
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File: 3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier: 9lYKEZOWO+HTHXA0eSFbM4HC3BVPJAwvFm2gslFGcM0=
Subject key identifier: 29:98:FF:5E:B5:10:48:A7:2A:43:D4:BC:28:D5:7A:07:1F:BC:DD:06
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial: 019936EED93794BD5C0345DB39026637DFAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number: 06F4
Signing time: Thu 11 Sep 2025 04:00:46 +0000
Manifest this update: Thu 11 Sep 2025 04:00:46 +0000
Manifest next update: Fri 12 Sep 2025 04:00:46 +0000
Files and hashes: 1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: J0MFrs/ghYOT5uYjU0peJERKd76L5l9cixSzlHps6xE=)
2: HrIwTwMD6cd99R3d7bEiTOryXZg.roa (hash: 1wrHqn0lkUk+GnZl+JBgqFqtnLiVA3gNpwduqpO2T9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ee:d9:37:94:bd:5c:03:45:db:39:02:66:37:df:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
Validity
Not Before: Sep 11 04:00:46 2025 GMT
Not After : Sep 12 04:00:46 2025 GMT
Subject: CN=2998ff5eb51048a72a43d4bc28d57a071fbcdd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:45:ac:e6:c5:bf:f9:13:9b:48:76:cb:0c:
4c:c9:74:a8:3a:15:1b:9c:64:23:9b:a7:9c:30:8c:
89:cd:8b:ad:25:b3:79:6e:e5:68:71:81:2e:67:16:
77:d4:c2:31:2c:a9:fb:1d:03:c8:20:c9:80:65:04:
7a:34:b2:46:8e:8b:5f:e2:72:81:23:c7:21:58:5a:
2e:40:30:2f:a0:66:8e:50:b2:52:72:40:7b:8f:95:
ba:a0:07:33:db:0b:82:cb:48:80:3e:39:be:09:d7:
db:6e:fb:f5:fa:d8:77:bb:6d:ce:5d:3f:b0:61:3e:
23:fe:6d:70:42:f4:28:2a:49:25:54:54:33:2d:f0:
7d:bd:3e:60:53:3e:64:33:80:d4:df:2c:5a:37:c0:
72:1c:69:ac:a8:15:77:e8:71:c3:94:06:1c:e7:1b:
22:ea:9c:02:ed:16:48:8f:d6:5a:b7:61:4a:53:d7:
d1:61:66:1f:2f:49:4e:7d:84:3e:c0:6a:a4:dd:f1:
bf:c8:c0:7b:bf:ef:b5:42:8f:62:0b:4c:01:89:df:
7c:d2:2d:5c:7d:9c:ce:5c:85:e6:39:0c:f4:0a:0a:
4d:d7:bc:57:13:db:bc:40:50:cb:e5:ba:f6:98:32:
98:a0:7a:b9:6c:4f:9d:19:f5:a5:d1:06:6f:78:88:
f9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:98:FF:5E:B5:10:48:A7:2A:43:D4:BC:28:D5:7A:07:1F:BC:DD:06
X509v3 Authority Key Identifier:
keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:82:48:f1:c2:4d:26:4c:56:fe:79:8a:21:fb:f5:31:1a:34:
06:95:ca:c3:b1:fd:e2:85:64:78:cb:5c:84:bb:d0:47:18:7b:
c6:92:09:ae:47:ae:20:5f:c1:38:ba:53:b0:86:e8:f5:3f:a0:
2d:5b:cc:06:ec:e8:c6:37:0b:2a:fe:cd:64:6c:ee:7e:31:ac:
2b:3c:66:e9:bd:30:b3:5f:e2:01:1a:f2:03:47:4d:07:d6:ad:
0d:2a:22:fe:5a:73:eb:01:59:51:be:88:7b:5c:49:fd:de:4a:
60:ae:05:9e:fd:63:7e:b5:81:0f:6a:11:26:75:0e:f9:81:92:
47:3d:11:22:6d:85:d1:ce:0c:2b:7d:e6:7f:b7:17:1e:52:a3:
f4:a3:57:bc:df:4f:d0:08:7b:a3:1c:4f:61:14:e8:cd:b4:ef:
36:ee:ac:6c:e8:89:f6:9c:ee:e9:4a:7a:aa:a9:d1:2d:13:62:
dc:91:5a:bc:c0:47:76:1e:88:bf:86:63:14:fb:54:a4:e5:97:
9c:72:58:f8:7e:42:90:05:56:3d:9e:c8:b7:18:a4:b0:8d:c6:
23:cd:8e:36:89:1e:07:41:d9:ea:e8:87:93:c9:47:14:1a:47:
04:99:c8:71:75:95:8e:ea:8a:91:0c:e9:1c:18:7d:d5:68:ff:
13:86:e9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:30:27 2025 by rpki-client