Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
File: 3RiOwuSayUWFJFtLh0Whu3oc3GY.mft (raw, json)
Hash identifier: e7PjsMZX6fEAnptHGI/rpyRIk2OgcC4x4XTn9la7NaU=
Subject key identifier: 64:15:90:82:A3:94:2B:9D:11:B2:26:99:C6:28:69:90:10:8F:EB:57
Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
Certificate issuer: /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Certificate serial: 019A228AC3FAF0E3A9D608808C7FC840A0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
Manifest number: 0968
Signing time: Sun 26 Oct 2025 22:01:50 +0000
Manifest this update: Sun 26 Oct 2025 22:01:50 +0000
Manifest next update: Mon 27 Oct 2025 22:01:50 +0000
Files and hashes: 1: 3RiOwuSayUWFJFtLh0Whu3oc3GY.crl (hash: 4mjFonbOpwH4clEL2UmwXfge6RNddZRb9DHeLS2t4t0=)
2: pDLly0sn53PLZlgmqVTYD5L2Et0.roa (hash: MLKk0AIXSDvV1SnhwkIbUGP+qcSM6FHopsKcU6yMV74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:c3:fa:f0:e3:a9:d6:08:80:8c:7f:c8:40:a0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Validity
Not Before: Oct 26 22:01:50 2025 GMT
Not After : Oct 27 22:01:50 2025 GMT
Subject: CN=64159082a3942b9d11b22699c6286990108feb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8f:b4:e0:13:dc:b2:e6:2d:2d:d9:3f:d7:3d:
cb:8f:82:ce:d3:7d:b8:3a:4b:62:d2:1a:fc:3c:0a:
84:0c:ce:a8:10:9c:88:a1:11:23:55:fa:35:7e:8b:
56:3f:4b:f5:b8:50:de:d5:a3:8c:7a:e3:57:ec:a3:
bf:4d:37:8a:9b:bd:82:8f:94:ec:51:22:57:6c:b0:
c2:11:2d:d0:3a:6e:39:77:aa:db:c9:94:46:fc:b6:
06:01:47:47:a0:3b:44:f5:40:66:d8:6b:ec:1f:b8:
18:86:2f:0b:94:f0:31:4e:a4:2a:2d:f6:20:69:0a:
92:21:a7:bf:04:94:37:1e:81:41:f6:21:50:fe:7b:
12:57:58:44:87:bc:eb:66:21:1f:0c:0a:25:5f:b8:
78:f9:75:fb:dd:92:98:66:d1:68:47:4c:44:ff:01:
b6:32:7e:47:19:d6:96:63:e2:9d:3d:ac:8f:31:d4:
a2:df:1d:b7:8c:a7:08:61:73:c5:aa:7b:f9:ef:c9:
c7:60:e7:4b:e3:3a:32:a9:3a:3a:5d:5f:18:fc:14:
1e:b4:97:5f:22:40:0a:af:49:0f:fd:fb:c8:3e:2a:
a5:ab:a4:73:c9:e2:08:f3:98:da:d0:ee:64:22:d8:
00:a0:b1:c6:f5:dd:ec:03:50:80:52:af:e9:a3:7e:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:15:90:82:A3:94:2B:9D:11:B2:26:99:C6:28:69:90:10:8F:EB:57
X509v3 Authority Key Identifier:
keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d3:f8:0c:a3:a5:aa:e2:9f:d8:9a:a2:0b:20:d0:92:b8:81:
45:9c:64:98:6e:9f:2a:81:e3:d3:3d:e1:84:57:17:61:2b:57:
07:5e:dc:03:f1:6a:49:16:45:66:9b:cd:01:f4:fd:ea:11:08:
30:9e:c3:c7:e6:98:d2:25:34:f6:98:84:a9:a1:f8:03:91:0d:
3c:99:1d:b2:c8:72:89:92:eb:87:23:54:e6:bc:1e:a3:c0:4a:
2f:24:ce:da:a3:8c:f4:ee:c5:f0:77:52:86:eb:d7:ee:69:24:
48:24:c0:a8:99:50:28:ec:d1:71:12:de:e2:35:9a:fb:58:02:
6f:a7:08:04:83:c1:d1:e9:45:9e:5d:13:31:25:eb:92:e3:f2:
0e:05:1d:29:af:78:03:25:48:7f:48:0a:78:b4:3d:17:08:c5:
3f:3c:6a:b2:57:41:5a:cf:1e:b2:3b:4f:0b:42:79:8a:18:25:
bd:ad:75:f8:97:c7:8a:fc:ef:79:6a:11:43:6c:7e:4e:f0:a7:
ed:91:8a:23:e0:fe:70:66:30:b9:9f:10:05:2d:38:e3:5f:a9:
3a:32:02:ad:8f:3f:dd:fd:d5:30:e4:fe:89:32:18:f6:61:0c:
13:b9:ec:cc:ed:69:42:d4:3c:5a:91:25:ec:eb:a7:9b:1d:88:
af:1b:cc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:42 2025 by rpki-client