Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
File: 3R2uzTCut0ZSu92l2tlnbOSIqkk.mft (raw, json)
Hash identifier: wfIDRnfN0ZD7/Iax+HXmGt1gBLMk8bM38PKa/SCcHzI=
Subject key identifier: 8B:D8:AA:D5:AD:01:AE:A0:FE:2E:CE:F0:11:71:22:8A:81:34:BD:EC
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 019A2DB20F7A6A1A8982C310E3FA3760D4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
Manifest number: 0A22
Signing time: Wed 29 Oct 2025 02:00:35 +0000
Manifest this update: Wed 29 Oct 2025 02:00:35 +0000
Manifest next update: Thu 30 Oct 2025 02:00:35 +0000
Files and hashes: 1: 3R2uzTCut0ZSu92l2tlnbOSIqkk.crl (hash: AQWM6j8rVwJcObZUUydNFzqOw5OeLAuTFCd4LoeRme0=)
2: 3jwAJkscmhb8NSw4un_w0ZUqE_E.roa (hash: /Q2oG/fmxx/4QlsXXEqOyxHV9Ye6s1RkScscquc109A=)
3: 4mOa1eiOJdcewQ4JsIW-qskCauo.roa (hash: iU5a4TzwFm2kJsvICm/D9T1ZRQoz++Cq67dw1/HeL2g=)
4: CXGUOccTDu6x1YyIQfa-qjSpPdk.roa (hash: r4qpBtId2VEmuyzWlIPXdikWdV98Yneiil1e7VOsia4=)
5: IlOsEMD7ILB9j5FhhZ10NN6XXx0.roa (hash: gwOuiCu86d+6YjbDxDzDd3u72bl4nQy8FzU+NPDlo3k=)
6: cMeqdhzIVxayTI5Te-oZwPQzjz0.roa (hash: opO/yGSPCMGlHiRXXAkyr0DveRWYRoFkmjqGZrYYDFc=)
7: dsfkSXYJLfZWJjDQMc0Y0owm7FA.roa (hash: W0p5k/KWht0yDd7EzO060gDAd+rVO0Q+Y0m/UDAfM10=)
8: z21uLBAl7J5qNeu7_wTnfr1gN3Q.roa (hash: hGK3SDsyu3nnm6fMnZyOrn3oCumiT/HHk1hSsPcxxpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:b2:0f:7a:6a:1a:89:82:c3:10:e3:fa:37:60:d4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: Oct 29 02:00:35 2025 GMT
Not After : Oct 30 02:00:35 2025 GMT
Subject: CN=8bd8aad5ad01aea0fe2ecef01171228a8134bdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:44:da:cd:dd:c5:2b:ad:8b:91:a2:8e:83:0a:
d8:79:13:94:ba:2e:92:07:e8:6a:99:1d:a5:ad:87:
3c:e8:b9:03:c4:bc:07:77:4a:48:4d:0c:fb:78:dd:
f3:81:fa:16:5b:60:a7:eb:88:60:cc:f2:3f:96:6e:
ca:6e:2a:7f:b5:60:8a:17:9a:dd:e0:e6:14:c6:0d:
0b:19:16:e1:29:ae:2b:9f:d2:07:9b:a4:84:7a:ed:
86:f4:5b:d0:20:ae:f4:ac:85:e2:f5:a8:8b:24:39:
5c:cc:0c:86:e4:48:48:f9:ee:94:0a:d0:a5:20:fd:
8d:33:62:00:f3:a3:2b:98:3d:46:d7:69:e8:45:6b:
c3:c3:dc:07:92:f6:e1:ea:66:f9:45:b1:cc:2b:f1:
50:36:ee:41:bb:78:01:c4:d3:07:76:bf:c5:a7:74:
df:31:9c:06:f1:c6:3e:26:cb:35:f8:74:03:44:af:
3e:4e:5b:44:76:5a:27:9a:77:1d:3e:f4:b3:6d:66:
c2:d2:47:3f:c1:0f:23:38:43:c2:f5:97:37:e6:82:
d7:eb:3e:84:3c:8d:ef:d5:f3:d6:28:39:2f:77:ad:
7a:5b:58:04:31:2f:42:90:2b:0a:61:e9:3d:e4:3a:
a1:b1:ac:c1:8c:17:b3:ab:0f:2c:f0:56:14:11:0b:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D8:AA:D5:AD:01:AE:A0:FE:2E:CE:F0:11:71:22:8A:81:34:BD:EC
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6a:2c:41:87:bb:cd:1b:3e:2e:5a:e5:11:de:39:b1:e1:ce:
e3:ca:86:a8:86:0a:d7:e5:ce:30:bb:36:47:42:95:f5:b5:4a:
30:b9:34:22:b3:dc:88:e3:e0:60:96:30:e6:ea:ba:61:b4:d6:
47:5a:d3:c9:21:3c:8d:d4:03:1a:50:b0:74:85:7d:91:cc:ee:
21:e5:54:7f:fe:05:2a:69:8a:dc:37:94:50:51:3b:ec:c7:a4:
69:ac:ae:e1:15:7b:fa:63:0f:5a:49:42:ff:17:46:65:e4:d9:
fb:69:bd:2b:af:a1:be:27:c1:22:08:64:8b:b2:cf:fe:e9:ad:
68:10:ec:d0:db:26:9d:9d:43:0b:2c:85:80:c9:a0:38:a0:2e:
8b:29:e1:c2:73:d8:da:e0:78:e4:56:b0:36:71:64:65:d9:fa:
0d:ca:50:9a:ba:f2:63:c5:bf:84:b9:e8:83:af:b1:25:a0:d5:
0b:c0:7a:3b:d0:3d:72:cf:4c:4a:76:0b:ad:46:40:c3:6d:ee:
a2:db:c5:26:83:6a:b8:3d:6a:7d:38:96:5d:45:84:7f:82:ac:
fc:c0:85:a1:76:c4:85:a7:05:bc:25:31:dc:76:15:dd:49:91:
a5:b3:1e:37:b3:ad:10:cf:65:29:cd:2e:ba:ac:f1:12:16:b5:
82:39:1e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 06:50:16 2025 by rpki-client