Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
File: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft (raw, json)
Hash identifier: wdsO30XU3CF3/oaErRaTAq3MVOCHNpgtAviJAURSRMY=
Subject key identifier: 71:E0:BB:AE:B3:42:76:08:A9:C0:49:E8:83:2A:EE:D8:EA:EA:FC:96
Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5
Certificate serial: 0199FD6B09999B794E72AFDA35C4617A0A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
Manifest number: 0B72
Signing time: Sun 19 Oct 2025 17:01:14 +0000
Manifest this update: Sun 19 Oct 2025 17:01:14 +0000
Manifest next update: Mon 20 Oct 2025 17:01:14 +0000
Files and hashes: 1: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl (hash: QY8lAyBugGskxna4td2lp4yvfZlOUN2uGKBkIbIWK2E=)
2: k-zbYqMjr7XFkjggYMsDTqkc4ZQ.roa (hash: s4TVKdERPvITqngL+4WwZ8o+fcmlm7A+ZBRKG7i/ppo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:09:99:9b:79:4e:72:af:da:35:c4:61:7a:0a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce6e13e413baf381b625131e924e947843436f5
Validity
Not Before: Oct 19 17:01:14 2025 GMT
Not After : Oct 20 17:01:14 2025 GMT
Subject: CN=71e0bbaeb3427608a9c049e8832aeed8eaeafc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:c0:5b:73:de:99:ea:0e:49:a2:da:6e:80:
c9:ee:95:f9:5f:32:da:79:b8:d8:50:bd:4d:a5:55:
6a:58:fe:12:ae:a8:49:28:27:fa:c0:26:dd:3b:d8:
53:42:40:27:30:7d:c8:6d:b5:ad:db:97:41:23:d5:
1a:f3:f1:6a:85:5d:86:61:4d:29:23:96:ff:ac:2c:
90:f6:b8:45:b3:8e:d8:bf:fa:c3:80:2c:41:63:b2:
7d:7a:a4:f0:60:51:94:19:ba:80:48:0f:d3:d1:f6:
bd:87:ec:59:01:19:ae:09:1a:59:0b:06:eb:b3:7c:
83:b7:60:f6:12:2d:dc:f4:6e:f4:dc:1c:07:54:0f:
ea:da:40:29:bf:bd:31:5c:8f:49:9d:8e:d8:b1:fd:
f9:f8:05:64:5b:48:29:13:e9:f7:db:fb:c2:37:b0:
b3:b0:e8:5f:47:63:82:d9:0e:9e:00:f1:3e:e8:1f:
70:87:af:d3:1c:f9:87:0e:72:bf:75:2a:07:5e:3f:
25:fc:71:a8:b0:ae:35:89:d7:3a:a5:13:9c:11:0c:
99:43:fb:2c:9d:21:8f:bd:b4:d6:b8:02:0a:3c:f4:
78:cb:f6:25:92:74:11:ef:34:98:b5:41:e7:22:74:
94:03:b2:1e:46:2e:f2:37:89:99:fd:85:23:50:8d:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E0:BB:AE:B3:42:76:08:A9:C0:49:E8:83:2A:EE:D8:EA:EA:FC:96
X509v3 Authority Key Identifier:
keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9d:d4:98:a8:9f:c3:c3:3a:99:46:d6:f1:25:ff:c1:a2:38:
d0:a3:91:59:17:c5:44:83:76:bc:d0:60:d1:95:f4:61:e9:5c:
1c:57:98:9a:c1:59:7e:f6:12:bc:95:6d:c7:58:c4:e7:2e:8a:
86:f4:03:30:b3:3d:e0:fb:7f:51:60:1e:cb:ba:3f:e0:f8:df:
ba:48:4c:1e:87:d7:97:34:bc:e2:ef:f3:a4:c2:bf:83:60:d6:
b2:d7:55:19:dc:87:36:42:ab:47:64:bb:91:31:6b:af:6a:ab:
40:71:a2:f9:dd:ab:6b:4d:01:a6:b7:89:0f:45:c2:ec:3b:0e:
18:ef:0f:10:7f:77:71:8d:d7:63:54:eb:5a:3b:89:6b:9b:d2:
48:e7:e3:a7:74:73:15:71:66:6b:94:3c:23:3e:fa:81:68:33:
cb:3f:1a:1a:53:f2:cd:8f:e6:69:cb:00:68:c3:ef:a4:39:09:
15:9a:5c:f5:ac:60:cb:cd:84:5e:b6:23:f5:a9:82:c4:bd:31:
08:43:71:d7:09:43:9b:de:88:f8:cb:52:0b:e0:41:17:ab:e6:
23:8d:17:1c:7f:8f:d6:40:0e:b7:3d:99:57:d4:31:fa:b2:9d:
8a:c6:a0:66:0f:a0:c3:fa:7b:5c:80:0e:de:49:8c:d0:9e:fc:
cf:57:db:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:17:45 2025 by rpki-client