Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier: Ab/5Nni6JeV3gvIRxtJAE0+4D0+V2dsme9DPDf9tixg=
Subject key identifier: 08:D4:0F:7E:3E:3D:AC:A5:BF:F1:C8:11:2E:C3:08:A4:B2:B0:F0:84
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial: 0199EDC169EDC9C8D5A8044A08A675956307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number: 04AB
Signing time: Thu 16 Oct 2025 16:01:39 +0000
Manifest this update: Thu 16 Oct 2025 16:01:39 +0000
Manifest next update: Fri 17 Oct 2025 16:01:39 +0000
Files and hashes: 1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: gt4yPTy1ipdjs2kxi0iNeblmctG88s8yiYJC9ceecd0=)
2: Opp8U8aeHzNwIE0mPBiUqooeCJQ.roa (hash: V/D3sQNgSw6lGL7igciFA6sJiWbs7FF9hEBFUMCcvFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Oct 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:c1:69:ed:c9:c8:d5:a8:04:4a:08:a6:75:95:63:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Validity
Not Before: Oct 16 16:01:39 2025 GMT
Not After : Oct 17 16:01:39 2025 GMT
Subject: CN=08d40f7e3e3daca5bff1c8112ec308a4b2b0f084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:70:55:f8:8d:d3:41:72:ad:e9:73:a1:31:66:
2b:79:f3:db:15:a9:3a:e1:9c:11:e2:bd:78:f2:cd:
ec:41:b0:42:c1:39:38:fa:60:04:2c:47:cf:df:ff:
23:f3:b1:2a:d3:53:9c:8a:0d:46:b7:c3:e5:23:28:
a8:71:b9:3e:ba:b0:8d:dc:69:c4:29:79:bd:df:b1:
f3:4d:92:0b:3f:65:fe:8c:a6:6c:0e:52:f2:b5:8a:
94:bb:c6:a3:3f:af:1e:e2:41:ea:bd:cc:82:c8:94:
a6:ea:91:76:50:0b:04:c2:86:35:7d:12:96:f9:fe:
e8:f3:27:3c:61:1f:35:a6:3c:b1:9e:9c:aa:e2:fc:
6d:8b:01:0d:41:ed:c3:e6:c6:ce:59:3f:fa:1f:b3:
8e:7d:cf:08:cd:f1:dc:ad:38:3f:9a:81:36:e7:bb:
9e:e9:e4:37:79:e3:28:ab:18:ce:94:32:2b:f3:f8:
b0:a4:27:ad:fe:43:14:68:7d:2c:0b:76:2e:19:be:
e1:2c:cb:ac:ca:00:93:85:d2:8b:d2:4f:cd:c3:9f:
ab:22:a9:35:32:97:49:32:03:86:4d:a3:cf:99:c8:
19:6e:6e:88:a3:fb:ab:a9:06:20:7f:32:e3:54:12:
5b:47:00:20:0b:bc:37:4c:14:5a:60:1a:b4:c9:00:
ce:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D4:0F:7E:3E:3D:AC:A5:BF:F1:C8:11:2E:C3:08:A4:B2:B0:F0:84
X509v3 Authority Key Identifier:
keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:06:0b:32:34:8e:56:1b:5e:8d:98:71:5e:85:4a:6e:43:1a:
fe:4b:52:b5:f9:67:b8:82:75:1e:98:bc:a0:03:46:15:9b:45:
82:9c:68:54:f0:e4:7b:3e:ba:d1:32:98:a7:b9:26:e8:47:64:
93:ae:f3:df:cc:cf:d7:71:2e:35:06:37:4b:1a:93:8d:7b:38:
09:c8:d9:f9:29:67:a4:a1:91:d0:f1:d5:f1:10:16:2f:4d:5c:
44:db:cf:e1:5b:7d:44:de:86:dd:d9:44:10:16:49:f3:c4:87:
41:a1:4c:9f:b5:0a:75:9d:30:81:32:02:ce:f4:a1:b9:76:54:
c1:5d:99:c9:a9:25:18:02:10:d1:07:e2:a5:9a:f4:a2:e7:58:
20:bf:fd:ed:28:2e:76:72:1c:f2:a1:b3:9e:74:53:ac:c0:1e:
cd:95:72:73:9a:72:68:7a:53:76:45:88:cd:b4:1f:8e:40:1e:
62:b3:c9:c2:66:5b:56:fe:0c:5a:c2:52:b4:ba:26:32:df:aa:
f3:5e:85:18:a6:88:69:e4:72:ee:e7:8a:99:11:06:fa:83:e1:
af:3b:f4:c9:0b:76:02:4a:69:5a:59:07:bc:4c:b8:04:04:47:
a1:c2:f3:c6:fe:99:02:e3:59:fa:00:63:9b:c5:63:ea:97:76:
8c:37:97:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 17:45:35 2025 by rpki-client