Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier: gTlstYzWUW/2qHmpS5Fr6TrZVOhkmfmasH6aMTL5xXk=
Subject key identifier: 2E:A5:22:7F:E1:3B:59:0C:A4:C0:43:2A:DF:10:C3:29:BF:57:B7:A5
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial: 019A1CF528BF53320464FF83D713D0D58F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number: 16F8
Signing time: Sat 25 Oct 2025 20:00:20 +0000
Manifest this update: Sat 25 Oct 2025 20:00:20 +0000
Manifest next update: Sun 26 Oct 2025 20:00:20 +0000
Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: UvdorpfFa6GOLy1dvdRWid4wF/H1YoZ5CEZ0tdhmhdQ=)
2: CgFc8x26QM3VY1KiLgccdsxhrXo.roa (hash: P9EWdQX/EOCp7WZ5gfsQmoM4qU0udbuMuOqDFw597IY=)
3: RonOUjE1P34U6vbbFs9w9AsGyN0.roa (hash: fOrx68LqSTvTWV0sMnHRK4WODfXfA787GTb+IyVk3b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:f5:28:bf:53:32:04:64:ff:83:d7:13:d0:d5:8f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Validity
Not Before: Oct 25 20:00:20 2025 GMT
Not After : Oct 26 20:00:20 2025 GMT
Subject: CN=2ea5227fe13b590ca4c0432adf10c329bf57b7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a2:19:30:1d:d6:cb:3c:1a:eb:a3:6c:8a:ba:
40:8d:b5:f1:26:55:0e:30:bc:ed:29:eb:60:68:75:
38:44:9e:f7:c1:04:e1:34:a8:8a:06:99:b8:19:f5:
02:8c:b5:68:ee:b2:65:d1:bc:fe:94:f7:29:99:db:
df:88:98:41:e0:04:71:f7:59:58:09:b7:75:da:3f:
45:57:27:4d:30:c6:30:5c:d3:c2:cd:7e:12:ba:4e:
d1:38:75:f3:54:f7:86:bb:5a:da:5b:66:2c:0e:cd:
76:7a:0d:b1:1a:1c:1d:83:16:72:d4:f0:0c:b5:8e:
59:e3:6a:c7:09:4f:5a:5b:2f:e7:f1:8a:53:9a:4c:
95:61:1b:9b:51:e5:7d:e5:9e:be:f4:3c:c9:bc:48:
e0:38:d8:cf:63:d4:93:37:d5:8c:62:83:3a:57:c2:
cf:b5:cf:df:1b:01:54:0a:14:ca:15:04:fa:a1:b0:
8d:ec:19:c1:98:4f:06:53:40:23:d0:d8:e5:8f:2d:
4b:77:c8:53:ec:27:63:8c:e7:43:c5:89:9e:5e:4a:
29:a8:39:86:ce:48:d1:6d:a2:a3:65:e4:a8:d7:11:
a0:1a:6c:b3:e0:25:00:10:47:67:e1:09:2f:13:03:
d8:50:21:0e:a5:53:e1:3f:3a:dd:d0:2f:d9:0d:89:
47:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A5:22:7F:E1:3B:59:0C:A4:C0:43:2A:DF:10:C3:29:BF:57:B7:A5
X509v3 Authority Key Identifier:
keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ff:b3:b3:27:cc:6d:b4:9e:a8:82:5f:34:88:69:6c:41:a0:
68:d8:e1:a5:a0:d9:2d:e1:7a:e1:1f:cc:96:32:45:df:e4:03:
8c:8a:93:f1:66:ff:c3:15:f8:3e:9a:08:c1:1a:28:8d:6f:25:
fc:e6:d1:67:21:6c:09:b5:50:85:2e:5c:36:79:f7:58:a6:99:
1b:ae:30:cb:a3:5e:61:5b:4f:c4:80:5f:de:af:13:61:4b:ac:
f7:4e:c2:9a:41:ff:1c:3c:82:74:47:7d:af:c3:53:1b:11:22:
00:c9:75:87:bb:c9:bc:1b:0f:aa:f5:27:b6:1c:2e:a0:f4:b0:
6f:2e:20:89:da:6c:77:89:74:d2:4d:b7:e8:4b:93:58:dc:89:
93:b9:a2:f4:42:15:c5:a6:66:ef:55:26:32:b8:34:16:aa:b3:
bf:0c:9a:fd:38:4f:95:49:3c:c7:41:5e:0d:57:5a:70:54:33:
92:b3:e5:4e:62:26:83:82:0c:80:9a:7a:81:ca:30:d7:1c:cc:
0d:32:75:b8:be:c9:0d:6e:d6:f0:b3:89:5d:2a:8d:0e:5a:0b:
81:34:cd:77:70:c0:0e:fc:32:76:9b:61:c7:41:8a:6f:d3:38:
f8:a5:a7:ea:f5:68:1b:13:a2:05:c1:00:b8:f7:c5:f2:10:e7:
73:4b:96:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:06:42 2025 by rpki-client