Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier: ZLQ5SE4pqewEqyHd2BZyZOXGCErZP7maVSPisEaHyho=
Subject key identifier: AB:F0:9A:F0:1C:A8:14:45:6A:32:67:CC:D7:EC:DA:6B:D9:42:1E:00
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 0199C8D846EF704B06737CE0AC9A06CE9888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number: 16C6
Signing time: Thu 09 Oct 2025 12:00:41 +0000
Manifest this update: Thu 09 Oct 2025 12:00:41 +0000
Manifest next update: Fri 10 Oct 2025 12:00:41 +0000
Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: kqRklnS6qwdPw/da8DHzfym/5Yl1MCxyq0Snud4lccM=)
2: 5395RGU-O7_Y-Wk8o5ckF03TEl8.roa (hash: 2x9LkbbQVmDZR4+CDqZEC8HuaScYKr9cs6YHpuOZlvY=)
3: JRT-ehjK87EWSX2wN_VxdPNgZVU.roa (hash: FFbMq3Jl0t/JwkKVVNHldSFfVrz4m+b2CW8bGskb98A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:d8:46:ef:70:4b:06:73:7c:e0:ac:9a:06:ce:98:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Oct 9 12:00:41 2025 GMT
Not After : Oct 10 12:00:41 2025 GMT
Subject: CN=abf09af01ca814456a3267ccd7ecda6bd9421e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:f9:50:79:a6:7b:93:b9:eb:63:3a:65:4d:
d8:d1:a3:2e:a2:20:35:46:96:cc:67:09:91:bb:3a:
d2:ce:56:f3:9a:7f:17:9e:10:21:c7:f5:a8:93:98:
24:42:d8:8c:78:92:28:cc:12:34:dd:5b:15:c9:4f:
99:98:f5:b1:d1:fc:cd:9d:6e:39:7e:f1:48:ce:ee:
1d:4e:90:93:37:53:af:ec:6e:96:e5:de:cd:7f:f4:
6f:3e:b7:3e:5c:20:6d:1c:97:18:85:2b:98:b3:0d:
f7:a6:43:fc:6e:3c:22:78:11:48:c9:6d:a5:27:ea:
62:14:2d:50:92:17:2c:50:1d:b3:b9:ff:db:a7:f4:
f9:fb:1c:3a:a5:6d:9b:76:fd:fe:05:3d:aa:cf:fa:
1d:d6:72:87:3d:51:9e:0d:68:71:30:85:79:9e:c2:
ad:c9:4f:0b:08:e2:fc:24:28:ff:a6:1a:66:e9:53:
ab:18:70:bf:69:e3:de:e6:91:25:a2:67:a4:ff:45:
a5:f2:aa:fc:c0:58:89:53:8e:1c:5e:cb:46:00:63:
ed:92:3c:90:3d:b1:a8:b7:14:34:5c:7a:b1:96:25:
33:c9:37:82:08:67:33:a6:02:9f:c7:6f:c9:fc:49:
be:48:5e:af:53:e6:5a:d9:d2:42:e7:99:2b:2a:3e:
58:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F0:9A:F0:1C:A8:14:45:6A:32:67:CC:D7:EC:DA:6B:D9:42:1E:00
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:78:15:33:7e:96:d3:61:5f:23:38:88:34:f7:f9:b6:03:9b:
1b:5d:85:a2:43:6d:93:15:94:09:49:b8:19:03:d2:db:3d:f0:
f6:92:40:41:d8:eb:dc:1f:ce:95:f9:10:55:e0:e3:de:90:9c:
ea:0c:85:4f:2f:be:a7:e3:28:1d:8c:b4:ef:58:2a:3d:62:db:
36:39:94:80:f4:cf:dc:1d:ec:76:65:a4:85:5e:04:48:56:5e:
30:26:d0:c4:46:07:f2:51:21:05:2c:32:61:63:b7:56:53:ef:
86:6f:81:ca:61:0a:37:4e:3c:19:a0:92:26:36:88:8a:78:ce:
db:02:37:e5:9c:8e:63:8a:47:09:03:21:9a:f2:c8:46:ff:e6:
29:2d:ed:fd:8a:72:ce:c2:7d:10:c9:77:39:97:0b:46:23:2b:
c5:6e:ed:ec:61:be:55:b5:f2:05:af:7a:ac:92:40:1c:74:63:
13:44:34:a6:dc:2e:6b:30:0b:5e:99:a0:4f:3f:06:30:4c:32:
d7:a7:72:f9:bd:4a:66:6b:18:95:bd:9b:3b:e2:73:e6:83:86:
4a:22:93:da:54:67:22:5f:59:3d:6c:f4:89:00:61:a1:f6:7e:
e3:cf:d1:e1:45:ff:81:7c:ce:1d:c8:55:4d:d4:33:22:39:bc:
9e:88:67:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 15:21:50 2025 by rpki-client