Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: qWQyPQ07HIsxy4iP4MSx513RoNpyn8pIZ8gpakuhfwM=
Subject key identifier: 9D:69:5B:93:DF:F8:AB:4C:F5:F2:E4:ED:2D:17:5B:C2:D4:A6:B6:57
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019A0447DA88B7DEAF90A03ADD0B05947D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 12AF
Signing time: Tue 21 Oct 2025 01:00:09 +0000
Manifest this update: Tue 21 Oct 2025 01:00:09 +0000
Manifest next update: Wed 22 Oct 2025 01:00:09 +0000
Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: RrRxTO4YsEbc+bNxzv9IUyN/El4342wyjvymWAkv+I0=)
3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=)
4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=)
5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=)
6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=)
7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=)
8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:47:da:88:b7:de:af:90:a0:3a:dd:0b:05:94:7d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 21 01:00:09 2025 GMT
Not After : Oct 22 01:00:09 2025 GMT
Subject: CN=9d695b93dff8ab4cf5f2e4ed2d175bc2d4a6b657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:32:67:62:88:4a:87:ff:62:e1:b3:a2:31:
4c:75:64:c8:ff:2e:c4:12:42:4c:ed:c0:9f:88:e8:
a1:63:0d:4b:22:32:a7:a2:b8:01:1f:3c:bb:54:fa:
b5:de:39:cb:cf:66:7b:a6:73:72:a5:c4:59:6b:cd:
47:4a:d1:2f:1d:47:83:0f:db:cb:5a:ef:ca:15:bd:
fc:0e:3e:11:62:c2:31:e7:7d:be:09:25:26:92:50:
1e:a9:65:b2:54:95:89:e0:94:bc:c5:b8:68:af:17:
28:28:1e:2c:31:18:4a:48:08:e5:ed:e6:27:65:04:
48:5f:c5:71:5d:33:4b:dd:f4:45:83:4a:9a:0b:6d:
d0:a5:f2:f6:da:f2:47:46:22:66:ca:dd:5b:dc:c6:
e9:7e:06:c3:5e:99:94:95:52:25:19:7b:85:6d:16:
2a:0e:88:98:2a:89:a7:8f:43:f5:19:7a:ed:56:cb:
25:de:e0:ff:7b:f0:88:19:82:14:f6:f7:82:02:2c:
98:e7:97:fc:a8:13:70:c5:f8:66:78:60:e0:f5:88:
03:f1:cd:2a:e8:08:58:9d:4d:25:b6:88:b5:14:6b:
d5:bf:e8:7c:71:b0:5d:a1:af:bf:fb:f1:be:c6:a1:
01:cd:c7:6b:c3:8a:1b:b8:4b:34:9f:4a:8e:e0:82:
3b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:69:5B:93:DF:F8:AB:4C:F5:F2:E4:ED:2D:17:5B:C2:D4:A6:B6:57
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:ae:a3:92:97:83:88:f3:bd:ee:28:a3:56:d6:bb:7a:16:d6:
d3:2f:93:d3:e1:2d:77:93:76:15:83:bf:e8:6c:3e:7c:6a:8e:
e5:55:06:64:35:3f:d2:36:22:15:9f:7d:95:96:2c:c4:99:54:
38:65:70:a5:25:a7:69:34:99:81:b8:fd:c2:df:b4:35:e2:3c:
b8:2f:2f:95:67:53:b6:d9:66:dd:a9:23:16:b0:5c:63:5c:65:
44:77:46:a8:24:21:da:db:3e:ac:74:90:e0:a4:9c:94:e8:71:
9b:9e:2a:8d:da:4b:45:96:57:4b:63:e6:0c:bf:7e:53:53:e2:
52:14:13:e1:9a:46:4d:35:8e:9b:4d:9e:c8:0d:b9:02:c3:2e:
52:97:c2:e0:54:67:2a:65:a7:b3:ea:38:16:b5:03:62:1f:32:
06:ff:bb:fb:5e:fc:18:99:d9:55:cc:02:75:98:e3:f1:85:2b:
31:89:2f:c6:0b:f7:61:4e:e4:3b:1d:0d:c2:b7:3e:d0:37:e8:
75:d1:7d:9b:18:d0:28:86:fc:55:c5:f5:0d:2a:ce:a2:84:07:
5e:e6:55:e6:5a:91:9c:26:e2:1e:84:bd:4c:50:be:f0:f7:28:
ba:bd:9a:07:40:85:98:00:2b:1a:b8:c3:b7:f0:8f:2a:f3:62:
9d:9a:8a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:31:10 2025 by rpki-client