Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
File: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft (raw, json)
Hash identifier: k/wYSmnSscOd3V6f/zIJ8E7pOLpmCFjO1mQFcM2hC/Q=
Subject key identifier: 5F:F0:7A:12:5F:B0:1A:60:ED:9A:50:51:D2:5F:93:B8:53:46:C3:71
Authority key identifier: DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
Certificate issuer: /CN=dc327af32a98492757b200ea040db24ec3136592
Certificate serial: 0199C42047FEE6E0F51741CFA73784A2AAD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
Manifest number: 04A1
Signing time: Wed 08 Oct 2025 14:01:13 +0000
Manifest this update: Wed 08 Oct 2025 14:01:13 +0000
Manifest next update: Thu 09 Oct 2025 14:01:13 +0000
Files and hashes: 1: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl (hash: daIavgvMcsM/tNLk8Y0kfdq27GxEsctkt0f8MwMoe4g=)
2: 8W-Z7iZTKA-3rkNjiAd5VURXMsw.roa (hash: 2BY/rA9giuFltjXSROUw0wjIihHos+N8ZqL5OdXbUVw=)
3: SiGDnp8oSt95ArckPVGAAWtJUNs.roa (hash: j9ZTEJfSb12eUtJGUY9GVfUETUmyTkhHBnRZ+wXplM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:20:47:fe:e6:e0:f5:17:41:cf:a7:37:84:a2:aa:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc327af32a98492757b200ea040db24ec3136592
Validity
Not Before: Oct 8 14:01:13 2025 GMT
Not After : Oct 9 14:01:13 2025 GMT
Subject: CN=5ff07a125fb01a60ed9a5051d25f93b85346c371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:f0:f9:3a:e9:85:f2:c6:ca:ab:4c:04:8c:
1c:49:a7:24:ba:f1:52:63:66:b1:4e:d6:98:e3:7b:
cd:9a:0e:f1:9f:8c:cd:06:99:73:77:4e:28:64:77:
34:c9:5a:9b:75:87:83:50:a6:a9:a7:1a:3f:cd:9a:
ce:7c:0c:0a:81:47:3e:aa:6d:06:4d:56:99:ab:5d:
3d:c0:87:93:37:e3:cf:9d:b2:55:9a:43:bd:06:ab:
49:60:80:eb:cc:64:44:10:8e:b9:2e:93:c1:81:cd:
54:89:73:6f:cf:40:57:f8:75:b4:3e:07:e9:09:3a:
e5:a2:f2:95:87:27:24:46:04:f7:2a:3c:d9:2e:ee:
af:99:6f:ba:d5:e9:43:d9:08:44:90:52:7d:93:54:
dc:28:df:7a:a4:d4:90:6f:1b:98:27:e4:3e:0a:a1:
a6:0d:0f:52:be:e2:56:55:04:02:db:51:ae:31:f7:
fd:67:33:d7:99:37:ed:90:c4:d4:da:6c:2e:74:0a:
1b:63:58:91:20:82:7b:2b:93:63:bd:02:15:58:ce:
4e:cb:f2:58:98:3f:df:08:dc:c4:bf:b3:6a:8b:e8:
d5:1a:83:f7:6c:24:00:03:c0:24:3f:ff:39:5b:bf:
af:25:ef:ef:bc:35:8a:99:3a:f0:d1:ce:84:75:35:
60:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F0:7A:12:5F:B0:1A:60:ED:9A:50:51:D2:5F:93:B8:53:46:C3:71
X509v3 Authority Key Identifier:
keyid:DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a7:32:c5:ac:70:d1:9b:5a:e0:93:56:fc:9e:e1:26:26:77:
f9:68:4d:d7:0f:37:05:f7:a0:77:eb:ec:b5:ad:af:13:d6:f9:
f7:4a:75:64:fc:10:b9:7c:3a:61:da:a4:e9:0c:30:52:3b:cd:
ad:97:98:f9:47:ee:8f:ba:4d:6d:d0:27:49:66:2d:e4:70:e3:
1f:4e:a5:51:24:59:31:da:f3:2e:be:ab:f8:b6:ce:95:39:d3:
e2:7c:62:5f:7a:19:6f:77:fe:48:64:16:6e:a4:a1:1e:1a:36:
fa:e9:6b:c5:c8:7a:ab:d3:16:30:bc:6a:c1:7a:ad:8e:d1:ce:
18:9b:fa:52:32:e3:83:51:ce:7d:18:8c:7c:86:b3:c4:46:a3:
72:ad:3e:47:c2:3e:b9:48:48:6a:0b:b0:dc:9e:7c:63:b2:d8:
39:18:5f:39:32:0b:19:6e:29:24:d0:8e:c3:b2:cf:e8:23:3e:
5c:1a:e4:b2:8b:f4:92:3c:d6:ad:fb:72:e2:d8:08:1b:85:01:
77:af:fd:19:e8:f8:1c:df:03:40:1e:a7:e1:5a:69:86:86:8a:
c0:ca:0e:19:ba:e8:62:e1:60:48:be:f5:60:ce:60:f0:44:dd:
c7:83:c1:e5:db:d4:e5:1e:79:86:80:0e:02:98:74:50:67:17:
20:5e:a4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:24 2025 by rpki-client