Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
File: 3BCJyUK2gDNoO03VBsDDb3S-DqM.mft (raw, json)
Hash identifier: r2k2YHuyvKoD/XzLuGQsnceDiIM9QOOXLwTIyjbMqgQ=
Subject key identifier: 95:19:9C:59:55:14:CE:7D:2B:38:E2:A2:10:07:94:BF:B2:64:7D:43
Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Certificate serial: 019A1D9A5D6F357A0849A26EEC1172B7DAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
Manifest number: 16F5
Signing time: Sat 25 Oct 2025 23:00:46 +0000
Manifest this update: Sat 25 Oct 2025 23:00:46 +0000
Manifest next update: Sun 26 Oct 2025 23:00:46 +0000
Files and hashes: 1: 3BCJyUK2gDNoO03VBsDDb3S-DqM.crl (hash: 7coV84mNmZi84gPDxbybkyZ4xKn7uTWAb3ZF6M83LsU=)
2: 57HaC7393494-Kydk1JdAp5sP5I.roa (hash: MC5zLYnL7jsECqxeDtP30qM0sWScy6N43eUhfx207aw=)
3: m5gUSNnJ2hKaiWTW0ODmWqqDw-s.roa (hash: EE2S7AYIPyyJZqEsdRi77q99LaNKBqMzcLpUq4bS+A8=)
4: nX1l9uEaP3hKft0f6nr66330FaY.roa (hash: Ify3evSlWibc6XFuSTIlXp6BEPgQD/cUtILAv8sgqKU=)
5: rYOTmI6zBWy0_qXug-7vEbI5-NE.roa (hash: WCnXAEMnH2mCY9gWHiuKlZ1HO6eQUoArgriFfc+fAVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:9a:5d:6f:35:7a:08:49:a2:6e:ec:11:72:b7:da:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Validity
Not Before: Oct 25 23:00:46 2025 GMT
Not After : Oct 26 23:00:46 2025 GMT
Subject: CN=95199c595514ce7d2b38e2a2100794bfb2647d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:58:e1:4b:ab:f1:a5:9e:2c:59:72:d5:03:
e7:79:d1:b4:9e:dc:81:08:66:aa:55:39:1e:7e:49:
07:4e:02:75:a2:70:d0:2d:41:15:11:b0:bc:f8:fe:
6f:9d:f0:96:44:b6:de:07:4f:f0:b2:94:c4:c8:e5:
98:6a:3d:95:a5:e0:c9:5c:6f:1d:ba:63:ef:7a:cf:
48:ba:79:c7:33:9f:36:97:18:33:d8:80:d5:36:1f:
b4:83:94:fe:64:53:4e:f8:42:4d:3d:0b:d1:10:a7:
43:42:7d:98:2f:c9:3c:28:86:5d:5a:8c:66:b2:dc:
06:82:e9:1a:39:a8:e9:e6:dd:4e:dc:2c:cd:f4:05:
7b:d1:8b:aa:bc:97:08:86:b3:ba:c6:09:0e:3a:5d:
c4:51:36:5c:59:b8:b1:67:f7:61:1e:96:d5:9b:c6:
53:25:41:b9:20:b5:e6:13:1c:43:9c:05:15:58:35:
0d:62:fa:38:94:aa:30:cf:7a:c0:71:c7:85:d8:6a:
65:25:15:ce:de:f9:0b:42:1c:7f:2a:89:b6:8f:47:
22:2a:4c:88:c3:de:a4:c8:7a:62:21:3b:c5:fd:ec:
4b:23:a9:0c:17:f7:fc:83:a0:d4:53:04:e8:45:e4:
1d:59:cb:0f:ef:c8:42:bf:1d:7a:84:53:a9:76:df:
dd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:19:9C:59:55:14:CE:7D:2B:38:E2:A2:10:07:94:BF:B2:64:7D:43
X509v3 Authority Key Identifier:
keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:4f:f9:6e:e7:a2:a5:d8:6a:ed:ae:eb:c8:bb:ca:47:a9:98:
70:f2:fb:9a:84:51:e7:51:c2:f7:ca:50:59:73:be:66:0c:c0:
fc:10:02:40:64:b1:0d:ba:b7:dd:78:5a:b4:f2:7e:30:b5:3b:
74:53:7e:76:1b:5b:6d:7a:ef:b4:6f:f3:0a:61:cf:da:d7:b4:
42:93:4f:1b:b7:a6:c6:c2:d8:28:21:e4:2a:46:54:9d:d2:95:
a6:1d:a5:1e:aa:4c:98:be:4c:0d:d5:cd:f9:32:d5:83:b4:5b:
62:84:e5:e9:0c:d1:81:51:f9:2e:e9:f0:72:93:12:a8:2a:f7:
5e:e6:e8:6e:f6:8b:5b:05:39:12:d3:b9:a4:6c:75:f1:b2:9d:
1b:e2:1d:b4:d5:db:3d:f0:9d:44:57:fe:37:5c:67:65:52:7f:
30:26:b5:e0:46:21:59:69:03:29:6f:87:8c:98:c7:71:9f:6d:
f6:04:44:ad:e1:b7:66:77:9a:62:7a:e3:22:2e:90:25:32:64:
3a:4e:e9:15:91:fc:f0:53:9f:1b:04:aa:62:b5:84:8b:60:a1:
05:9f:d3:5e:cb:a3:64:8a:aa:02:32:06:0c:df:49:87:1c:10:
94:ba:a7:40:d0:97:9b:d5:f7:bb:4c:93:4d:42:3a:68:b0:76:
cb:c6:85:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:58:59 2025 by rpki-client