Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
File: 3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json)
Hash identifier: CZTiwunScVlIleb/36K/+0bbwJ/HxtxcfQv1KNMPTHc=
Subject key identifier: A0:B4:34:E4:99:FF:DF:90:92:D9:43:2C:D7:A6:45:D0:F1:5A:5F:3B
Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Certificate issuer: /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Certificate serial: 019A0748E93DB4EEE8CFEA630C2902442739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
Manifest number: 16E8
Signing time: Tue 21 Oct 2025 15:00:10 +0000
Manifest this update: Tue 21 Oct 2025 15:00:10 +0000
Manifest next update: Wed 22 Oct 2025 15:00:10 +0000
Files and hashes: 1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: Ze6BbtXZUbqMknFRRC+vSIrVAOzyy9lNzmgcQ+EO1b0=)
2: 4aMsThSQ8pto7QNh_kFB73sOXo8.roa (hash: HEBFusOcNgQfdZRF0U/he5dAzzkTri4ddTPSMK0+giU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:48:e9:3d:b4:ee:e8:cf:ea:63:0c:29:02:44:27:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Validity
Not Before: Oct 21 15:00:10 2025 GMT
Not After : Oct 22 15:00:10 2025 GMT
Subject: CN=a0b434e499ffdf9092d9432cd7a645d0f15a5f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:9f:8e:73:be:45:e2:9f:93:01:34:75:3a:
84:db:5d:4f:9f:9a:e8:e6:1a:6d:9b:dd:2f:45:01:
22:1a:b0:d0:49:c0:62:5f:40:97:f7:90:48:e3:b4:
4c:ce:c0:12:1d:99:3e:95:62:c3:f0:52:30:00:c3:
8b:2d:d2:f6:50:63:42:fa:ff:46:b4:fc:12:5f:66:
62:02:3b:72:d8:89:5c:99:11:55:53:e3:43:69:87:
48:b5:a7:b6:3a:61:ae:ab:e7:92:3f:e0:60:a6:08:
e4:94:b2:a6:af:15:28:ce:cd:ca:30:b6:08:df:20:
09:cc:bf:97:61:cb:dc:1b:bc:5a:c2:d5:b1:2e:6e:
52:64:55:e8:f3:92:5b:48:23:74:55:54:43:bb:80:
aa:45:94:e6:0a:95:d2:b8:b2:64:76:d1:7b:83:14:
4a:05:a5:3d:1e:ea:71:38:af:32:92:43:3a:b4:84:
69:6f:1c:d8:63:d1:13:80:09:3c:52:68:f7:b6:06:
b4:c4:4f:99:d1:65:1e:e2:9d:44:06:98:07:9d:6b:
fd:29:75:0a:9a:56:86:70:a7:66:96:98:23:27:85:
e2:c8:39:71:2c:f2:08:6b:72:9e:97:02:6e:d9:83:
ae:94:c4:96:4a:b4:4e:93:92:85:d0:b2:6d:f9:c7:
e9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B4:34:E4:99:FF:DF:90:92:D9:43:2C:D7:A6:45:D0:F1:5A:5F:3B
X509v3 Authority Key Identifier:
keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c6:2f:89:5e:17:9f:05:13:ec:c1:d7:06:af:69:66:27:94:
b1:e8:24:96:23:4c:0d:1d:03:f3:07:27:6b:1c:28:29:0c:e9:
75:4c:48:78:17:18:a1:26:f5:c6:72:e5:92:25:fb:ef:77:ab:
3b:d2:fa:58:ed:4f:35:6f:18:8a:c0:9d:ab:48:30:fa:0c:d4:
ae:10:9f:c9:ae:87:a3:70:af:7e:71:dc:4a:4b:61:bc:51:82:
c5:81:4b:21:70:55:59:a8:7a:65:ad:0a:8c:f1:d9:3c:fc:b7:
7e:c5:9d:e5:8c:26:41:fc:4f:12:19:c8:69:23:bb:6d:f8:ae:
26:64:79:8a:ce:76:6e:3f:0b:5d:0c:5a:96:90:e9:7d:f1:58:
22:f8:68:ad:80:d9:04:61:53:3c:22:a0:62:5a:fa:6a:f9:8c:
b3:21:66:73:5a:f9:23:97:ab:47:9d:9c:9f:56:21:ca:10:ed:
61:24:b6:ad:25:b1:6d:59:23:25:62:52:26:e4:8c:58:7c:ae:
17:88:a7:c6:91:ee:cf:b9:64:d5:13:8a:47:0d:62:c7:b3:f2:
02:b2:97:2b:ba:43:91:3f:37:8a:e4:85:93:a0:b0:ca:94:18:
e4:45:01:5e:42:9e:c9:6a:70:25:c7:7b:59:94:e9:eb:e1:3f:
5d:97:89:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:42:40 2025 by rpki-client