Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json)
Hash identifier: 4UmywSJHt37K4N1glCBfPwcoIYbL8KBWkfCREDJ0yw8=
Subject key identifier: A3:5C:4D:A4:ED:11:25:2D:3D:09:EB:CF:A6:9F:53:13:DE:DC:EE:E5
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial: 019A270AE6587373937828D2A544F4460CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
Manifest number: 168B
Signing time: Mon 27 Oct 2025 19:00:16 +0000
Manifest this update: Mon 27 Oct 2025 19:00:16 +0000
Manifest next update: Tue 28 Oct 2025 19:00:16 +0000
Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: t8elOTu9C4HxVczYtYZCdcK5q3y4A+EMImdvwZDG6HI=)
2: 8weSLoMuWV3usouK6kCYa4DYS08.roa (hash: 7ICkBxIDMmpq8Ld9uPPV7RzwfZWRVUlPiTj2akXnPTs=)
3: g0yMZ7il9emhd1JLy44dXjFFySY.roa (hash: upEcQV7OguWVHmW7d8FqJOmDo+LgE3TCsH4ZkA5EIG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:0a:e6:58:73:73:93:78:28:d2:a5:44:f4:46:0c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
Validity
Not Before: Oct 27 19:00:16 2025 GMT
Not After : Oct 28 19:00:16 2025 GMT
Subject: CN=a35c4da4ed11252d3d09ebcfa69f5313dedceee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:f0:8b:de:48:ca:79:11:4e:bf:cc:3a:f4:
55:76:43:72:89:a9:bb:0e:ae:c1:ba:d4:13:5a:78:
5f:27:3d:10:22:db:eb:cd:42:87:8c:cb:de:1d:3f:
18:98:d9:fc:3f:b7:5e:95:3a:62:52:b2:0c:a5:0a:
9b:9e:76:cb:ac:3d:c4:8a:e5:55:07:14:5a:8c:27:
dd:a3:01:8f:c0:57:0a:4e:ea:88:99:4e:98:01:f7:
e0:6d:ea:9e:54:cb:a9:53:9c:85:c6:e8:4c:03:90:
e4:3d:6f:25:85:88:38:91:cb:fe:e2:10:4b:8a:55:
e3:41:53:b2:4f:e6:5d:15:ff:bb:42:ab:7d:c0:3f:
87:86:35:7f:56:45:60:30:14:c8:e3:5e:b6:7e:e5:
df:e8:ed:c2:7d:94:f1:a3:d3:bc:76:6b:d6:f9:90:
b3:a1:ee:d9:d0:01:8e:ef:71:a1:35:b9:d4:98:46:
ce:c8:00:9b:50:bb:08:5b:11:2d:80:f3:4a:c4:6a:
53:a3:7c:fb:bd:c8:28:48:a6:ea:82:0f:01:ac:24:
bb:c3:f9:f2:96:c4:89:28:bd:40:31:a1:04:a2:f0:
6f:f9:42:15:71:06:31:29:93:e6:e8:ee:c1:40:ef:
3c:ac:67:4d:3a:ca:2d:0e:3e:9d:aa:a2:2f:77:57:
4e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5C:4D:A4:ED:11:25:2D:3D:09:EB:CF:A6:9F:53:13:DE:DC:EE:E5
X509v3 Authority Key Identifier:
keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4e:41:8b:e2:45:66:c8:2e:d3:c3:59:6d:45:0f:a0:f0:c8:
42:94:23:16:a7:fb:06:43:29:da:f9:1d:56:5d:10:ab:5d:0a:
37:3a:f3:96:a0:bb:80:15:0d:c1:e1:54:1b:59:0a:bc:83:5f:
63:8f:7e:02:1a:d1:c3:54:35:1d:62:4a:58:ae:9f:c2:24:41:
bc:bf:6e:cf:64:dc:88:54:94:f9:55:08:48:97:c9:58:5c:c2:
d5:de:ce:80:79:1f:b4:99:61:79:53:34:57:6b:cd:02:27:f4:
0c:4b:94:ba:38:44:3b:26:57:ea:0f:45:dc:2b:af:c6:a5:c8:
f2:24:24:64:83:f6:ad:b3:6b:2d:2a:97:73:32:9d:2e:4a:1e:
c9:0d:d1:f1:da:6f:3e:31:b7:2f:0e:86:1f:e2:e9:1e:62:58:
9e:cb:b9:af:9a:25:af:e5:50:dc:c9:49:e1:6b:cc:31:c5:60:
d4:6b:a9:37:e3:40:2f:dd:93:86:0e:72:ee:d2:3d:5e:f3:a1:
38:44:9f:32:e0:9e:6c:7e:06:74:5f:5d:35:44:30:58:fb:89:
f2:67:9b:b2:ed:4a:fc:3d:64:7d:1e:96:db:c0:27:91:61:64:
0b:10:2b:34:e1:ec:4c:6d:7f:13:90:f3:59:9a:4a:ee:77:04:
15:78:49:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:46:46 2025 by rpki-client