Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier: TMTRLbxm0ZWiQFgL14o4TbN5ft0jw974Hog8f585r2k=
Subject key identifier: B7:E6:CD:29:D4:9D:28:63:E0:1D:2A:66:87:3C:1A:B3:C6:DB:0C:9C
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 019A0B5E3BCD57BDFF27E92550C287C0630B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number: 119D
Signing time: Wed 22 Oct 2025 10:01:56 +0000
Manifest this update: Wed 22 Oct 2025 10:01:56 +0000
Manifest next update: Thu 23 Oct 2025 10:01:56 +0000
Files and hashes: 1: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: VlRTwTHcniuAQSD85FTnE2CRIoTGYKuOK9bQW6Usf+U=)
2: 4PgtcW6j7xPoaJPy67vk2tMAXu4.roa (hash: fufIwyPbWqbMyORM68+h1FhSNKXbFzjdgG7WcXkavWU=)
3: cUPSsBWZ4irx4TApxzbroJpf5do.roa (hash: 6GPPFraRfTGyKrm5jIIIVF8Jt+KHlsZR8YFMwLgpuuE=)
4: xqYP462dYCt-0eOV8zXikdtxg14.roa (hash: YzKJbzm4Szaaz/1aNRHY+rmqu5/8YwNywOTzBNgzdeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5e:3b:cd:57:bd:ff:27:e9:25:50:c2:87:c0:63:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Oct 22 10:01:56 2025 GMT
Not After : Oct 23 10:01:56 2025 GMT
Subject: CN=b7e6cd29d49d2863e01d2a66873c1ab3c6db0c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:10:8b:ee:28:ee:bd:5c:27:4d:de:a9:38:
4b:1b:fe:70:0a:d7:73:21:e1:db:f9:03:44:29:d8:
5b:e3:8b:5b:2b:a5:f2:69:b0:e3:15:71:70:b2:b0:
78:9a:41:93:7e:63:68:4c:3f:55:88:04:13:7c:0f:
50:1e:ab:97:9a:d2:60:74:6c:de:a2:9c:67:94:09:
57:52:f6:15:9e:6d:5d:11:89:72:50:d6:24:64:ca:
da:a3:61:41:0b:c2:c0:26:3a:c5:03:77:a3:1f:bd:
a3:4b:42:d4:87:72:5c:26:fe:43:6f:63:ee:75:64:
46:2d:ee:79:01:74:e6:4e:51:0c:85:af:67:23:f5:
e4:07:da:e3:09:20:0f:d0:70:13:ce:e9:57:91:7d:
26:6e:32:ee:2a:5a:e2:7c:bd:98:1e:03:89:62:16:
1b:0c:17:bd:24:81:36:c6:ff:fc:21:9c:6f:8e:59:
ef:cf:89:80:b7:88:3c:83:34:bc:d4:f5:31:65:bb:
d7:cd:34:a4:d6:3b:8c:2e:63:25:ec:e6:00:c6:3b:
13:42:9f:e0:8e:25:13:03:9a:5a:73:38:9d:47:2c:
1e:c7:1b:7c:10:62:6c:10:bd:d7:d1:1a:10:1c:6d:
fa:8f:e6:92:4e:7e:71:64:b6:70:38:97:27:57:7e:
0b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E6:CD:29:D4:9D:28:63:E0:1D:2A:66:87:3C:1A:B3:C6:DB:0C:9C
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a6:1b:34:2b:40:a9:6a:97:02:9c:30:f1:c3:64:74:ee:4f:
c2:2e:ef:a8:41:09:92:37:9d:ac:a0:38:93:14:25:59:fc:63:
82:58:25:6f:81:40:f1:a8:78:65:cb:c0:11:8e:4b:de:f1:6b:
06:a2:25:20:bc:a4:d5:02:11:71:a3:32:d2:88:2c:92:85:10:
ff:80:2a:6a:be:4d:60:68:15:10:2a:b6:bd:67:7c:2f:4d:4b:
75:17:27:e4:79:9c:bb:b8:d6:be:ec:71:f2:f0:ec:80:00:03:
ae:10:c8:a3:db:58:d9:7e:dc:4d:8e:ad:f2:6c:97:13:57:3e:
c7:39:59:f7:5d:3c:e1:b2:82:1c:03:5d:1d:76:c1:c3:9f:87:
b8:f5:31:31:5a:84:c9:4e:c1:84:ca:62:86:97:63:4b:dc:17:
5e:c9:f5:48:53:02:5d:ec:04:b8:9d:a2:55:97:93:8b:ab:dd:
00:47:8b:3f:dd:5b:18:f6:8a:c9:e7:39:dc:9c:71:59:17:33:
74:ed:eb:64:e2:4a:12:7f:32:67:62:7f:c5:fa:e7:a5:08:06:
bd:0c:ca:32:58:79:37:fc:60:f2:86:69:e6:c6:10:de:04:ec:
6a:3f:b3:cc:0f:62:12:03:3e:14:83:5d:ca:ff:40:86:28:9b:
ef:20:68:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:10:43 2025 by rpki-client