Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
File: 3JDgruHswxBmy3RPin_u3vs_eTA.mft (raw, json)
Hash identifier: K4MGly8RAg86foVXZk6loLyynWDx6qhEraTuXQn4vNw=
Subject key identifier: 12:5C:7B:36:56:77:94:1F:D2:BE:4B:D1:A9:50:58:BF:D7:94:41:F7
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 019A16F3045E5BE5A2F6F94A0624BFADDCE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
Manifest number: 16FB
Signing time: Fri 24 Oct 2025 16:00:16 +0000
Manifest this update: Fri 24 Oct 2025 16:00:16 +0000
Manifest next update: Sat 25 Oct 2025 16:00:16 +0000
Files and hashes: 1: 27nlRHwxg0E9Q8sg08KsIM7uurM.roa (hash: S/euVGTNqJg3LcazblgCESHTj7tHb3XsTieuaVZKJ7c=)
2: 3JDgruHswxBmy3RPin_u3vs_eTA.crl (hash: 8t8h5tcONyjjVwvlThsnSKeX06SF27CHL+5Ujx1iSpk=)
3: cb_zDnKlQ9maV_mcPiyN2HwpRxo.roa (hash: rr7OeDKsSm5RUPgVy2VLBciOmsBRvc5YKTQcvs96n0U=)
4: ph2FFZ9AUAY5f8HkJbk_3g9Wk8w.roa (hash: dL+5O6eKdQJWgkq0JqtkXhyJzAf/MU7XQ0/GDtElRTc=)
5: qGOQ_yXUb9fqfdc0pjv8GkkFrgA.roa (hash: 833QRTQTY31+HWX8nRUFCr/VNiol8C4z2kqd75zyrgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:f3:04:5e:5b:e5:a2:f6:f9:4a:06:24:bf:ad:dc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Oct 24 16:00:16 2025 GMT
Not After : Oct 25 16:00:16 2025 GMT
Subject: CN=125c7b365677941fd2be4bd1a95058bfd79441f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:66:d7:0c:76:e8:45:df:13:00:69:ca:8a:
5d:0a:97:ea:26:0f:08:b0:d5:9d:f9:8b:27:c3:4e:
66:a7:b7:24:3f:38:a6:33:d5:81:6b:5f:23:85:ce:
eb:7d:7c:88:87:4e:90:5f:c7:48:a7:4d:86:96:32:
72:d3:3d:65:8f:52:9e:5c:e1:33:99:28:95:85:e1:
d1:7e:ea:3f:b3:49:1a:c6:e5:5c:5b:6a:9d:63:d0:
f3:b8:6a:24:1c:a6:de:aa:24:bc:88:cf:85:95:5d:
f1:9d:c2:09:e3:df:5a:1d:80:19:3f:3e:7e:7a:ad:
e3:de:28:7e:63:1c:bb:d9:b4:5b:6f:b4:3b:48:82:
31:2a:c8:b7:af:87:a1:15:06:d3:47:25:b9:73:7e:
eb:19:5d:34:15:21:58:51:5c:fc:f9:c7:4d:df:d3:
03:0e:35:44:1b:8a:c0:2d:c1:ac:1b:bd:78:96:47:
16:00:7b:fd:04:db:fd:8a:18:08:46:89:68:b3:75:
ea:e4:e9:9e:5a:90:58:01:d4:96:a8:5c:b6:83:52:
97:7f:b1:ea:e4:8f:45:02:4c:41:41:fe:74:60:39:
e1:eb:d9:93:2e:3a:32:d5:98:80:11:97:08:bd:7d:
b9:b5:cf:d3:12:d2:54:87:67:93:4d:10:cc:74:3e:
0c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5C:7B:36:56:77:94:1F:D2:BE:4B:D1:A9:50:58:BF:D7:94:41:F7
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:35:1b:f0:5e:aa:7f:58:39:83:f9:3c:7e:5b:12:5b:f1:6c:
f4:eb:88:db:e5:84:1e:fb:79:ac:99:06:b7:7f:6f:f6:50:6b:
a1:c0:70:7c:5e:cc:3f:32:b2:04:f5:39:41:99:42:13:af:f9:
0a:a8:cd:2d:1e:9a:25:b9:2b:0d:fe:cc:f0:4e:00:be:61:aa:
1c:22:bb:47:20:a1:6a:f1:a4:40:3f:75:6d:e2:9d:f5:ef:4c:
3f:91:0c:2f:bd:0e:d7:56:3d:e7:18:4c:5f:95:87:7a:0e:7e:
62:ff:b0:70:dc:f9:81:36:65:69:c3:a8:01:6c:b0:50:eb:af:
23:d6:7f:7b:c4:24:d9:f0:a1:b9:63:9a:44:20:1f:2d:79:89:
fe:0b:46:ba:c1:0f:d1:55:dd:ec:00:0f:3e:fc:aa:bf:ee:f6:
06:e3:77:d5:04:81:7a:3e:d9:f4:75:23:78:00:fb:49:30:20:
14:a9:3b:bc:54:01:b9:31:19:fe:15:50:ba:84:e0:6b:45:f1:
de:a7:6d:73:3d:77:61:e4:76:e7:a7:49:94:48:f6:31:05:f4:
de:63:fd:a8:b0:3a:aa:c1:b5:14:ba:cd:8b:d8:14:2c:d6:74:
ef:15:ef:71:d7:0b:62:9c:ee:aa:f0:7b:b8:e2:ce:d1:0b:e5:
d2:52:ef:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 18:57:09 2025 by rpki-client