Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
File: 3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json)
Hash identifier: qMrOOrIU1z7dQWrKI0pcRlZTzh/BPCk0KEJ0QqJSWQE=
Subject key identifier: 80:B3:71:D9:C6:F6:F6:11:F1:3B:9D:EA:1E:B5:09:66:FF:BC:8C:5D
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial: 0199FDD94AD182A8E9754906ECB4799CD7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
Manifest number: 0E19
Signing time: Sun 19 Oct 2025 19:01:40 +0000
Manifest this update: Sun 19 Oct 2025 19:01:40 +0000
Manifest next update: Mon 20 Oct 2025 19:01:40 +0000
Files and hashes: 1: 3f1U8HcG3gg1d7c-AMV0OeLqnk4.roa (hash: 6g/YiGFM7SXH1avma+AWhdPQYeSM8xFquer6wIrnMrw=)
2: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: 5AqFGYi/QUUIcC10ztvCpc0hHxCPdRg2EX8DvFk9R2A=)
3: LKSIMzg2qS8EWL02SO5YPjrz_I0.roa (hash: ZtwqDuK6zfdHnP5iApdAnlCr/naZTEL8mOtuOOiHgUY=)
4: uKO3HquanWKUmJ90M8YK1DIe1PA.roa (hash: XUrZ548wn+DveWLDDAs++NbjxnozKfTkNs4dRtLEX4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:4a:d1:82:a8:e9:75:49:06:ec:b4:79:9c:d7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
Validity
Not Before: Oct 19 19:01:40 2025 GMT
Not After : Oct 20 19:01:40 2025 GMT
Subject: CN=80b371d9c6f6f611f13b9dea1eb50966ffbc8c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:ad:f5:db:3d:a7:71:db:3e:60:61:c0:cb:
be:16:b8:32:e1:6a:91:01:52:b8:9c:a7:a5:da:da:
95:77:fb:ff:89:10:95:e0:bf:a3:03:8f:47:f9:bd:
67:50:ef:7f:aa:0f:e6:27:e3:5b:4e:ab:8d:d3:21:
fb:c1:9e:4d:8e:05:8d:8b:ba:20:24:7e:ba:d9:76:
00:d3:7b:18:05:2f:ab:99:11:e2:e1:85:f1:4c:df:
17:ba:c2:b5:c1:b0:a0:53:f3:2d:ec:b2:6b:27:a6:
8d:10:db:18:75:85:b9:49:55:2a:38:4a:4d:48:4f:
41:c9:5a:46:cf:21:35:71:33:52:c5:8a:f7:5c:d1:
fc:a7:49:cd:f8:d9:92:b9:b7:27:9a:8d:a5:9a:31:
33:bb:58:d1:56:3d:97:d5:53:91:26:5d:24:7e:3b:
8c:a0:9f:30:ca:f6:70:a3:1e:a7:d5:c4:95:be:99:
f6:d8:6c:1f:38:45:bd:64:7a:12:4e:2d:84:d1:59:
c8:06:d9:3e:86:0b:c8:8e:92:16:84:81:27:f6:6f:
85:85:7a:8c:34:87:04:57:2f:2d:e8:71:df:78:0a:
b4:fb:f3:73:b5:b0:d6:bf:3d:2c:3b:e7:7f:8d:85:
09:79:b5:e3:54:0b:3d:e6:f3:f2:a2:12:32:2e:bb:
00:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B3:71:D9:C6:F6:F6:11:F1:3B:9D:EA:1E:B5:09:66:FF:BC:8C:5D
X509v3 Authority Key Identifier:
keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:13:83:bc:20:44:60:0b:1d:05:42:df:3e:81:cd:21:cc:3d:
81:e6:f9:f7:f3:6a:97:7c:5d:f3:df:a4:e5:5a:4a:01:99:f1:
8a:f6:fb:e1:66:ae:cb:09:6f:9d:26:49:aa:2c:d9:43:4d:af:
4b:43:c6:52:81:3a:24:7c:bd:c2:04:bf:df:41:84:18:a9:6c:
ed:0f:ca:e7:20:41:98:3a:9e:ec:81:6f:64:56:0e:48:ea:e9:
39:04:2d:b9:ac:30:4e:12:84:7d:12:ec:a5:52:51:02:cf:e8:
69:25:12:29:40:55:91:41:b0:29:83:db:d7:4d:9b:19:4c:ee:
82:e3:f7:87:0c:54:66:23:5c:df:5e:33:1c:c4:b8:95:03:4c:
a5:68:e9:24:d3:af:a0:77:18:f5:d1:ee:75:39:60:0d:67:3a:
09:95:2e:57:c7:82:45:a3:13:72:ad:d4:cd:b9:f7:a3:48:3c:
b0:a8:4b:59:85:a3:89:1b:5b:5a:59:80:12:e1:4a:9b:d8:f7:
d8:b8:f8:66:5c:a2:99:84:b6:f6:77:42:e4:b4:ae:e8:a8:00:
1b:8b:4c:0a:00:fc:c3:80:f6:d1:af:68:7b:3f:60:b8:fa:1b:
25:e5:18:3a:5d:f7:a8:c7:f2:c7:11:4f:be:2d:57:2d:41:aa:
bc:d1:a8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:22 2025 by rpki-client