Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: P44UkWI1zp1otwCErpYYu+nDYsIY9/L65c4HsW40lYQ=
Subject key identifier: 0B:1A:86:B7:E9:C8:20:6E:6B:87:2E:A8:7D:E2:1E:70:7D:88:F1:9D
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 019A0C01CF817FC4C072D3677174AE908886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 0D78
Signing time: Wed 22 Oct 2025 13:00:36 +0000
Manifest this update: Wed 22 Oct 2025 13:00:36 +0000
Manifest next update: Thu 23 Oct 2025 13:00:36 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: SyFsMo7eAVmvyr8d/YkvB9BEu17BgPvRGTkObNFyuso=)
2: prKzcOdb2gq7whbRtn2j18st210.roa (hash: TLxvtHMzXY4Lge96VJalh1cOFoXVbLd9V2/rCUHRN3g=)
3: zxXrJCgqT81AO-d4vpKnqCQPEGE.roa (hash: WugT5zcayhMYDSTA/kF2PldTCBDPYZiQht5Wqh3j65Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:01:cf:81:7f:c4:c0:72:d3:67:71:74:ae:90:88:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Oct 22 13:00:36 2025 GMT
Not After : Oct 23 13:00:36 2025 GMT
Subject: CN=0b1a86b7e9c8206e6b872ea87de21e707d88f19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:3f:c3:ff:ec:c2:a1:82:4d:b1:d2:c0:6c:49:
04:d9:cf:1e:0a:2b:bc:f9:2b:91:20:75:21:19:ca:
e9:cf:d1:83:e5:f2:49:7f:d4:fe:9d:8c:e9:74:e0:
c0:e3:61:8c:bc:3f:4b:59:f5:6c:ef:b2:b2:e3:e6:
14:f9:e3:65:9d:f4:d6:21:5d:f9:67:91:cd:71:3b:
32:89:e4:51:ed:6d:d1:a5:4a:8d:d7:a9:98:c8:96:
e3:77:8d:80:ab:1b:b5:0a:44:80:03:75:8f:ec:09:
30:9e:e6:5e:ff:8c:31:9c:ad:2d:33:64:af:90:fd:
68:da:9c:e6:f2:8e:7f:da:13:17:f8:ea:e7:ec:54:
b7:8a:70:f4:a1:52:f8:1b:f6:9f:d2:a1:c8:7d:52:
5b:68:21:78:fc:c0:d1:72:2d:fa:f7:3c:22:e0:c7:
c1:8e:95:3e:74:23:e3:d7:21:85:f4:83:72:00:af:
57:37:f5:05:37:39:67:87:93:3e:44:03:85:f8:23:
41:83:e3:c0:38:34:40:56:aa:89:21:88:53:fe:59:
c3:cd:f6:4b:54:9b:71:75:24:cf:2b:d9:49:ec:48:
5d:3d:f1:64:e0:29:2a:7b:75:4a:30:64:d9:3e:8e:
81:5e:19:90:bc:43:3b:97:4d:c4:8d:49:fb:0f:08:
61:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1A:86:B7:E9:C8:20:6E:6B:87:2E:A8:7D:E2:1E:70:7D:88:F1:9D
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:64:d0:08:5b:50:ad:b9:58:c6:b4:27:f1:da:fc:3d:c0:2f:
bb:28:15:41:52:cb:15:44:3f:13:a4:e8:10:b4:70:17:3e:19:
03:f2:49:63:e2:64:9c:8e:76:3a:93:05:dd:7c:9a:e1:86:2f:
7d:f9:ea:cd:2a:84:19:4a:8a:bf:cf:a5:8f:b5:78:cc:1e:83:
33:e6:b4:85:f5:8d:e7:9d:23:db:3c:c1:d3:ce:e2:41:4c:53:
16:d9:84:20:e8:36:75:0d:07:39:1f:c6:62:23:dd:23:af:2f:
9f:72:84:c9:b0:3a:0d:2e:b2:08:e8:12:73:e7:e7:e2:20:4c:
da:ff:17:88:6f:fd:76:b6:87:58:b8:b0:15:be:c9:b5:64:f6:
a3:db:05:8f:42:9a:13:5f:d4:3e:c8:73:49:2e:59:ff:dc:50:
6e:a3:3a:e0:5a:9c:b9:61:31:ff:e2:72:5f:6f:26:57:4a:17:
9a:f4:c9:5b:5f:27:50:fa:d2:9d:c6:75:28:56:8b:9d:38:a8:
a0:ca:59:20:ab:44:1f:da:53:d2:63:ac:52:f8:8a:1c:38:f3:
9b:d6:9c:59:71:1b:87:af:fd:65:7d:a1:4a:59:f3:a2:95:ef:
07:49:5b:a5:1b:80:cd:17:27:28:ec:21:c4:59:92:e8:06:e0:
07:cb:81:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 18:45:22 2025 by rpki-client