Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: BQhiOTZSWD2iq/Xo3ubtoe54LK3hb8LgpIleaZhu1EM=
Subject key identifier: 91:52:C2:42:B7:1C:CA:89:B6:F9:EA:80:FA:46:22:3D:5B:05:37:DB
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 0199C5328934A0FA2BA381662755B2AE6149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 16C6
Signing time: Wed 08 Oct 2025 19:00:47 +0000
Manifest this update: Wed 08 Oct 2025 19:00:47 +0000
Manifest next update: Thu 09 Oct 2025 19:00:47 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: KxUXoVikX+zBao+4xULX3dTohWvcUUsFFC0eMBFsNIY=)
2: 9euEZiQBZa0KQy87mhddaAGMyJs.roa (hash: SlkEYhw31htGhY3rwyORB+KNW056wx1mf03bV0slrXo=)
3: PbQAq4tBfBzJf67NNR29Pj0FkmA.roa (hash: 68zQoRFiAUVZyRagTzVHGcIdd/jEkcY9EEgWfXz5qFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:32:89:34:a0:fa:2b:a3:81:66:27:55:b2:ae:61:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Oct 8 19:00:47 2025 GMT
Not After : Oct 9 19:00:47 2025 GMT
Subject: CN=9152c242b71cca89b6f9ea80fa46223d5b0537db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:6a:5d:1d:34:2d:ea:53:1c:33:21:61:31:
f8:f9:f4:2f:49:e2:70:f4:75:b6:2b:51:98:3e:64:
d6:ee:f0:75:d6:eb:3e:c2:0c:94:48:20:42:2f:ba:
71:d2:a8:5c:45:c8:4c:8c:da:fd:45:6e:c6:3a:e1:
bb:af:a7:b8:1e:a5:d8:27:ff:3e:e4:9f:07:82:36:
b2:5f:a9:d8:e7:e6:94:74:26:20:93:ae:39:f7:9b:
2b:90:01:c1:a1:dc:66:7d:71:2e:94:0d:7f:30:0a:
d8:71:41:4f:5e:c0:ce:df:40:fe:bd:5b:f6:96:8a:
11:54:1c:a4:f0:ba:1c:51:ae:60:56:0d:d0:dd:61:
cb:8b:e5:85:e3:40:3d:c6:85:e7:60:b1:ef:7a:70:
3f:46:c4:e2:15:ba:71:c0:0b:65:d6:26:90:a5:0e:
2e:71:f5:4e:c1:47:80:a9:93:2e:7e:e0:fd:3b:f7:
9d:9a:ba:73:12:3f:d9:f5:bf:fc:d6:d9:e4:29:cf:
8d:6c:39:f3:d5:2c:58:3b:b8:49:7e:6e:c9:21:00:
d9:81:24:74:73:ab:ef:d3:2f:6f:a3:1e:17:9d:04:
dd:3f:be:1d:57:7a:ac:33:d4:7c:7a:74:55:66:36:
87:f2:db:1b:a9:37:88:8c:37:2f:49:eb:af:a1:4d:
4c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:52:C2:42:B7:1C:CA:89:B6:F9:EA:80:FA:46:22:3D:5B:05:37:DB
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:87:40:26:4e:07:fb:f6:6d:a4:41:cc:54:20:9e:0e:8c:6f:
c5:f6:15:c0:8d:27:f5:93:cd:79:82:69:1f:c3:71:b1:b0:57:
22:3f:2b:6d:63:07:ea:12:2a:19:80:e1:e4:cf:ef:0d:8d:8a:
1f:e9:79:ba:d8:1a:9c:47:3c:4f:92:b1:e1:b7:53:77:23:b7:
45:2d:72:6e:05:b7:9e:11:69:02:cd:47:16:79:b6:38:b7:14:
a9:90:fb:c0:ad:c7:e4:91:8c:62:1b:4d:5a:b3:63:7f:04:e9:
ec:cf:91:28:be:5a:b9:a7:15:5a:6f:02:38:b4:45:0c:aa:35:
cc:c0:4d:da:09:36:22:87:45:47:bc:0e:52:0c:88:98:6a:2a:
6b:cd:99:57:2c:d0:c8:03:b5:7d:67:0e:65:cf:d4:f9:9d:86:
39:82:3b:a5:64:9c:65:79:b2:8f:4f:02:52:c3:13:77:3d:95:
97:9f:35:13:c3:53:2b:79:5c:31:f8:30:07:99:b2:d1:03:dd:
b1:02:29:8b:13:0c:83:87:3b:69:0b:9c:a9:a4:32:7f:7d:10:
33:8f:dd:1b:dd:5c:7f:cf:0d:76:a9:9d:ce:89:ad:f2:23:37:
8f:89:81:db:ec:a2:97:53:f1:07:93:5c:c3:a3:f8:6c:be:41:
b9:5c:1f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:52:49 2025 by rpki-client