Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
File: 3MIAShrwMLqZ_PRR872I78U4Rqk.mft (raw, json)
Hash identifier: ToK1G74gxMZ84BZ5QQM3NYF+8u6Na/MxH1fGhhvDegc=
Subject key identifier: E3:47:2B:18:AA:E8:0E:F9:0C:9D:30:3A:AB:CE:38:C3:17:60:16:DD
Authority key identifier: DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
Certificate issuer: /CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Certificate serial: 0199D1369F1791A0F28E2F3E8A7FF6E2FB10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
Manifest number: 16CC
Signing time: Sat 11 Oct 2025 03:00:41 +0000
Manifest this update: Sat 11 Oct 2025 03:00:41 +0000
Manifest next update: Sun 12 Oct 2025 03:00:41 +0000
Files and hashes: 1: 3MIAShrwMLqZ_PRR872I78U4Rqk.crl (hash: crosa3zqNJ59Ln7qnk+gOlV5/8Y1r3LwR4jCOObJeCs=)
2: AL-L8asVgI-s4USXW1Jxulz_8Sg.roa (hash: UF0FyApaz9L8VccFK4e4NgnphNtboD57IyF8hP0doDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d1:36:9f:17:91:a0:f2:8e:2f:3e:8a:7f:f6:e2:fb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Validity
Not Before: Oct 11 03:00:41 2025 GMT
Not After : Oct 12 03:00:41 2025 GMT
Subject: CN=e3472b18aae80ef90c9d303aabce38c3176016dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:d4:20:bb:5e:8d:32:40:f0:a1:ac:35:b1:
bb:87:1c:de:0d:8a:a4:c3:6b:0c:6f:b6:f1:fa:03:
01:d4:88:3f:4a:2c:28:0b:2e:16:f9:7a:7d:78:89:
94:31:6c:be:a7:ca:6f:90:24:c3:8a:4a:c0:91:9f:
cd:45:8c:8d:e5:16:1a:3a:d8:75:87:9b:12:a5:7c:
af:9b:84:86:94:9b:fa:e0:da:c5:53:11:dc:bd:1e:
1f:bd:ab:73:70:2f:12:8a:3b:37:34:21:dd:71:5f:
cd:60:fe:7e:54:e6:ae:a9:ec:3e:2d:6c:80:a1:97:
62:fa:a1:93:04:0d:6c:b3:7d:81:4a:86:c5:4f:97:
b3:62:c0:34:57:6b:01:d9:25:f7:39:0a:f6:5a:52:
e9:52:a6:27:b2:31:fb:be:e7:f3:f3:b9:53:e6:fb:
a0:db:7a:c7:7a:a1:61:3c:d1:91:d4:a2:b7:fb:f9:
fd:b5:ba:55:2e:8e:47:db:7e:13:7c:e0:b7:8a:23:
5c:3d:e7:c6:45:71:a3:82:40:4b:40:31:e8:d0:91:
3e:b6:42:46:85:ce:77:12:bf:8b:c1:6e:5f:7b:7d:
87:0c:67:07:50:c2:85:fa:c8:f0:6a:1d:04:4e:26:
db:d7:a2:dc:f0:c9:cd:6a:d0:3c:ca:b3:00:fb:5a:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:47:2B:18:AA:E8:0E:F9:0C:9D:30:3A:AB:CE:38:C3:17:60:16:DD
X509v3 Authority Key Identifier:
keyid:DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:cb:f7:cf:ee:c8:99:46:74:ae:59:80:a0:99:df:94:4d:e5:
43:1f:00:21:58:19:c8:90:2e:41:b6:21:93:9b:53:94:49:3c:
bc:9d:f5:f7:30:b2:9e:46:34:5d:aa:5f:39:c4:70:2b:a3:ac:
5d:12:73:31:ad:da:16:35:db:50:87:24:ed:dd:ff:72:4a:08:
00:4f:35:27:0e:16:50:a1:c0:d1:53:aa:19:70:1f:da:44:0e:
1b:68:ca:03:78:21:76:eb:30:ed:13:60:f7:1f:bf:ae:29:29:
6d:0f:d6:e0:db:bc:b9:3f:db:f7:4f:0e:3b:6e:59:10:1b:8d:
57:ca:32:c7:30:4f:2f:4f:95:e3:c2:a9:c7:93:5e:41:03:2d:
30:60:04:35:06:b5:ff:dc:08:7b:55:66:61:d8:95:16:cf:49:
15:6f:fa:24:8e:b7:fc:8f:95:bc:83:8a:fa:0d:7f:b5:ff:3e:
01:74:84:7b:5c:07:9e:ef:78:f1:c5:07:94:68:f0:9c:24:1d:
a2:f1:a7:bf:b0:c9:e5:78:e4:f1:ae:87:0d:54:be:71:8a:29:
4e:be:27:b5:61:e8:c1:73:c3:92:e7:41:58:a8:18:b3:64:c2:
cc:33:d5:56:31:4a:c6:3c:05:c1:b4:b6:51:91:98:16:cf:bd:
73:7b:99:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:53:18 2025 by rpki-client