15:cc:6f:f8:
21:d6:4a:08:59:7d:06:9c:ff:1b:1b:46:f5:59:6c:
d4:60:4e:8c:84:b8:75:ba:e3:31:14:0b:d7:f8:e0:
4e:c2:d6:41:76:1b:d8:b0:75:5e:84:01:02:b4:fe:
87:c6:8d:d1:1f:f2:b0:50:07:b5:18:cc:58:2c:20:
7f:6c:25:af:2f:18:5b:85:65:92:19:91:ce:91:4e:
60:4c:2b:6c:cc:bb:1d:8a:16:b9:1d:ae:4e:70:8f:
fc:8b:fd:64:29:d7:b9:0a:7a:b5:c8:96:3c:43:71:
36:93:ab:cb:23:aa:35:b1:58:f8:ce:dc:a9:76:cf:
92:9e:d4:82:12:ff:28:de:35:d3:f6:2d:b2:69:11:
cc:51:77:ce:29:c6:2e:29:d3:a3:84:9a:27:4c:a0:
9a:1c:e9:63:34:1a:c8:bd:96:da:20:02:f8:16:89:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A3:0B:ED:5A:31:21:B4:7E:78:C4:54:3B:07:45:73:97:97:92:3F
X509v3 Authority Key Identifier:
keyid:DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9d:b3:95:a9:55:a0:91:fd:ac:36:f7:34:2d:03:3e:6e:8b:
c7:87:fd:e0:df:de:17:05:61:df:55:1e:91:da:fa:69:d2:5b:
10:e5:b0:37:64:0a:a7:7e:a0:54:5a:5a:89:6e:69:1f:8a:c7:
ad:20:7c:b1:bc:d2:d7:ab:73:c5:20:c3:1d:db:e6:7b:65:2f:
75:1c:f0:0c:64:e9:5d:b7:15:a0:d3:b4:ed:23:fe:47:92:e7:
6c:74:1d:ca:f0:00:5a:cd:ec:8b:33:5f:35:f6:87:87:39:60:
8e:65:a4:60:7e:bb:f1:b4:b5:26:f7:f2:d6:87:41:2c:0b:ce:
98:ad:c8:f6:29:4c:08:3a:2a:42:31:08:f8:09:6f:a0:43:05:
f9:69:a0:67:0e:84:c4:75:64:7e:b4:96:09:76:41:aa:cd:5f:
b4:70:53:97:5a:2e:b3:8f:55:30:79:f5:a4:42:e4:10:a2:0b:
10:c0:d5:b5:0c:28:63:99:21:07:c3:5b:89:22:77:cb:a8:3c:
49:28:4b:f0:b8:10:8a:36:3f:15:4b:15:eb:39:85:98:d4:0b:
51:22:4c:3b:b0:83:19:e5:15:ec:f5:a4:f0:24:b8:b4:91:22:
e4:05:80:0c:86:07:b4:5f:91:b8:36:26:89:00:87:75:a9:a2:
ec:d5:a5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:00 2025 by rpki-client