Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
File: 3L-wBIqNpVb9nT3xB3QC-EP11wM.mft (raw, json)
Hash identifier: MhTuuSZrKY4rPqEoJaoUn14wuG5uldbXKjOwi5k4hbk=
Subject key identifier: AA:60:98:07:F1:D7:20:BC:67:91:18:B6:A4:A7:5D:EF:4D:45:EB:54
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial: 019A28F94688CE37899AB20C53914BC82FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
Manifest number: 16FC
Signing time: Tue 28 Oct 2025 04:00:16 +0000
Manifest this update: Tue 28 Oct 2025 04:00:16 +0000
Manifest next update: Wed 29 Oct 2025 04:00:16 +0000
Files and hashes: 1: 3L-wBIqNpVb9nT3xB3QC-EP11wM.crl (hash: xSx9TxWrtcMHIYxp9MGJfiYZlw147kgjrKUSCPEJxyU=)
2: 4wUZf81dDkIeAPvjdALKJO_OOPc.roa (hash: HqwNO12raLEf5yNUI8l+TH+b+XfQFpo8GF0GMhT1w60=)
3: Do4PLeA5o1GoY13K0QrZV2b74eA.roa (hash: B+FCeD+X05tR69YheF7VQWedc1p5umVaXn20qWaAN1Q=)
4: hbNbIVCjEN8lItMWW7GZDYik4tU.roa (hash: /QjTSPpaK1t0LSYMylHsSi3d6TtpowMr+RmtBrzOYQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:46:88:ce:37:89:9a:b2:0c:53:91:4b:c8:2f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Validity
Not Before: Oct 28 04:00:16 2025 GMT
Not After : Oct 29 04:00:16 2025 GMT
Subject: CN=aa609807f1d720bc679118b6a4a75def4d45eb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:be:f2:37:e5:a3:11:46:03:74:4a:49:97:6a:
36:01:90:ef:60:24:41:f1:14:59:7c:c0:be:1b:d3:
c3:9c:bb:53:22:6a:16:69:71:42:27:62:91:f5:a6:
9d:3a:5d:2d:e7:45:3a:04:a9:46:26:a3:42:11:a5:
3b:46:e1:22:4a:e0:4d:82:98:8d:44:b8:7d:d0:7f:
a1:c9:86:b4:83:bb:8e:c5:8f:c0:82:27:9f:7a:b2:
29:9c:ef:f6:7e:96:75:16:01:65:90:73:f1:49:75:
d4:2f:70:20:6f:1e:ac:19:a4:cc:3a:d0:3a:36:b9:
49:de:da:bc:ce:c1:2a:7d:bb:f1:f5:0f:46:10:af:
29:73:2c:42:2c:4a:61:e5:4a:9e:e8:3d:54:0e:bf:
88:4e:40:52:d5:4e:e7:63:b6:ec:ce:40:de:43:04:
48:ab:ab:dc:f0:87:0e:be:47:dd:22:43:94:b0:ee:
ee:eb:b8:8a:44:bc:1d:bd:96:2f:85:fc:fd:35:b0:
ac:c7:7e:72:bb:d0:03:96:fb:21:be:e9:03:ac:58:
80:5c:22:a4:5a:d2:ad:49:aa:01:31:4d:6b:a9:85:
4e:cf:21:80:60:6e:44:de:0c:10:d6:9b:5c:df:29:
a8:e9:40:90:64:f8:c2:a9:fc:3a:3e:b0:0c:ad:f4:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:60:98:07:F1:D7:20:BC:67:91:18:B6:A4:A7:5D:EF:4D:45:EB:54
X509v3 Authority Key Identifier:
keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:dc:6d:f5:c1:cc:6f:c6:61:15:e9:ab:1b:00:ea:8e:72:4a:
98:36:b7:f3:02:fa:a5:71:69:c7:6d:e4:f3:87:0b:e1:5f:c9:
b9:97:7a:5c:5d:83:e1:fb:02:51:a4:16:f1:5f:6f:f8:b8:54:
0e:5a:1d:55:c8:3a:55:ec:dc:31:9c:a3:86:93:02:06:60:c7:
5d:c1:5f:42:04:ae:f5:f7:41:a9:ad:4d:5b:b7:f5:eb:10:38:
b5:b8:cd:87:51:0d:25:ab:3c:af:d9:2d:f6:4c:ca:38:81:f0:
4e:7e:9b:fd:e8:59:39:61:f2:35:b7:f8:58:73:ad:97:31:15:
ec:92:00:90:05:f5:76:61:33:1e:ff:db:23:8e:26:89:ce:44:
24:32:37:e7:db:a2:db:f5:e6:3e:ec:05:e7:6f:e0:26:c0:2c:
e0:72:c2:a2:df:9d:74:1c:ae:58:d7:4d:62:58:f7:83:8c:29:
cd:67:33:43:01:b5:1b:51:4e:59:e3:e0:68:f4:18:07:c8:27:
ec:3a:e0:e4:8a:de:d2:bb:72:60:81:6a:d6:42:60:4e:cd:53:
eb:bf:36:a1:2b:9e:b5:3c:58:c6:27:fb:98:9d:3f:7e:69:03:
d3:34:d4:c8:5b:c6:5a:a3:74:52:16:21:21:0e:7c:be:0b:63:
f2:8b:e9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 09:26:09 2025 by rpki-client