Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
File: 3PhcNsaW1dssu0j9Q-ghc37jQic.mft (raw, json)
Hash identifier: HZSH2j28uZ8aixSc2mW2ufdxKSBkPA5tBtpRHXPDaBI=
Subject key identifier: ED:76:5A:34:3D:A4:0D:60:77:07:E6:B0:C1:37:8B:06:4A:54:25:68
Authority key identifier: DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
Certificate issuer: /CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Certificate serial: 0199FD34617AD46968BFC496139ECBF5F5EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
Manifest number: 111D
Signing time: Sun 19 Oct 2025 16:01:32 +0000
Manifest this update: Sun 19 Oct 2025 16:01:32 +0000
Manifest next update: Mon 20 Oct 2025 16:01:32 +0000
Files and hashes: 1: 3PhcNsaW1dssu0j9Q-ghc37jQic.crl (hash: oRxx1eTC6se7+yon/XzICwJbx50QA82sXTOvnH7Ifs4=)
2: AuGSVrNkGgUtthLzU1YbunCRJmA.roa (hash: N+p3SVnY5s1RjPh5Td733eJn6W460syQCiw/MVZ+pqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:61:7a:d4:69:68:bf:c4:96:13:9e:cb:f5:f5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Validity
Not Before: Oct 19 16:01:32 2025 GMT
Not After : Oct 20 16:01:32 2025 GMT
Subject: CN=ed765a343da40d607707e6b0c1378b064a542568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:2c:f6:4d:48:2e:34:78:e4:27:fe:80:25:
01:1f:6f:68:54:77:10:a9:58:d8:a5:e3:5b:a8:ac:
92:12:6b:a7:84:aa:68:e7:19:1c:46:0b:7d:14:ff:
ab:e7:6d:60:d6:bc:44:52:37:c2:0f:73:9d:0f:8e:
b4:e4:27:56:1c:69:55:f2:e8:5b:9f:b9:fa:1a:ad:
d6:6c:8c:b2:72:06:10:a8:fa:f5:84:54:36:5f:82:
da:b9:a7:ee:3f:2d:eb:43:34:ad:50:89:d8:c6:08:
5f:d9:7c:0f:99:b9:be:42:aa:93:a5:1e:9b:17:2c:
5f:8a:a5:a8:05:19:34:e7:b1:e7:e0:4a:dd:22:f3:
03:c1:0b:61:38:76:ff:0d:35:89:ed:72:4c:c9:ba:
ff:f8:df:8a:ae:f0:eb:a3:b7:4c:2b:4f:d4:6c:83:
88:91:bf:c2:39:84:f5:84:94:85:3c:ab:52:6c:03:
04:82:6e:c2:88:ea:57:92:7c:a4:11:ee:11:c4:08:
a0:79:0a:fb:83:fa:cb:ce:37:31:1f:7d:72:a1:45:
59:21:1c:51:76:ba:d7:c9:43:71:0b:64:75:8a:c5:
64:c3:ea:67:ee:f0:e4:2a:6b:bd:e1:b6:57:5c:18:
15:e5:bf:af:19:00:7e:ed:56:17:20:8d:cb:2c:8a:
88:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:76:5A:34:3D:A4:0D:60:77:07:E6:B0:C1:37:8B:06:4A:54:25:68
X509v3 Authority Key Identifier:
keyid:DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2d:f3:50:34:a4:f3:fc:16:49:af:8e:8c:29:2f:c7:84:20:
a7:32:bd:6a:27:20:9d:34:23:af:ec:e3:4c:4b:52:1a:d8:ba:
e9:02:2a:c6:61:f9:3a:e5:5b:04:fb:5d:80:31:23:d1:d6:d8:
2b:3d:2a:8f:21:71:a5:9f:01:98:93:b8:da:ca:63:e9:25:5c:
23:6c:83:29:cf:6b:81:7a:11:24:57:b7:29:05:5a:56:cf:07:
16:6c:0c:4d:84:ff:c8:6b:95:e7:a7:01:a1:96:47:5a:33:a7:
7a:c2:1e:f2:74:04:fe:da:a2:03:5b:80:b7:a8:38:d9:c6:f4:
65:3d:3e:1b:2f:d8:0b:39:0c:0e:a5:56:d3:90:bb:f5:86:5c:
19:34:e7:b9:aa:42:3c:67:f6:b4:11:77:14:4d:c0:56:bb:9a:
1e:e0:bb:52:c2:84:b7:3f:2c:7b:e0:ff:f7:d6:60:f6:2a:d0:
92:59:fe:d6:98:a6:dc:3f:6a:5e:fd:b0:29:c5:f0:bd:e0:63:
82:b9:e1:06:40:fe:d6:d7:70:64:49:65:cf:2d:f7:15:1b:1d:
e3:89:4b:fe:ca:27:17:8b:ff:aa:d0:7e:52:13:24:c6:bb:25:
a0:8d:15:51:58:36:17:e8:b2:63:4e:7a:b2:88:70:c3:3f:24:
95:3e:60:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:20 2025 by rpki-client