Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
File: A3hj3DwlnmCyyYaALdYCERXovx8.mft (raw, json)
Hash identifier: 98lwtAne+TocWwqqrDXNHW9ZSFzgu2+GSC4NJJ7tRHM=
Subject key identifier: F7:01:0F:61:5A:2E:E4:AB:80:96:65:F2:19:D6:44:CE:A9:14:6A:F4
Authority key identifier: 03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
Certificate issuer: /CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Certificate serial: 019A2BC3DB0136B60E417197966B13A7C6F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 17:00:47 +0000
Manifest this update: Tue 28 Oct 2025 17:00:47 +0000
Manifest next update: Wed 29 Oct 2025 17:00:47 +0000
Files and hashes: 1: 0VtcIuxUGMiSf51ESt2U0ZJJN3I.roa (hash: pnzB/pCC1PdPD6bGcX+A1+WWtoVI4A2/GkUREyGlYVs=)
2: A3hj3DwlnmCyyYaALdYCERXovx8.crl (hash: 9+EkEBO0eYxPFrm+7LEb+X5canI40UJuXKaHayN3F9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:c3:db:01:36:b6:0e:41:71:97:96:6b:13:a7:c6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Validity
Not Before: Oct 28 17:00:47 2025 GMT
Not After : Oct 29 17:00:47 2025 GMT
Subject: CN=f7010f615a2ee4ab809665f219d644cea9146af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:97:cf:56:04:93:38:53:31:f2:23:7a:53:c9:
cf:6c:51:21:9c:3a:12:db:90:3d:aa:33:b7:96:d5:
e4:31:10:4e:b9:0f:bf:d9:01:67:7d:ce:b5:b9:62:
91:44:63:2d:ce:02:6e:c2:25:80:15:d1:98:97:6f:
81:3c:a1:9d:50:d2:4f:96:02:7e:75:fd:fb:88:f7:
d2:94:7a:9e:f5:1e:5d:fc:93:d5:58:d2:8a:14:31:
fd:0c:ae:92:dc:6b:5f:0b:43:e2:23:bb:12:b9:e7:
d2:5d:db:06:23:e6:15:e4:4e:12:8a:92:da:71:b5:
0d:e8:7f:c7:d0:89:8b:20:cf:23:6d:ac:55:5c:34:
74:0e:b2:1b:a5:86:96:9d:ac:09:fe:68:90:fe:a2:
d9:0e:65:42:cf:78:2a:86:91:66:65:82:12:72:82:
5b:63:f2:33:d3:d5:05:e6:c1:42:d4:c7:0a:c4:f4:
e5:7b:01:2c:00:29:4e:37:d3:e9:5f:c9:69:9e:99:
87:ca:93:f0:5f:c6:fc:ec:1a:93:a6:06:98:47:45:
a4:60:c9:e4:e6:85:1f:b3:37:7d:60:27:76:1e:46:
db:46:b3:da:31:d9:8d:ec:12:8b:98:54:4a:a3:63:
c9:5d:f6:5e:a7:f9:1b:b1:cc:96:a6:39:b4:2d:97:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:01:0F:61:5A:2E:E4:AB:80:96:65:F2:19:D6:44:CE:A9:14:6A:F4
X509v3 Authority Key Identifier:
keyid:03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:14:ba:29:c0:e2:a6:af:46:53:e2:93:e7:56:f1:10:65:1d:
a0:53:b6:c7:49:db:25:e0:8c:d5:3a:75:13:73:a8:36:7e:e2:
a7:57:c1:8d:ab:61:b5:bb:8e:fb:ad:3a:4a:24:14:07:96:6e:
4e:af:34:b3:8b:89:8e:1f:cf:87:cc:97:31:94:bc:e0:f4:6a:
63:d9:37:32:1a:ee:8f:1a:aa:a5:7e:64:ed:f7:87:96:a8:d2:
9c:f0:7e:b3:26:4e:17:d8:ba:e6:22:6e:90:39:0c:6c:1b:ed:
0d:6d:9b:ad:65:da:2e:f3:dd:13:74:b4:74:8b:37:30:76:4d:
08:5c:2f:94:72:04:61:1a:8a:17:e9:26:f0:dc:38:ee:60:3f:
41:18:9d:1d:7c:90:0d:65:f9:ef:fd:c6:8b:bb:a6:05:ef:34:
e9:c8:02:d5:28:31:6d:e0:22:73:50:11:97:32:20:ba:a1:ff:
a9:de:4c:46:2c:cd:dd:56:c6:b7:e8:5c:b7:89:6c:17:a3:f2:
7a:51:80:a8:90:82:d4:5c:32:79:64:c1:76:41:a8:23:80:d9:
2f:16:c2:af:cd:bc:a3:94:87:1b:89:15:58:0b:65:41:3f:d7:
e9:4c:5b:5d:ff:d6:6c:1d:c1:47:17:51:f1:6e:90:1b:54:2f:
a3:70:89:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 22:11:47 2025 by rpki-client