Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
File: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft (raw, json)
Hash identifier: OAnMJBpnjxQzwWl8GIznZl9tHTPNVhRObbYxTqmcHaU=
Subject key identifier: 45:B7:60:C5:EA:FA:EF:C8:B5:98:11:BE:9E:9C:89:57:2E:28:6A:0E
Authority key identifier: DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
Certificate issuer: /CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Certificate serial: 0199EED37C5319BA449169688F5E3F5742FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
Manifest number: 0F5C
Signing time: Thu 16 Oct 2025 21:01:01 +0000
Manifest this update: Thu 16 Oct 2025 21:01:01 +0000
Manifest next update: Fri 17 Oct 2025 21:01:01 +0000
Files and hashes: 1: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl (hash: JkawEkbZH2TrxEO3zzZbQ7nPcE4U90Oy3YSL9SBlItw=)
2: Kw550ydpOki0PWOYy-6z5BR-VIE.roa (hash: DJKKlAPQ1FQMVESwtaTdBMt71sNwkspOh/dlMgsjkTY=)
3: fcEpjbgKYOO71SWou3_dCE-kLKk.roa (hash: zROet63WRPPKV6TiwIGdua33aTn4W6zOjjUbs9hhWRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Oct 2025 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ee:d3:7c:53:19:ba:44:91:69:68:8f:5e:3f:57:42:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Validity
Not Before: Oct 16 21:01:01 2025 GMT
Not After : Oct 17 21:01:01 2025 GMT
Subject: CN=45b760c5eafaefc8b59811be9e9c89572e286a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:84:a8:62:61:09:75:45:ed:40:7d:8e:81:
b5:96:3f:6e:c6:bb:75:5e:3e:89:4c:f0:a7:0d:4a:
71:96:25:58:9c:85:b5:a7:ab:7e:d4:6d:17:cf:c0:
e1:ef:35:ef:4c:72:a0:f1:f0:9b:7f:ac:a0:92:58:
bd:fa:d5:4a:3e:7b:9a:af:5e:f3:af:99:2e:0b:d8:
7a:2a:5e:37:3e:76:b9:62:9a:93:76:1d:fb:c6:3a:
8b:45:78:c2:e4:0c:2d:0c:97:f4:2b:02:a6:c5:64:
e1:98:03:e8:02:54:4c:23:4f:0c:89:ab:3d:bb:1e:
a9:a4:f2:b9:d2:a5:84:61:18:62:81:71:7d:a0:54:
26:06:af:ce:96:d6:b5:e4:05:ae:c8:72:80:f5:a6:
5e:46:be:f2:02:8e:ab:99:44:dd:b8:52:46:d1:e1:
2d:c9:61:7e:7f:6d:3f:42:36:3d:a5:26:d0:92:e4:
82:fc:49:d7:9c:ab:f4:05:37:90:eb:c9:40:31:7e:
ea:c5:4e:e6:9b:a5:a5:2c:ce:57:69:65:8a:fb:84:
a6:ae:09:65:94:e8:e1:f4:92:d1:8b:af:58:fb:9b:
34:6b:21:17:21:47:38:78:5e:b3:70:07:7e:e3:fa:
d4:a4:95:66:d1:a3:19:29:6d:8a:12:cf:a6:07:36:
c4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B7:60:C5:EA:FA:EF:C8:B5:98:11:BE:9E:9C:89:57:2E:28:6A:0E
X509v3 Authority Key Identifier:
keyid:DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:46:1f:ce:bf:29:0a:d9:8c:51:a6:a6:fc:f9:51:97:f1:14:
08:5f:aa:c2:ff:c4:5d:de:41:99:24:5e:b0:6d:c7:f5:f0:a4:
d8:f2:2a:9c:2d:dc:1f:73:da:7e:fa:ea:2f:53:1d:6e:b1:45:
cc:4d:a6:cf:a2:16:73:b1:17:f2:bd:3a:90:a8:83:38:d1:c0:
44:76:c3:fd:99:bb:66:18:5e:2d:f9:68:92:47:e7:81:cb:d7:
cd:87:84:67:ff:df:45:58:6a:60:48:11:37:15:4e:59:4c:0c:
51:78:72:c0:6a:d6:65:ca:a9:61:17:fc:d1:48:78:79:4f:89:
e1:86:63:32:c7:11:c6:ba:e5:b5:08:ec:17:39:05:d3:85:43:
27:24:f5:e0:68:79:a0:8d:bd:8f:9a:36:b1:a3:83:f7:dd:9c:
57:87:a5:56:39:28:8a:b8:f5:cd:fc:af:b4:7e:e0:d9:7a:17:
4d:69:1e:25:1c:e5:38:ac:31:e8:6b:f7:6a:53:57:1f:d9:69:
bb:b0:e0:16:de:76:c2:36:54:31:ed:c8:4b:4a:f6:d5:95:7c:
7d:64:13:ce:8b:ca:98:19:3d:ab:b0:5e:1b:03:c1:cc:e4:0b:
6d:9a:79:7b:ea:63:b6:57:aa:5b:ce:3e:4a:95:58:f0:68:a5:
5f:7e:7d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 01:21:52 2025 by rpki-client