Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier: M81ANe0tb9W75/0BfMVJyDB+NI09EKGDzcrbbpDhT3Q=
Subject key identifier: 65:60:28:20:5B:35:5C:22:6A:81:C4:20:6C:2F:41:B9:10:9B:FD:FF
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 019A1B3E11F41D2F8749187A93178C0BBB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number: 1686
Signing time: Sat 25 Oct 2025 12:00:43 +0000
Manifest this update: Sat 25 Oct 2025 12:00:43 +0000
Manifest next update: Sun 26 Oct 2025 12:00:43 +0000
Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: 3XqrNlS2gsZ6ByEb2Ex/vnn3QRl2EX3S+I03WM6c6yI=)
2: KC65iLduV38Y-_4YeZcOkvub1x0.roa (hash: 59wDbBZd77QyRnr9wiaIVyjbp4l+GRhLfxwyuRW0y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3e:11:f4:1d:2f:87:49:18:7a:93:17:8c:0b:bb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Oct 25 12:00:43 2025 GMT
Not After : Oct 26 12:00:43 2025 GMT
Subject: CN=656028205b355c226a81c4206c2f41b9109bfdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:13:45:b4:37:46:2d:a7:c3:a0:54:b8:4c:
f4:70:2b:ec:da:92:f6:5c:f0:88:1a:0f:58:d8:97:
a0:0b:cd:c7:43:b9:ed:6f:6a:04:8e:c0:63:c6:01:
d8:bd:8b:5d:d3:63:80:ca:56:de:06:20:71:6f:21:
16:60:57:b7:a2:eb:2c:a3:1e:88:d1:6e:99:ef:5e:
10:19:b2:73:b2:15:ab:6f:b6:60:49:32:24:f9:82:
28:72:a0:f0:9b:9e:a4:42:12:9a:43:a3:62:54:a1:
da:14:3a:c9:ed:ec:e2:f3:15:cc:5f:43:82:e6:3d:
23:b6:54:52:ed:a6:73:f8:b3:b1:3a:01:0c:5d:37:
ea:df:a5:e0:30:fe:c1:e6:de:4c:fb:da:79:80:b0:
77:65:b4:5c:38:4a:9f:cb:4a:39:1d:38:57:a2:12:
4b:8c:1a:4b:29:38:21:7f:cf:da:e6:0e:12:20:88:
ae:b4:16:52:57:2b:42:8a:bc:8a:f7:6f:07:d9:91:
f6:55:dd:6b:cb:49:d2:17:bb:cb:30:78:bd:77:c1:
d9:53:74:94:a0:5a:b6:be:ca:99:e9:d4:f4:73:97:
68:f2:f1:23:2f:f3:ac:a8:d4:a3:44:5d:c7:2f:ef:
31:1d:db:1f:72:75:13:6b:59:7d:30:ac:08:bb:2f:
c3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:60:28:20:5B:35:5C:22:6A:81:C4:20:6C:2F:41:B9:10:9B:FD:FF
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d3:7f:af:84:a0:88:8c:c4:07:f3:ae:94:95:da:ca:9b:3e:
fa:20:bf:4b:9a:89:31:5c:e8:72:71:cd:9d:cb:bb:66:d1:87:
5a:0d:0b:81:d9:90:d3:a9:f9:50:a4:c7:a7:9e:57:3e:ad:3f:
1c:c0:4e:26:4d:07:9b:62:9f:f2:98:07:71:71:80:d5:f2:28:
cf:7f:52:84:a0:63:d0:7f:47:f8:f1:14:8a:2b:36:10:a6:e5:
4b:3c:55:3e:d7:6d:5e:0f:12:76:dd:1f:be:13:35:20:38:c2:
8d:37:0f:bd:46:6a:4b:ef:85:f4:17:05:a6:b2:d9:d9:8a:5c:
f0:1a:7e:82:10:a4:f1:35:17:54:aa:24:a7:13:d8:23:6d:47:
43:38:ed:26:c7:77:81:b2:a4:79:4e:2a:4f:d6:e4:39:89:11:
28:e3:76:43:c0:20:82:2c:a3:17:0d:ea:17:7e:e9:11:e1:03:
03:fc:75:36:00:a5:9f:ca:c6:ae:ae:0c:1c:4b:f3:b4:0a:d5:
4b:68:23:49:40:84:e1:f2:43:17:ba:1e:bf:22:1b:77:d8:c4:
70:2f:f4:60:c4:88:16:85:7a:29:94:92:44:b4:cd:2e:0e:46:
27:1f:e5:30:45:c6:b4:7f:bd:22:fb:7d:b5:10:e6:f3:ea:88:
2d:7e:74:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:36:02 2025 by rpki-client