Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier: iBu9u0TtmAaDeeXidtXZG171iF3dHTn4dpC87B/oj/Y=
Subject key identifier: DD:E3:21:3E:A4:8F:80:6F:72:31:EC:5D:F5:DD:4E:71:0C:4A:2E:1B
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 019A1CBFBD7AD9FC9703915AF081300A8E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number: 0D87
Signing time: Sat 25 Oct 2025 19:01:59 +0000
Manifest this update: Sat 25 Oct 2025 19:01:59 +0000
Manifest next update: Sun 26 Oct 2025 19:01:59 +0000
Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: 7843YeJ7mH/mv2yc1FZGaK5r6Ie72rpnHs0FDRk9h2A=)
2: 8miIDeBQxB0aKJY-TlsIuuJ2hww.roa (hash: mQmM8Cjnfx5WSvhPSj11m+hm6JvBiNUtIRExWbof9J8=)
3: IRGnT1eQmUBmgR6_xtusELr-83s.roa (hash: dJ3+bDwzY4UO43kbNXGDeFrUEwRtOB0R3J1TQjuxqCQ=)
4: aw3P8V17V992wZUulFnFkkVrMmo.roa (hash: O9AIELr13JUWTjKqPnJ8lbjYgl5+VRQqDU69j3HTMwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:bd:7a:d9:fc:97:03:91:5a:f0:81:30:0a:8e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: Oct 25 19:01:59 2025 GMT
Not After : Oct 26 19:01:59 2025 GMT
Subject: CN=dde3213ea48f806f7231ec5df5dd4e710c4a2e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3e:c2:d5:da:7a:a4:13:ca:3a:6a:ae:cc:c3:
9b:86:9d:2c:3b:34:8e:24:98:29:e0:27:9c:b5:7f:
b7:35:77:ff:cd:7a:bc:60:b6:77:1d:9a:c2:45:0d:
b1:a4:3e:87:7a:24:e9:43:c4:47:e7:d0:ef:2a:a6:
23:92:44:7a:ae:d9:7c:8e:58:61:02:82:7c:f3:d5:
40:4e:1a:47:1e:90:5f:d4:ed:2f:95:4a:2a:bf:c7:
68:ba:a7:68:02:49:97:e2:f1:97:e7:ca:f5:38:d8:
eb:da:c5:96:a4:18:e5:ad:1c:66:50:c5:cd:0f:fc:
7a:17:02:e3:49:6c:ec:3a:5b:f2:dd:09:4b:c0:9e:
b7:ec:8c:b9:54:1f:d0:d9:92:61:51:2e:58:01:9f:
0f:d5:73:43:5e:d4:ad:c4:8a:9c:2b:a5:3b:48:47:
24:18:58:f5:5c:25:7c:2e:cf:0a:8a:6e:24:60:5b:
44:9a:53:d7:72:9a:92:a3:c2:87:10:d3:64:dd:5f:
c8:8d:15:d6:5e:ae:e0:9d:21:4d:17:f9:2b:c9:7b:
a1:78:e7:52:d2:76:8d:d4:36:08:91:67:73:df:39:
2f:8a:4f:c1:5e:48:c5:6c:13:3c:5b:40:05:e0:bf:
59:3b:b4:7c:d5:84:27:cb:29:ca:a2:8d:4a:1a:88:
26:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E3:21:3E:A4:8F:80:6F:72:31:EC:5D:F5:DD:4E:71:0C:4A:2E:1B
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:31:cc:6d:94:e2:46:ec:b9:42:01:0c:f9:46:40:20:e2:88:
9c:f3:f6:9a:1c:6b:00:ea:63:26:65:0f:9c:9e:45:bd:6e:5b:
c8:46:70:9c:b0:fd:18:98:78:76:2c:9e:61:31:20:cc:dc:5e:
8e:91:bc:fc:7e:9f:d2:bd:d0:e8:01:52:21:2e:59:c4:31:24:
c9:f6:3f:5d:d2:f3:a8:5f:d4:22:2c:58:bf:0b:f4:32:31:00:
eb:ed:be:c0:c5:b7:21:cf:f8:dc:af:7b:bc:1a:17:73:fd:28:
af:17:40:5e:c0:44:a5:0a:95:26:11:ae:70:7d:2a:72:ac:df:
74:a8:f7:58:2f:87:34:9a:73:21:c5:79:e4:00:01:1c:44:87:
39:82:48:40:73:9b:93:39:5e:e2:df:ed:35:1a:63:3f:4c:1d:
b1:b6:7e:f2:e6:cb:e7:17:51:81:34:87:aa:76:a2:e9:91:2e:
94:9a:ae:b6:12:dd:4b:4e:08:3f:ac:c5:b7:e2:b4:ed:39:f4:
df:f3:63:23:72:e6:c7:c6:9a:15:15:65:1b:30:90:9c:b6:35:
6c:03:73:27:28:5c:c0:b3:55:8b:30:e4:01:c7:da:db:e9:19:
fd:d7:68:b2:87:ec:c1:74:d2:e6:a0:a0:87:24:35:cc:bf:2d:
b5:5b:2d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:32:28 2025 by rpki-client