Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json)
Hash identifier: Gl/t1TOvrKoWfT0dgejuUiJWJz3C6rpHl1Xk8oqLEMM=
Subject key identifier: 6B:B5:B0:BA:30:09:24:86:A7:05:09:35:07:8F:3D:3F:6F:F0:64:19
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial: 019A1E07B3A708090E39119E438563CBC7EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
Manifest number: 0A71
Signing time: Sun 26 Oct 2025 01:00:12 +0000
Manifest this update: Sun 26 Oct 2025 01:00:12 +0000
Manifest next update: Mon 27 Oct 2025 01:00:12 +0000
Files and hashes: 1: 05EOtNo-Yw22y8nOEhjh34kR-xs.roa (hash: bx1cLzgI6GeSkKgZhlF0GUx8NZh0BLXhkqY0eigb2zc=)
2: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: S+lMa00eox+zFaHwcjxzNmTaTjcFZ4DzhdLwIuWDZUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 01:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:07:b3:a7:08:09:0e:39:11:9e:43:85:63:cb:c7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Validity
Not Before: Oct 26 01:00:12 2025 GMT
Not After : Oct 27 01:00:12 2025 GMT
Subject: CN=6bb5b0ba30092486a7050935078f3d3f6ff06419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:93:f2:fa:d5:62:cb:cd:70:18:5d:5e:07:b9:
db:c0:2e:10:8e:18:65:ea:cf:9c:c5:70:f5:69:20:
da:25:6b:07:8f:dd:38:73:1a:05:6a:99:05:c6:ae:
70:2c:76:61:30:34:fe:1a:fe:a6:c2:6c:b8:fb:c0:
90:f6:72:ae:17:90:32:41:11:9c:44:4b:2f:75:98:
68:44:af:2c:42:6e:07:f7:29:98:af:a0:fc:e9:49:
ae:e2:5a:33:bd:af:aa:fd:8f:8c:b9:c4:f0:af:36:
da:4a:75:47:6d:44:17:ab:29:ba:1e:88:24:64:b5:
86:cd:a8:76:26:f5:64:aa:b8:7b:57:45:ef:77:cd:
4b:66:47:f1:c3:03:51:ae:8b:1e:f1:fd:19:23:17:
91:2d:51:1b:31:13:c0:7a:af:dd:47:60:fd:3e:03:
dc:c5:75:a3:99:11:f5:97:3f:fb:88:23:d2:33:a7:
72:de:fb:97:b3:ab:54:a7:9d:0e:58:3b:76:55:0e:
d7:3b:91:69:96:7e:0f:0a:aa:3c:b9:ca:05:e4:c1:
28:6f:d6:ab:ff:e7:ed:b2:b5:54:ae:42:45:67:c7:
19:d6:6c:2c:cd:c7:7f:39:f3:74:d2:6c:c8:ad:82:
74:78:03:8b:b7:59:f4:f6:06:52:e8:c2:21:7c:37:
06:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B5:B0:BA:30:09:24:86:A7:05:09:35:07:8F:3D:3F:6F:F0:64:19
X509v3 Authority Key Identifier:
keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:07:f4:d6:91:b0:16:63:f8:23:9c:d3:fc:b1:6a:32:7a:65:
ab:42:8e:27:ad:80:d0:fc:27:7e:9a:1c:66:ce:c2:cb:76:88:
fc:f8:37:06:e5:13:83:a6:9b:cd:44:f7:72:44:4a:3f:68:ce:
ff:df:08:b6:88:1f:ff:1a:0d:c4:19:56:3f:94:4e:b1:26:e4:
04:09:9c:03:2f:cd:a0:b8:0a:20:e1:f4:09:e4:01:49:45:cd:
60:e1:6f:e2:6e:3d:8d:f5:75:83:36:6b:33:39:73:22:10:4d:
0b:b9:7a:29:6e:5b:19:35:3a:65:1d:ae:74:d5:53:22:ad:36:
75:13:2a:34:98:73:c0:fa:8e:5b:15:dd:94:62:80:14:a7:fc:
db:a9:b0:65:d8:83:0a:2c:8b:f4:1b:dc:3c:a7:56:5a:ee:5a:
ae:49:27:45:67:28:49:4f:17:b5:83:d9:26:2a:43:72:c0:6a:
85:55:40:04:4c:af:ba:a0:81:5c:29:b4:2f:30:fb:53:a0:1e:
3d:70:b4:9b:c4:d7:3e:1a:3b:3c:ad:72:2c:02:12:fc:cd:2c:
94:ca:05:44:d7:ef:3d:d4:8b:fa:c3:dd:e3:d1:8f:ed:b8:b3:
d2:86:9b:dd:73:97:1d:be:03:4d:56:39:2e:6c:cd:db:27:a8:
85:96:c5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:58:40 2025 by rpki-client