Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
File: 3F0s-9udWNV0D_N1oxWzglRKlK4.mft (raw, json)
Hash identifier: uKSRhy5d+KrvhPQP1PSYsKzYoVrmV0IM5XBldEa7BtQ=
Subject key identifier: 16:AE:F0:5B:50:71:EF:7C:54:EE:41:0C:0E:7D:40:00:1B:F0:FD:05
Authority key identifier: DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
Certificate issuer: /CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Certificate serial: 01993BDE29B0256141F0D478CB5F5A88752A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
Manifest number: 0AFF
Signing time: Fri 12 Sep 2025 03:00:39 +0000
Manifest this update: Fri 12 Sep 2025 03:00:39 +0000
Manifest next update: Sat 13 Sep 2025 03:00:39 +0000
Files and hashes: 1: 3F0s-9udWNV0D_N1oxWzglRKlK4.crl (hash: fTUnlTMfISozYjZFqJHh8vb0/VUca80I89XckMH7EJo=)
2: t2IAGMSzk4-7dntYHVtGoSAvw3E.roa (hash: MFygbsGgjd41JH2HTdeF0MRaBb6hffk9LejkFMw08aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:de:29:b0:25:61:41:f0:d4:78:cb:5f:5a:88:75:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Validity
Not Before: Sep 12 03:00:39 2025 GMT
Not After : Sep 13 03:00:39 2025 GMT
Subject: CN=16aef05b5071ef7c54ee410c0e7d40001bf0fd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:50:8a:63:35:fd:f8:29:1b:a2:5f:a2:8c:88:
22:d4:93:ed:b6:34:24:f1:d0:cd:5b:49:95:38:cc:
e6:82:bf:3c:d0:32:7a:40:e7:e0:7d:c7:d4:c0:b6:
f1:1c:1e:49:6f:b1:7b:e1:cc:14:e2:41:bd:24:52:
ed:ed:2f:d2:e5:1e:ad:03:f7:3d:93:78:98:11:24:
0e:33:06:85:c9:5a:c8:a8:ba:f8:c4:13:61:e4:ae:
e1:1a:42:fb:1a:a7:22:f5:fc:0e:fb:1e:b9:87:1b:
d9:10:95:a8:25:8c:2e:b3:7c:9e:e3:68:2d:a2:fe:
bb:c4:3d:a4:8c:31:bb:bc:09:2f:53:98:2b:62:ec:
78:19:ee:ff:53:84:1c:b0:08:2d:47:63:7c:6d:12:
60:2c:d7:b1:b3:9d:32:49:48:83:e2:ae:83:c8:a3:
dd:a5:00:4a:9e:ee:a4:1e:b2:ec:13:7c:8d:ef:1c:
ba:a0:9d:cd:93:6d:01:f3:c5:bf:09:16:dd:10:7b:
1c:96:f2:31:91:19:5d:30:35:a0:5f:21:f0:78:93:
49:a2:31:61:b7:4e:d8:df:21:d0:a5:5b:37:d2:14:
01:33:d8:32:ff:ac:1e:a5:ed:d9:73:93:94:3a:c7:
8d:b0:56:42:c7:6d:bb:cd:ae:15:96:2e:c8:f7:df:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AE:F0:5B:50:71:EF:7C:54:EE:41:0C:0E:7D:40:00:1B:F0:FD:05
X509v3 Authority Key Identifier:
keyid:DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b5:0e:4f:ce:e5:00:ba:89:93:4f:43:c3:3f:99:18:bb:f2:
58:f3:1b:4a:b4:2c:4a:bb:8d:f9:2a:67:8d:c0:4d:10:93:cc:
66:6f:27:d2:e0:f8:d3:a6:89:f7:63:95:21:24:8d:9a:ff:e8:
2b:a3:12:29:cd:d6:df:bd:f0:1b:3d:4b:1e:56:a0:cd:56:5b:
5f:19:5d:3a:e3:55:7b:ec:49:9d:f5:94:6f:2a:87:8d:85:f1:
fc:50:8a:64:49:a3:e4:05:e1:ae:77:80:89:5e:f8:76:c0:54:
46:22:69:d0:37:d0:1f:53:74:0c:fe:fa:80:a9:f4:0c:0d:c6:
6a:ba:ec:19:bc:fa:9a:c4:79:b6:d8:c4:25:80:8d:a3:24:b5:
84:c4:cd:31:ba:90:5f:57:5a:d1:49:c3:3f:f6:d8:29:71:36:
15:58:06:99:40:7d:67:ae:bc:96:e8:3c:c8:34:98:59:1b:5b:
35:6d:1f:3c:6c:6c:0f:c6:3e:2c:0e:3c:41:29:17:bc:87:28:
37:1e:ea:eb:2a:c3:b6:cd:61:32:a5:b5:9c:fc:f4:c2:75:87:
d3:9a:04:61:c7:db:a3:39:15:1e:ee:69:88:fc:99:45:d6:57:
33:83:27:58:b8:1a:fd:cf:5d:55:c2:bf:78:3a:0a:74:0c:55:
d7:ef:56:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 04:37:46 2025 by rpki-client