Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
File: rrC3d_U3e7HFBlOISwPifc3ugo4.mft (raw, json)
Hash identifier: 2NFBaFEHrXI5udZuVi7hp64s4QEpdGXf5dP1jLRfq1s=
Subject key identifier: 3C:30:34:52:AB:8B:A8:6D:DF:0E:FD:3C:EB:34:89:37:EB:C9:AB:80
Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
Certificate issuer: /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Certificate serial: 0199C4C4DB26DBFE0A7440FB9CA181336422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
Manifest number: 0625
Signing time: Wed 08 Oct 2025 17:00:59 +0000
Manifest this update: Wed 08 Oct 2025 17:00:59 +0000
Manifest next update: Thu 09 Oct 2025 17:00:59 +0000
Files and hashes: 1: 32XJfOuajaXKWFXToBNlGxtkW6Q.roa (hash: dKLGEpCpRymK3fL0g+5BlFVGvIZeLfMhwXmSO0Ljm9k=)
2: JNkggvQx74p1btfiu-ncCk_cuvY.roa (hash: 3PlXzxEghXwRv2XVfxrZveNHTFUHK5O1XcLko9Bh3BM=)
3: o6055-b-qPzQTA0F_ST-9FEVVmE.roa (hash: g8Jxoy+mBwRsosu9yvKdAVg8QP3DZnBB7YPvuPjdGU4=)
4: rrC3d_U3e7HFBlOISwPifc3ugo4.crl (hash: gvVws2lUv1mGLCZREwgSj/zVFnNPJHvmrX6Sxy42Wrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c4:db:26:db:fe:0a:74:40:fb:9c:a1:81:33:64:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Validity
Not Before: Oct 8 17:00:59 2025 GMT
Not After : Oct 9 17:00:59 2025 GMT
Subject: CN=3c303452ab8ba86ddf0efd3ceb348937ebc9ab80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:01:09:0c:59:12:d7:d6:77:3b:20:0c:0f:
f9:52:3e:ab:e2:1d:cc:86:c2:f3:bb:11:d1:f7:24:
60:85:4f:99:4f:6d:ed:cd:5e:a6:fe:85:04:82:f2:
a1:b2:bd:88:00:e7:37:a9:78:f7:61:cb:57:e5:9c:
ef:df:fd:b4:8b:aa:e2:b6:48:8c:39:f0:ca:f4:b2:
07:6b:25:01:b7:be:6a:89:7b:4a:d8:14:12:ad:9d:
a1:53:02:23:53:17:3d:8d:f5:a2:7f:fc:a8:1d:da:
b4:92:f2:58:5a:47:61:33:d6:92:a9:b2:2c:8a:9a:
8b:5d:e8:a1:40:73:de:9d:2a:fd:c8:c1:01:ab:29:
2d:a0:3d:8d:db:89:13:2b:62:98:63:c8:a5:6d:cd:
12:a7:86:b1:dc:82:c5:c0:76:32:78:95:fc:bb:84:
be:fe:1b:0a:be:77:d2:90:ed:13:99:06:1d:92:26:
b9:0e:19:bb:03:6b:3c:16:b7:c5:ec:45:59:d2:e6:
03:94:d5:b3:3a:5d:b6:b5:5e:05:3b:86:8d:53:ed:
36:c5:d3:12:a7:b5:4f:ab:e7:ed:eb:d3:61:95:39:
9e:cc:de:3f:ab:39:1c:f4:40:11:1a:47:85:a7:0c:
4d:e3:71:13:80:23:04:ca:1b:59:73:e2:35:23:e3:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:30:34:52:AB:8B:A8:6D:DF:0E:FD:3C:EB:34:89:37:EB:C9:AB:80
X509v3 Authority Key Identifier:
keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f7:9d:e6:9c:f7:25:a9:5c:d6:b6:fd:dc:07:ec:4b:31:82:
60:42:26:e5:60:06:df:11:5e:14:9e:05:74:94:15:67:73:37:
45:86:4c:b6:91:e9:7e:d2:b3:f4:41:42:e5:81:c3:79:c4:1f:
a1:d4:db:58:fd:a1:01:94:29:f6:cb:9d:01:25:a6:8b:61:c2:
1a:4d:d0:84:04:33:3f:b4:20:cd:35:1f:2e:29:5d:27:ab:70:
31:06:94:ae:cb:86:49:8f:a7:8c:dc:c0:11:85:69:d6:df:43:
fd:19:99:f5:87:3e:7d:5f:e9:cd:e6:e2:4b:c4:9a:ac:75:27:
da:b2:81:a1:48:ec:9c:74:18:ea:54:08:f2:7d:f5:cc:fe:26:
49:52:55:56:f2:e1:5a:bc:66:a4:5e:9c:a9:74:a5:ef:3a:4c:
9d:a4:bb:84:04:29:1d:12:d5:5e:55:d8:50:0c:d2:d4:a3:e9:
52:4e:be:86:9b:cf:3e:71:19:94:f8:4f:5c:8f:16:11:ca:68:
65:22:0e:64:8d:80:f3:92:31:b2:fe:6a:5c:36:c9:c8:ee:ca:
de:18:30:62:99:7b:9f:05:87:e1:42:36:69:5d:b9:51:55:dd:
34:e2:f5:4b:3b:85:b9:9b:f1:2a:4c:68:e0:18:29:c2:1d:13:
4f:3a:4b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:13:31 2025 by rpki-client