Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier: yDJdwdpe/mY0M8Je+G2fC4RGuIRd8s82w6rJvPjm2cM=
Subject key identifier: 90:31:76:3C:BC:B8:F1:D4:22:4F:1A:23:D1:B9:53:D0:4B:DB:62:11
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 0199E3E1BE7329B08454BD43EA06161C9E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number: 16E1
Signing time: Tue 14 Oct 2025 18:00:46 +0000
Manifest this update: Tue 14 Oct 2025 18:00:46 +0000
Manifest next update: Wed 15 Oct 2025 18:00:46 +0000
Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: EoLy/6Me3H+wt/lezamnYEI6EllNPJnJbDZIvaRoW6E=)
2: DCDhVbD3fsODPYm5sUm8pjAvYC4.roa (hash: 7lv1CrpPPfO+TV6Xk6IsNlr9S02akSFzspE/euO4HYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Oct 2025 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e3:e1:be:73:29:b0:84:54:bd:43:ea:06:16:1c:9e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Oct 14 18:00:46 2025 GMT
Not After : Oct 15 18:00:46 2025 GMT
Subject: CN=9031763cbcb8f1d4224f1a23d1b953d04bdb6211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:49:52:cd:c8:53:ad:5d:77:e3:f6:fc:d4:
0c:58:28:79:7a:d5:d4:73:7c:05:1f:d2:cd:67:8a:
10:18:70:67:d2:6a:1e:02:2c:6f:a7:dd:36:49:02:
a6:aa:4c:fb:13:bd:56:ce:fb:87:f9:0c:e8:33:a2:
39:ad:06:49:3a:eb:af:39:7a:7f:48:0a:69:3d:8a:
e6:a7:2a:09:b6:b4:bc:98:7c:41:36:c4:f1:b0:cb:
27:b9:6d:4a:d6:b3:b2:f3:71:fb:a8:f2:fb:5a:5b:
74:12:75:db:59:b9:f9:69:ea:d7:d1:b8:36:79:09:
b1:19:f8:b9:a0:a0:81:8d:87:df:72:89:71:46:36:
79:30:13:97:b1:67:24:69:ea:74:11:65:05:63:bb:
c7:9e:9c:d8:d3:e1:6d:a7:77:c9:09:92:32:81:71:
ec:59:f6:4e:fa:b8:f8:ec:de:74:f8:b3:25:e3:32:
9a:61:49:a3:0e:98:48:d1:5f:e7:d1:b2:50:7f:5c:
f0:bc:d2:84:04:59:aa:88:ff:ae:7f:2d:00:cf:da:
c7:87:eb:79:47:a3:e2:d1:ab:1f:ce:cc:9a:65:04:
0b:80:8d:9e:9a:98:59:bc:f3:71:f3:4a:24:17:ec:
dd:eb:0b:1b:57:21:2d:45:76:41:9a:de:77:1f:4f:
db:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:31:76:3C:BC:B8:F1:D4:22:4F:1A:23:D1:B9:53:D0:4B:DB:62:11
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6d:d2:52:b5:05:bc:2b:64:d7:bb:fb:bf:6d:82:10:30:0a:
ce:b0:14:bb:dd:f1:52:71:1c:84:71:a1:f8:47:a9:af:75:ac:
50:0e:02:3e:e8:df:21:d7:d9:cd:7a:d5:c1:0d:d0:21:f1:fc:
5e:29:16:67:b1:a5:d4:24:f9:1d:7d:9c:94:b2:9e:ea:ee:b1:
47:64:7f:63:c2:86:8d:0d:ba:35:28:48:41:61:9e:44:e4:ee:
fc:48:ff:71:48:67:a5:17:73:c5:c1:f6:92:2f:77:70:79:ce:
c5:07:cc:89:91:cf:80:e7:53:f4:04:f4:67:18:47:db:04:31:
9d:a4:ff:bb:8d:57:80:94:c1:50:7c:3e:3e:cd:38:e3:42:86:
54:b4:cb:ec:77:b0:80:78:df:9d:37:5f:1f:1c:d6:85:e6:62:
db:19:ea:6f:71:96:0e:08:4b:7e:d0:64:3f:eb:bb:05:94:fc:
66:46:07:6f:cb:11:9a:4e:49:66:55:d5:d7:bc:28:a1:a2:bc:
46:20:1b:c2:19:ff:08:02:7e:01:3e:9a:8d:a9:b2:b5:68:ba:
b7:0f:c8:1c:83:1e:1d:dc:44:37:c0:0f:d4:8a:01:0b:a7:0c:
7a:dd:d3:eb:2e:7b:59:3f:68:67:a1:b3:56:54:55:b8:43:d9:
03:81:7e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 23:55:35 2025 by rpki-client