Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
File: 3Iy0oRyrrCBK37iltYfjL-5KG1U.mft (raw, json)
Hash identifier: UNjEPyHcAxSwxPYZngXAYegbxwjFF18ccbemPTSCuB0=
Subject key identifier: 3E:EE:EB:BC:06:D3:C1:99:A9:F3:67:9F:5A:3E:1C:78:C9:A9:32:9B
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 019A04ECFD106B6C3EE70C277B9AB01667BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
Manifest number: 0D7E
Signing time: Tue 21 Oct 2025 04:00:31 +0000
Manifest this update: Tue 21 Oct 2025 04:00:31 +0000
Manifest next update: Wed 22 Oct 2025 04:00:31 +0000
Files and hashes: 1: 3Iy0oRyrrCBK37iltYfjL-5KG1U.crl (hash: TRO5lPOf7Cz4+g0vgsyK+Tgp3DIDAEf9mluGP5n3jcI=)
2: mKsKKQCdLodyBncOeNIhWtaYAoQ.roa (hash: fizUUsz/TAb+LHuegB83yr/hnzwxKplkZhpso2ufXV4=)
3: xfMF5Mt4jBFimRoPjDOTrOYZb_c.roa (hash: GuaLpdFfqfVEq3DS5+BP2JqM2gB3tItjQlR22xolKBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:ec:fd:10:6b:6c:3e:e7:0c:27:7b:9a:b0:16:67:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: Oct 21 04:00:31 2025 GMT
Not After : Oct 22 04:00:31 2025 GMT
Subject: CN=3eeeebbc06d3c199a9f3679f5a3e1c78c9a9329b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:66:65:1c:ac:d4:85:66:95:71:0d:4a:d1:
96:5b:03:ec:1a:07:83:90:ac:66:5a:21:a5:8d:1b:
b1:04:38:90:42:e6:81:37:5a:3d:f9:b4:38:58:4a:
6e:b2:0f:d1:b0:e6:11:a4:a3:5f:0d:f4:e7:f9:53:
b6:31:14:d4:6f:e5:b8:b1:8d:d2:9a:66:1a:06:b5:
be:21:d7:7c:47:cd:be:3d:31:58:01:d4:41:bf:ba:
24:9c:a3:0f:6c:0a:ec:f7:42:4b:e6:0b:f3:7b:29:
12:1e:e2:99:c2:21:15:d2:dc:a1:3d:96:e7:82:8d:
f1:18:ba:a4:2a:32:07:4f:40:69:a3:32:40:9e:dd:
b7:cc:70:74:3c:da:8c:1b:f9:8e:f1:53:cf:f5:0d:
5b:8d:6d:37:3b:a4:7a:87:1d:ee:e3:e4:56:f3:82:
ed:f1:97:be:df:fd:2d:6c:b2:29:85:38:7a:cd:eb:
14:68:b5:2a:ef:4c:bc:0c:ff:56:bc:7e:a8:88:2b:
43:98:45:00:65:d0:4e:85:af:24:1a:cd:70:da:6c:
4f:fc:c4:83:ab:78:4d:31:96:27:1a:74:cd:c8:4c:
be:65:4f:4e:5b:d7:d4:1e:ea:b8:bb:e9:2d:2d:89:
64:a5:bc:72:e0:dd:6a:7d:b3:03:24:03:1a:52:77:
58:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EE:EB:BC:06:D3:C1:99:A9:F3:67:9F:5A:3E:1C:78:C9:A9:32:9B
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1b:ce:13:8f:2e:63:e1:45:c3:ae:11:6a:5e:02:f2:2c:c3:
17:f0:09:44:fb:1a:1e:0c:b9:a7:ad:eb:f3:b0:9a:5c:c1:05:
0b:cf:8d:ea:19:bd:0f:2a:69:83:a7:36:92:05:27:dc:c6:91:
c0:b4:8d:1e:49:c2:0e:b1:35:cf:e2:a2:b3:2d:fa:28:09:65:
d9:f9:af:42:20:d3:b6:f9:e9:03:ee:a5:cc:8d:7a:4c:d8:f8:
66:60:79:d1:0f:c6:78:46:12:ee:3a:de:3b:19:7a:16:f5:9e:
df:18:34:a4:92:66:41:24:76:57:5a:52:20:8c:a3:ef:2f:d0:
0d:84:1d:93:e9:93:4d:f6:40:11:6f:ff:4c:76:11:14:90:c5:
f4:17:a0:93:7f:7f:71:d6:76:92:6a:a9:a3:d5:78:68:16:62:
e6:1c:c7:39:08:9c:80:f8:e5:99:5e:21:39:41:fa:07:f6:73:
eb:ab:25:2d:cf:01:34:8c:0a:f6:54:a2:20:e5:5d:93:18:cf:
ed:fe:65:ef:b5:aa:04:2a:92:7e:12:df:f6:e5:b7:af:77:65:
d4:6b:42:6a:b9:90:f7:76:4f:a5:f6:ed:f9:99:05:e9:f4:34:
14:b6:ba:8f:13:ce:bd:6e:7c:fc:29:b0:61:f6:e3:78:0a:a0:
1a:26:53:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:48:33 2025 by rpki-client