Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
File: II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json)
Hash identifier: tPQOlZmouwZLMxHgEGkfiBmuxE13BYD/5vBk9Mwb8y0=
Subject key identifier: 36:AC:88:2B:B6:06:FE:0A:7F:1A:5E:2B:5F:E0:D3:01:38:5B:36:87
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial: 019A198652CC4BF76A6E5EF95FC3AF164B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 04:00:24 +0000
Manifest this update: Sat 25 Oct 2025 04:00:24 +0000
Manifest next update: Sun 26 Oct 2025 04:00:24 +0000
Files and hashes: 1: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: 64cdC/TXcrBinTaCBuLLh4IKQFkmnAW+VyuGwpMv9aw=)
2: Sv8c63xNahZnEUX6sxkZS1Ry2Mw.roa (hash: jrXo/rmKfJlmke1E58p0Fv3ALUTTjd9LLG6tbA+jiaw=)
3: V04OCx0o1Bg0TgD8MO6kNsFMhog.roa (hash: 3a02UAIxWYHpz8tUKE7mHvONTRM/Wnqwu/RQszMGhpw=)
4: js9oNFtAP6uoXkguET2ifOtGxFk.roa (hash: xlI8bBSGf/iOY2KLlBGfTCvLGclFsfTElrxGe6FfxvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:86:52:cc:4b:f7:6a:6e:5e:f9:5f:c3:af:16:4b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Validity
Not Before: Oct 25 04:00:24 2025 GMT
Not After : Oct 26 04:00:24 2025 GMT
Subject: CN=36ac882bb606fe0a7f1a5e2b5fe0d301385b3687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:36:cb:11:e9:c1:67:9e:ef:64:53:f6:9c:
62:0f:a3:06:7b:5f:33:fd:8a:23:a0:7b:f7:e6:a9:
97:b7:07:eb:d7:b9:26:b8:bf:d8:b8:17:83:7e:a7:
6c:08:4a:79:e8:0e:23:5f:65:f7:79:5b:0e:41:1d:
a0:33:24:ca:0e:cf:da:8f:ec:8f:51:cf:44:87:c6:
6d:07:b4:93:86:24:b5:d0:3a:b2:95:80:9b:ab:1a:
c2:2e:7f:db:0a:0b:a8:c4:96:b7:b4:0c:e0:49:91:
a7:9a:f9:e7:a2:de:e7:4f:5a:ee:8f:9d:b5:b6:9a:
18:fb:c4:c5:26:84:11:ba:ea:9b:0a:19:ff:eb:a0:
ec:39:b8:47:d2:a4:26:f5:a6:a5:7c:12:ec:70:f9:
17:bc:6b:fc:6b:5e:7d:4f:14:5d:20:52:77:cf:41:
a0:ea:4d:6a:62:48:d2:33:76:f1:0a:01:38:8f:f4:
f1:8c:c2:9f:52:df:11:5b:b2:00:5d:be:be:c0:d5:
00:32:88:bd:e3:c1:b8:20:94:dd:42:ee:33:75:17:
6b:a6:3f:fd:0b:c0:8d:b1:b2:c2:d7:08:30:77:dd:
47:56:3c:69:ce:ad:36:6c:5f:d0:85:53:1c:75:9e:
89:ac:d5:26:89:c7:6d:59:42:54:b1:69:74:8a:c8:
42:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AC:88:2B:B6:06:FE:0A:7F:1A:5E:2B:5F:E0:D3:01:38:5B:36:87
X509v3 Authority Key Identifier:
keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fd:30:c3:d9:76:c7:69:34:dd:9f:3f:92:de:66:fe:07:ad:
f5:6e:e5:85:ff:02:ef:fe:de:75:a3:0d:65:a3:f4:c1:e2:50:
9c:9a:60:86:91:98:b0:46:87:74:bb:52:95:63:c0:31:43:e8:
ec:88:0b:ab:37:d9:0d:4b:a2:17:f8:fc:33:9c:0c:57:19:d4:
77:43:d9:8e:4a:cb:02:b3:98:37:67:a4:71:68:94:ff:67:f4:
89:28:2a:88:8f:d0:22:7b:82:c0:de:0f:9a:14:d1:90:c0:c2:
20:83:67:ed:3e:19:0d:bb:48:9c:34:29:8d:c9:16:b3:9f:12:
3c:32:c1:d1:32:73:62:34:7f:ef:98:81:e0:d2:01:68:f1:af:
a0:dd:a2:7a:1b:e9:87:50:4b:7e:01:9e:f6:3e:82:b2:36:60:
cb:62:f2:a8:10:ae:10:b6:e7:5d:ab:d8:90:c7:eb:c8:38:bb:
5d:a3:b2:80:ab:b9:ba:05:c6:a6:0c:1c:c5:6e:65:77:86:3f:
e9:d6:2c:f5:a7:67:58:00:d3:5c:51:09:77:7e:2c:e5:b4:ce:
64:0e:62:d7:04:c3:a3:bb:6a:3e:ba:35:59:84:14:ae:c8:20:
61:ca:cf:4e:cb:9f:84:92:ef:4a:44:fd:26:8f:c9:72:0b:3a:
00:08:29:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 08:07:19 2025 by rpki-client