Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
File: 3LZakO089K4EUlVO40uSqEdtzxA.mft (raw, json)
Hash identifier: +uyRs2I5msm6rOwKCE/V1E/tI/x5pj7Rkcw0pvyGrQw=
Subject key identifier: D5:30:7F:E7:B9:F3:A3:3D:16:A3:A7:99:EF:43:25:9C:31:02:D8:98
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Certificate issuer: /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial: 019A258A582EE5E7D1FE07540DFDAC91C875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
Manifest number: 170C
Signing time: Mon 27 Oct 2025 12:00:14 +0000
Manifest this update: Mon 27 Oct 2025 12:00:14 +0000
Manifest next update: Tue 28 Oct 2025 12:00:14 +0000
Files and hashes: 1: 3LZakO089K4EUlVO40uSqEdtzxA.crl (hash: 4tQ4xQooltS/wLbQAbFIOlrtix6sUaKCqFWpzyS9NeU=)
2: 4TacCA5fNMvJzrQKHYvZp1FsTCY.roa (hash: PoM3PiM+eiQs0IrTl3gGzaDWCG/B3yTTKS+dLnu4Yd0=)
3: DPsq0OHf8MVPtjf1meByn-PM7Q0.roa (hash: oRmxnthJtArJCnDUTkrTLD5StLSleGnIBmGT013Rl5I=)
4: RMqD4QZBwk_wzHsp1loeMRU2jMk.roa (hash: nCQ5Eq/Er1do1Gz84LWpqzugPw71HtroPiJZlZhFk8k=)
5: naw_j5gKrLLjpLmDjj2VeLVHcW0.roa (hash: 9rsCrKDYxMlNCKWks8aC7H+vNumWPUdz18CO2dwuUHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:58:2e:e5:e7:d1:fe:07:54:0d:fd:ac:91:c8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Validity
Not Before: Oct 27 12:00:14 2025 GMT
Not After : Oct 28 12:00:14 2025 GMT
Subject: CN=d5307fe7b9f3a33d16a3a799ef43259c3102d898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:40:b7:b7:69:a1:2f:c2:11:93:65:28:ae:dc:
24:57:4b:c9:a3:29:99:bd:e9:0e:5e:0e:eb:ff:59:
cf:80:c1:45:28:bb:bc:e0:92:f8:55:97:cf:cf:95:
57:3e:9e:0e:68:84:87:f9:6c:df:bf:2a:62:7a:8e:
67:6a:8c:27:8d:69:4d:e8:8c:b5:59:e4:09:a2:3f:
3b:66:c6:24:74:0f:32:05:32:a1:a6:15:55:bc:99:
ad:c3:6a:09:a1:79:f7:32:3f:dd:ea:4a:97:50:5b:
97:52:6a:c4:0f:6e:3f:76:6f:b0:d9:1c:6c:17:7f:
29:49:1a:07:56:ae:11:a1:96:28:c1:13:ea:31:01:
44:c9:d1:de:eb:60:86:3b:0d:d8:1b:0f:66:55:f5:
24:8f:76:c0:ff:fd:47:b1:d3:c3:04:41:69:b1:80:
59:be:08:f2:61:3e:51:e9:eb:f9:42:e4:04:10:08:
7a:bc:77:48:ad:f8:8f:04:8d:54:9b:ca:ae:2e:d4:
53:8e:15:32:72:14:00:63:6a:63:ee:1c:48:8e:a9:
27:d1:fb:8e:98:8a:ec:ba:cf:51:d4:27:0a:d4:4e:
af:12:d5:44:d8:39:2c:ba:d9:76:b9:9c:37:42:35:
b7:cf:2e:ff:1e:8d:e3:38:e3:42:d9:4f:27:db:c3:
3a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:30:7F:E7:B9:F3:A3:3D:16:A3:A7:99:EF:43:25:9C:31:02:D8:98
X509v3 Authority Key Identifier:
keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ad:8e:f9:c1:d0:2f:36:4b:91:75:88:c2:e7:1c:13:e6:70:
63:e8:90:2b:5a:c5:fe:28:64:93:0f:ef:65:54:4e:b0:1b:ca:
9f:cd:df:40:f0:1e:11:73:f4:a4:b1:a9:42:42:69:a6:2d:e2:
b9:4a:ba:b3:22:bd:ca:c6:82:19:a5:59:49:d1:94:87:a8:3a:
70:a2:e7:74:59:5d:c2:e3:b4:bd:99:05:6b:11:d9:37:10:dc:
5b:aa:1e:0b:e0:a8:f8:fc:8f:16:24:fa:35:e7:d0:e2:dd:91:
93:d6:a7:ee:c1:5c:12:f8:ac:7b:7b:a5:75:0a:0a:ba:a3:b3:
84:ff:80:81:8c:2b:da:f6:35:b1:e8:2b:81:23:b2:82:a6:a7:
66:4f:9c:13:1d:d4:eb:2d:21:ed:62:de:8f:b0:9d:12:cb:a2:
b6:51:b4:67:4f:c2:7f:a6:a1:d3:ed:4b:cc:d4:50:b0:4e:ca:
9f:e4:50:03:23:e1:46:f9:50:08:91:1c:ba:4b:bb:44:75:b3:
0c:55:37:de:0d:3e:b6:e3:62:1b:31:5b:41:45:c1:6f:e4:02:
8a:d8:c0:8e:bc:c7:33:dd:fd:c7:51:69:b6:3a:7b:cc:c4:a9:
ca:ff:1c:f7:74:50:ea:4f:77:bc:7d:13:03:c9:8d:5f:18:aa:
ea:78:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:35:19 2025 by rpki-client