Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier: mTpWBCvGVJfQnesQgObxAXJvMh33hR/UzFuW8161jCA=
Subject key identifier: F8:51:77:D9:9A:36:B3:FF:13:DA:D0:6D:24:A1:08:4D:43:54:91:23
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 019A25F859B905B574DF6EEE423D99A496FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 14:00:24 +0000
Manifest this update: Mon 27 Oct 2025 14:00:24 +0000
Manifest next update: Tue 28 Oct 2025 14:00:24 +0000
Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: hVjpfUP2Q4yBNc4/p81gnz0X3nWGfhijrYuwu8AQTRA=)
2: L9b4ducPYyR6qc5uaeOni9YJQHA.roa (hash: vaOymUj3eUPmbh7xiKllx8KgzftTh5qvMK+aeen3RXg=)
3: kpbrBAbvkEz7iwjj9qvNJnx2KAI.roa (hash: EaUeR1cKI29E16jF0XdNnwUwftG+vurlmN50dR3srjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:59:b9:05:b5:74:df:6e:ee:42:3d:99:a4:96:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: Oct 27 14:00:24 2025 GMT
Not After : Oct 28 14:00:24 2025 GMT
Subject: CN=f85177d99a36b3ff13dad06d24a1084d43549123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:8a:fb:fa:b1:71:38:8a:41:b0:7d:63:67:
87:51:e1:c6:bc:5a:d4:93:d2:e4:a2:2f:2b:dc:4c:
67:b3:12:e9:33:fb:4d:11:d4:7e:d8:20:c8:ec:54:
fb:d4:19:8c:2d:ff:80:c4:a4:b6:3b:8b:3e:e3:e4:
81:c4:ee:eb:3b:80:b0:21:34:bc:85:93:cd:00:6a:
f2:10:d3:80:c7:f7:92:d0:d2:81:37:a6:9d:67:3a:
92:6e:fe:c0:b5:f8:8f:97:a8:76:cd:a9:06:5b:2b:
56:e1:ea:68:b7:8a:89:0c:a6:6f:fc:80:9b:5e:ca:
13:56:c6:01:37:e6:95:10:17:92:9f:5c:ce:a8:be:
12:9f:57:02:5a:e5:90:06:55:13:1e:20:53:4f:eb:
66:19:5e:78:86:06:3d:18:17:87:0a:09:12:a0:60:
34:05:b2:2e:9f:a2:f7:d1:50:b0:e4:64:c8:a6:1a:
12:24:e1:70:fc:b1:f2:f1:71:85:8e:a4:47:45:db:
00:41:09:c6:e0:29:ca:25:20:24:9f:53:d2:02:78:
84:3c:10:56:7f:f8:08:f3:87:ae:bb:05:20:fd:6f:
2b:71:da:4c:df:f4:24:08:24:40:d0:5d:f0:be:5f:
89:3e:48:95:98:32:0d:4e:aa:1d:8a:8a:fe:8d:6f:
ff:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:51:77:D9:9A:36:B3:FF:13:DA:D0:6D:24:A1:08:4D:43:54:91:23
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f1:a9:f6:64:d6:97:90:2d:a0:cd:a5:ad:b2:19:56:9a:83:
53:d4:3a:e9:59:74:de:c1:26:90:a3:75:5e:61:55:46:46:96:
d8:25:e6:66:70:84:4b:5d:41:2e:f8:ea:9a:99:ca:d2:f5:d5:
4c:7a:5a:c7:7c:73:26:64:9f:e4:ba:de:cc:be:3f:bf:48:fd:
22:a9:81:2e:51:b5:d3:3d:ea:a2:8b:71:36:59:59:c5:9a:5e:
6e:43:7d:d0:10:d4:97:14:2b:00:f6:94:2e:d7:97:56:b7:83:
a9:2c:75:eb:39:0b:a6:36:e8:aa:5a:42:c1:72:8b:6d:1b:6a:
8a:5a:77:73:af:94:8c:c5:ee:a5:54:ee:26:ef:ce:ac:33:51:
a7:be:37:bc:5a:bc:68:a2:f8:f9:81:61:3b:0c:71:20:81:e4:
f4:4e:16:9f:04:bb:fb:c0:75:34:0c:48:9a:f3:d9:db:ef:a8:
b8:e6:fa:4e:ad:8c:80:50:a9:9e:4f:22:5f:4d:44:c1:b6:ae:
7a:5e:8e:24:53:14:63:5c:34:e6:1a:3f:e9:86:dd:ab:1f:a1:
8f:6c:6e:71:3d:97:d2:8f:35:06:68:7b:f0:37:68:bf:ea:8b:
c6:d4:e6:5f:9c:ac:bb:89:a0:55:c6:75:ea:ce:a7:62:64:53:
1b:a4:46:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:34:03 2025 by rpki-client