Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: Ohcde5BXeZ+GA06NZdaTdsCG/B0r5VtHe3JLLYNjYUg=
Subject key identifier: D7:F5:5F:BC:FE:FD:83:6C:2E:4A:59:76:C5:DA:F5:92:B1:83:C1:24
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 019A209CB9622DAA64C9A4BA629EF7458DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 13:02:13 +0000
Manifest this update: Sun 26 Oct 2025 13:02:13 +0000
Manifest next update: Mon 27 Oct 2025 13:02:13 +0000
Files and hashes: 1: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: jx0jl5OzZXamZ3LBgZhSGleDLOJGZdC9NCfFq707yHo=)
2: KW800OmJGIdT7uikc0QcQ975IG4.roa (hash: dwHKNqVSICACPiCia+yUDPbsR26gug+E9f0Pra0zV6s=)
3: cEC9bPBmfz9Z43qJKU1IUGSC0lI.roa (hash: 4mEdeYIHzDK/DCJ4cVdrdS7DkgcRn2OeioiYgUbofOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:b9:62:2d:aa:64:c9:a4:ba:62:9e:f7:45:8d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Oct 26 13:02:13 2025 GMT
Not After : Oct 27 13:02:13 2025 GMT
Subject: CN=d7f55fbcfefd836c2e4a5976c5daf592b183c124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:df:da:66:e8:a7:63:50:7c:03:ff:22:77:cd:
b4:68:88:fb:d5:f5:54:48:aa:6d:67:85:1a:31:79:
c9:4e:0e:73:ae:4a:70:c5:de:f6:74:3b:73:01:9c:
59:ba:fb:10:39:8a:97:69:4a:5d:8c:be:56:e2:a7:
c6:0f:eb:1b:ee:fe:b8:f8:d3:6b:d3:2a:07:f9:d3:
92:ff:a2:08:a2:6d:97:c6:96:17:d4:a4:07:f7:f3:
dc:dd:b7:6b:b3:a7:4e:92:82:bc:dc:95:26:96:d3:
28:99:fa:5d:54:71:5e:84:4b:c3:54:4a:12:93:f7:
1e:55:cd:bc:cc:e1:ec:e3:ee:c2:6c:6e:ee:04:91:
87:43:77:ad:1e:59:43:1d:b3:e4:85:6f:f4:c5:c3:
d1:b1:3b:db:8c:ab:35:03:f1:e6:e1:f9:46:e2:3d:
ac:a4:68:b9:4b:29:a7:de:c9:92:37:b0:ea:f4:8f:
5f:bf:0f:ae:f1:3f:4b:2e:a2:37:f4:a2:58:07:b0:
26:54:16:a3:bf:ee:48:44:7e:1d:9f:a4:e5:85:2d:
2c:f5:4f:2f:ad:97:52:12:a2:17:f0:56:05:65:84:
83:1e:18:f9:50:84:a1:3d:ce:50:46:79:c1:a2:4f:
e0:bb:10:94:47:dc:ec:a0:8b:6b:8b:f9:02:c9:8e:
40:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F5:5F:BC:FE:FD:83:6C:2E:4A:59:76:C5:DA:F5:92:B1:83:C1:24
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9f:5a:27:70:94:9f:b1:9b:5e:0d:dd:39:18:3b:89:24:45:
d2:5e:3d:28:c5:80:5e:ac:08:19:3a:c7:75:bf:b0:d6:d6:0d:
ef:81:dd:dc:62:4c:a6:fe:04:ea:1b:7d:4f:91:90:3f:3f:c4:
69:b9:fc:57:c1:38:91:4b:13:3d:25:30:df:6d:dd:50:62:f2:
1a:1c:7c:e5:c6:5f:82:f9:39:a4:72:fd:4e:77:8f:1a:52:1a:
08:85:97:70:58:2b:ab:0d:10:b9:77:17:50:54:a2:bc:73:75:
64:b9:a2:90:7d:1f:8d:36:21:dc:bd:47:31:f5:3c:6b:62:16:
3a:0b:65:9a:bc:19:08:4c:2d:08:6f:74:b6:db:33:82:b0:2b:
47:9a:52:52:18:c7:32:3e:7f:43:37:f4:9d:fd:39:71:f9:07:
72:15:08:04:3e:7e:0f:11:87:09:d6:f2:75:ce:f8:6d:96:b1:
c9:bc:7b:95:61:cc:4e:47:d9:83:c0:2d:76:74:56:95:ca:a2:
7c:fc:f2:04:d6:77:91:b5:a1:a7:44:3d:21:88:cf:81:ae:72:
db:38:c8:02:f5:6c:00:b1:fe:b5:62:6e:51:96:24:94:dc:7a:
6e:3b:46:4e:e4:63:29:8a:5e:6d:d8:05:41:8b:2c:72:e8:8d:
3f:dc:67:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:40:49 2025 by rpki-client