Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: GQReTrk9KQkeoWDOQQbrSDiQhMc/e8584o+WXiR+1MI=
Subject key identifier: 9E:AB:60:B0:C4:02:69:C0:75:9A:26:23:6A:A8:6E:77:E2:47:78:A0
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 019A239C440CA1CD5FC18CCBDB87F2975807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 1037
Signing time: Mon 27 Oct 2025 03:00:34 +0000
Manifest this update: Mon 27 Oct 2025 03:00:34 +0000
Manifest next update: Tue 28 Oct 2025 03:00:34 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: bdk4xtLWhCP8eYHAeu0wLE40RxvAA/nVb9Xg+lVqEEk=)
2: M0CEGpqdnFyhH05u6ywrw5xpjxw.roa (hash: Da8bL20Ezk/7GnIViJo/xS7eFj2lqLDIbA2oioZuSt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9c:44:0c:a1:cd:5f:c1:8c:cb:db:87:f2:97:58:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Oct 27 03:00:34 2025 GMT
Not After : Oct 28 03:00:34 2025 GMT
Subject: CN=9eab60b0c40269c0759a26236aa86e77e24778a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:52:19:b6:ea:7d:ef:31:72:f6:c9:cd:e9:a8:
ca:6a:c2:8f:38:ef:f3:ca:37:5f:8c:de:d6:05:cf:
45:1d:c0:50:cc:4e:88:59:80:5b:95:20:15:1f:90:
ac:1f:1f:69:1f:29:de:02:92:20:22:18:b4:fc:ba:
1d:af:55:ed:ec:e0:3d:c8:3b:9f:1f:1b:cd:d8:71:
76:b4:6a:31:7f:07:c8:06:94:7a:9a:52:e2:2f:fd:
94:f6:f0:db:a9:b8:31:23:72:9c:1e:b6:b0:c1:3a:
ac:24:bd:e6:f6:4c:cb:a6:5c:88:b2:81:e9:80:0e:
9a:18:30:1a:66:33:cf:26:19:48:00:9f:85:f6:76:
1e:72:e7:0b:ec:92:e5:df:52:a3:fb:a3:b7:cf:82:
50:bd:98:ad:72:26:99:ec:da:df:29:62:43:20:5a:
4b:77:91:42:08:88:c8:16:54:28:4c:21:0e:ef:4c:
78:ac:25:42:54:b7:ad:f6:ca:6f:07:5b:e5:fe:14:
31:66:1d:6e:4c:1c:a7:00:e3:6c:16:d2:19:ca:d3:
b9:ea:05:a7:7a:e0:d9:98:99:55:bf:e2:93:d1:e1:
10:42:1e:e0:85:e4:e6:c7:79:14:4b:57:79:6b:28:
7b:f0:ac:9f:50:a5:75:88:14:64:05:01:c1:07:f3:
3f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AB:60:B0:C4:02:69:C0:75:9A:26:23:6A:A8:6E:77:E2:47:78:A0
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0b:39:18:ad:8b:cd:c5:53:89:aa:07:af:67:12:a1:40:c2:
bd:a8:ea:89:fa:17:35:3d:68:68:7a:23:e1:70:b7:09:fb:27:
64:3b:da:25:f5:d9:7e:0d:9c:8d:3d:5d:73:1f:fc:66:e3:71:
a7:0c:b7:6d:21:d7:99:1b:83:21:49:5e:b3:db:87:c9:47:03:
cd:be:e2:ef:0a:ab:57:b7:60:55:1f:35:89:70:10:9e:06:9a:
69:0a:9b:59:5f:23:28:2a:bf:e9:7f:72:1d:37:82:36:c4:d2:
55:2d:10:f8:9c:bc:b7:b9:8e:61:6b:e8:93:84:8c:d5:52:55:
24:0f:d4:1a:fd:48:78:a1:f5:1c:7e:19:6c:87:0d:45:e3:08:
f7:02:80:1d:f3:75:2d:51:77:ab:b4:29:ba:03:22:2c:73:0e:
ab:6b:bc:f2:cf:00:78:9d:e7:8c:63:b8:95:08:50:34:f4:d5:
1b:1b:9f:39:b8:ce:70:25:43:8b:60:45:af:18:a6:25:69:53:
e8:24:78:16:34:06:61:be:52:9b:fe:80:dd:54:f4:66:33:73:
b8:79:6f:7f:5e:c6:6b:c7:9a:b8:d7:89:10:9b:a3:ca:78:d5:
2e:5d:af:48:ef:9d:1d:e6:c4:2a:95:88:e2:46:e5:d1:a4:ce:
9a:a5:b9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:52:23 2025 by rpki-client