Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
File: 3tcjnbgdYfmNWGODzMEl1mEGyzA.mft (raw, json)
Hash identifier: wF2ZKhPSj7DjP8NLTp+dmWjEs4iWT1+eDLxutUhmbQ4=
Subject key identifier: 97:E1:B2:42:99:D1:0D:8E:C0:FD:21:79:D4:08:3B:2B:2D:41:21:F0
Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
Certificate issuer: /CN=ded7239db81d61f98d586383ccc125d66106cb30
Certificate serial: 019A1BAC2CA8744B9A869EA4A2469EF8801D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 14:00:59 +0000
Manifest this update: Sat 25 Oct 2025 14:00:59 +0000
Manifest next update: Sun 26 Oct 2025 14:00:59 +0000
Files and hashes: 1: 3tcjnbgdYfmNWGODzMEl1mEGyzA.crl (hash: U+9Flx/V/Oyd+Wylb19gU3mZiVeFSrSbAHjJLvlIAss=)
2: E2CYjkWjcDRjmlm-uGqq2cX3-bw.roa (hash: SlY4rIEahH8X3kEcUUwCddcbIz7/S16cK2GTdrw1N+Y=)
3: EpMLaYChUvPW43eW66M41o2KSpc.roa (hash: PU2MBAWGAP6VAtPvAGor5W80iPyTDbgTBn9WAJahQLs=)
4: w0PKwUFljbRq5uVzYVthjHLkXQY.roa (hash: 6g4grLiYtJiUu1m03msVb0si+AZ8cTE6ZMD8wFTtcLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:ac:2c:a8:74:4b:9a:86:9e:a4:a2:46:9e:f8:80:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30
Validity
Not Before: Oct 25 14:00:59 2025 GMT
Not After : Oct 26 14:00:59 2025 GMT
Subject: CN=97e1b24299d10d8ec0fd2179d4083b2b2d4121f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:91:bc:57:43:22:70:7e:a7:78:f1:00:ad:
c4:0a:a9:8c:aa:a0:b7:33:96:1b:cb:56:d5:59:f2:
73:b7:09:e3:71:60:bf:67:42:51:f6:f1:17:da:48:
d6:81:1f:a4:e0:43:42:9b:1b:ee:6c:d7:e2:14:d5:
d1:b6:46:a7:c5:8d:9e:81:4b:5c:84:7e:6d:79:c8:
69:3d:a9:cd:40:fd:db:94:43:db:34:69:d8:fa:f2:
e9:16:e6:61:7b:e1:ab:56:fd:b9:b7:7b:39:28:99:
e8:a2:5f:8b:92:13:18:66:14:6a:09:5d:f2:b2:f6:
e6:85:e1:9a:61:62:95:30:de:c6:e4:29:ee:2d:8d:
12:b5:11:f1:b8:32:e0:3b:46:31:b2:6c:c1:ca:33:
87:26:2e:85:be:96:a2:91:3e:ff:c1:1a:11:2c:ad:
68:7d:0c:6e:01:91:c4:dc:87:55:87:9d:c2:16:af:
72:4e:93:a8:4a:14:50:91:97:70:ed:31:09:dc:79:
cd:c8:e0:dc:1c:42:85:2e:c6:f3:94:9d:06:fa:7b:
a5:e9:40:f6:22:a9:68:4c:4d:11:d1:62:57:60:d0:
b2:e3:39:dc:b2:4e:a3:f7:83:af:02:dc:89:ad:c2:
5e:d6:ab:ff:43:fa:81:bb:fa:08:dc:11:63:1b:b6:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E1:B2:42:99:D1:0D:8E:C0:FD:21:79:D4:08:3B:2B:2D:41:21:F0
X509v3 Authority Key Identifier:
keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:47:c1:c3:99:48:b4:30:92:39:20:4c:1e:a3:28:d1:be:37:
b1:99:17:f1:41:65:17:84:28:42:9f:d9:3d:e0:1f:63:df:1e:
65:c8:db:ec:40:ae:e2:24:a1:be:f6:73:7e:7b:dc:6b:0d:a9:
15:35:04:ab:c3:91:e6:f2:82:8c:22:0a:69:ca:a8:8e:8a:66:
5d:35:d0:ed:49:06:75:5c:84:6f:81:8f:43:e1:e5:14:06:eb:
80:bc:e0:da:d3:1c:3b:e9:7c:79:30:5d:86:7d:c2:b1:19:b5:
26:af:b6:06:e3:63:62:c2:9c:f0:15:73:cb:94:ae:cd:bc:90:
e1:f4:d0:20:ca:06:e4:c9:82:c1:52:30:a8:13:8e:c0:84:e0:
0d:78:4c:90:64:64:e2:e1:24:b3:63:11:3c:15:ba:3b:18:bd:
1e:93:95:15:6b:a7:e4:3c:4f:94:23:67:fe:35:d4:ff:97:13:
bd:f9:a0:d9:7f:76:12:1a:2d:b8:be:72:05:64:2d:db:a9:e9:
e6:f8:33:f6:35:5d:e0:77:0f:0b:11:83:f7:d6:7e:6b:90:8b:
ed:06:47:84:c2:e0:84:29:77:a0:fd:6a:05:fd:2e:18:51:ec:
61:22:78:2d:eb:73:56:21:95:4c:fe:d6:9e:22:71:5c:af:03:
cd:b5:06:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:06:46 2025 by rpki-client