Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
File: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft (raw, json)
Hash identifier: tkL1sJEdj8CeDZ1bUrJW/GfuMc8anqC3rwDpCSJY9wI=
Subject key identifier: E8:01:4C:07:56:55:E1:2B:AA:F5:EA:EB:23:53:21:52:04:ED:CA:A5
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 019A041129956760BBD7383D5573D01D56DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
Manifest number: 0EC7
Signing time: Tue 21 Oct 2025 00:00:24 +0000
Manifest this update: Tue 21 Oct 2025 00:00:24 +0000
Manifest next update: Wed 22 Oct 2025 00:00:24 +0000
Files and hashes: 1: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl (hash: JDXre+9rXoZjirR5nUaY6HP3JIxzp/8vvxGI+DQY04w=)
2: C9mugrtzW_-CpWlbrAzn7HLndJs.roa (hash: us/IF6tfe4s5IdJAAyc5z0B0e23waKBVaik+zvz/TyQ=)
3: yll503ISaq2wNzfEAk_Qb_MtGbg.roa (hash: LYtS+Gvc0u0aK5E+MP2oP4ZNnIbSc6rSwiTMseFfpYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:29:95:67:60:bb:d7:38:3d:55:73:d0:1d:56:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: Oct 21 00:00:24 2025 GMT
Not After : Oct 22 00:00:24 2025 GMT
Subject: CN=e8014c075655e12baaf5eaeb2353215204edcaa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2b:74:fd:da:cb:86:61:e2:f9:16:8f:c6:69:
cc:db:0c:89:34:da:c4:ce:44:28:f0:98:ce:77:6a:
0f:9c:f0:88:74:e9:d8:c7:79:d2:fa:66:ae:52:9a:
a9:a8:a2:96:ed:a7:71:cf:e2:cd:95:f2:3c:7f:47:
b8:94:41:9e:24:6c:f7:39:39:c9:7e:6e:82:1a:5b:
0a:87:05:3d:4d:47:67:f6:fb:8d:d1:8e:b6:ce:b5:
de:40:16:f7:62:52:b7:86:59:4b:72:1f:59:dd:64:
89:90:b8:b3:f1:77:98:5e:3b:53:a4:3c:a9:74:67:
1c:64:a0:9a:8a:08:9c:cb:66:6a:6d:11:c1:68:63:
9e:42:33:e3:04:2b:29:7c:df:21:e7:40:9a:b2:5c:
52:44:be:52:54:9c:e3:ab:a9:2c:81:9e:c0:5f:2e:
4f:8c:71:58:78:18:2c:7a:11:c4:92:7e:61:cd:b1:
28:f9:75:16:82:aa:f2:61:16:60:07:cc:66:81:f0:
ac:b8:3e:18:61:17:64:94:27:9d:1c:0e:d8:64:3e:
60:bd:d0:26:14:97:3b:d3:fe:5a:10:24:de:2d:9a:
88:bc:5b:81:78:51:ee:12:3e:21:b6:01:9e:10:e9:
3e:c0:0a:54:ed:26:7e:46:98:64:00:e9:ce:73:65:
90:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:01:4C:07:56:55:E1:2B:AA:F5:EA:EB:23:53:21:52:04:ED:CA:A5
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fb:e0:1b:3b:93:b7:87:d3:48:bf:88:64:93:0d:6e:2a:4c:
ad:ba:37:1a:8d:3a:f6:6a:d1:67:a5:79:a8:db:d7:1b:6f:80:
90:d1:51:b6:33:47:2c:cb:86:49:f5:18:94:3e:f2:5c:50:f3:
cf:78:59:e1:f6:0c:04:9a:da:13:39:1e:37:95:7e:74:d9:57:
a9:cc:94:45:81:1f:2a:ee:da:ea:94:cf:f3:41:bc:5a:59:93:
17:a4:a7:3e:78:26:55:0a:06:9a:3b:3d:c3:9a:4b:23:79:fe:
90:ac:08:88:02:e4:85:a2:b0:10:d0:cd:72:8f:0d:27:17:8f:
a0:61:0b:28:7f:fb:35:0d:27:2d:56:6e:d3:9b:da:73:fb:11:
ac:e5:cb:c9:cb:76:67:fc:60:44:94:32:59:0a:e5:20:f2:ac:
dd:4a:00:17:1d:a7:ca:4a:10:94:f1:71:4b:81:93:48:89:c3:
d8:91:ca:a9:85:49:db:bd:21:79:8a:27:84:37:6c:b3:fb:d4:
03:7c:21:2d:a7:a8:06:4d:c8:db:33:c8:12:85:bb:47:6f:bf:
d3:74:4f:ca:b0:e3:ed:81:aa:82:79:db:97:2e:3c:7a:d8:4f:
06:a5:5d:d9:51:05:54:e5:de:eb:08:c1:16:23:44:37:fa:47:
2c:42:f7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:26:21 2025 by rpki-client