Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
File: 3ILSx-tfpUPjLx7uGc01pWc8-uY.mft (raw, json)
Hash identifier: t5d0dczBF8Y8cI615WEJHwqUf9BV2rLblBZ6DsEHhkc=
Subject key identifier: 94:6D:7A:44:8B:27:AC:3A:4A:56:78:62:89:9C:71:58:2D:EC:21:90
Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
Certificate issuer: /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Certificate serial: 019A72258CC3E6A85499129B10358DC0284B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
Manifest number: 05EA
Signing time: Tue 11 Nov 2025 09:00:54 +0000
Manifest this update: Tue 11 Nov 2025 09:00:54 +0000
Manifest next update: Wed 12 Nov 2025 09:00:54 +0000
Files and hashes: 1: 3ILSx-tfpUPjLx7uGc01pWc8-uY.crl (hash: E2zI0Yf/nh/TfAQ2+DYr925S5Y5u07wLqCMUWtWmcfg=)
2: Mvk_oqElVRdnhvvvd2d0ON2M6O0.roa (hash: h/FNSiffcYfhZT3VlgEkLi4vidisAmOMBIjfYdnqCDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8c:c3:e6:a8:54:99:12:9b:10:35:8d:c0:28:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Validity
Not Before: Nov 11 09:00:54 2025 GMT
Not After : Nov 12 09:00:54 2025 GMT
Subject: CN=946d7a448b27ac3a4a567862899c71582dec2190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:03:21:6d:de:69:27:30:f8:41:52:65:ff:
18:d3:f8:e6:ac:f5:3e:8d:15:03:09:b7:41:1f:de:
83:4f:2c:8a:38:6a:f7:36:80:97:c4:73:00:16:d9:
26:d7:cd:65:a6:e6:ef:79:34:1b:98:8a:14:ae:a7:
d8:b6:e5:89:31:be:32:fc:c1:a7:42:5b:16:11:da:
b8:d2:29:6d:be:73:1d:3c:21:f6:6d:73:a3:5a:23:
38:e3:e8:e9:88:f7:47:a6:b0:d4:2a:8d:f0:e2:59:
91:a2:ab:1a:dc:84:dd:2c:6e:46:d4:22:69:02:ab:
68:ca:b9:6d:36:96:2a:a0:c3:c3:74:ad:2c:89:a9:
48:02:fc:48:c8:2f:bc:97:2a:bf:ee:55:4c:a2:7e:
fc:ac:fb:3d:78:9b:bf:95:de:a1:68:2e:55:b2:ff:
4a:d5:be:4c:e9:e2:01:b5:bf:81:69:fa:ab:36:53:
12:20:7f:74:ff:22:ce:a6:b4:0e:d3:6d:ce:c7:44:
24:c2:35:7b:08:22:60:b4:ba:dc:2a:1f:c7:61:49:
53:9e:02:9a:a0:83:5b:45:f4:d7:48:e6:39:4f:b6:
ab:6f:07:73:c7:77:45:c5:68:00:15:b1:22:1d:f0:
fe:4b:20:76:26:e0:e4:6e:ba:ce:30:23:ba:a1:32:
f6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6D:7A:44:8B:27:AC:3A:4A:56:78:62:89:9C:71:58:2D:EC:21:90
X509v3 Authority Key Identifier:
keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:30:e9:e8:ed:f4:1b:ed:ad:9c:1b:f5:6a:aa:91:83:f6:48:
c9:0d:23:02:40:62:ad:fd:d2:ad:a7:8b:e0:2e:50:da:3c:d7:
ad:e4:ae:46:cc:41:4c:d6:ac:bc:43:57:56:84:35:61:b8:27:
16:e0:59:83:55:14:b2:4b:f3:0d:dd:25:41:48:a8:22:ef:df:
4e:2e:8e:e6:dc:4a:8d:90:0f:59:31:05:9f:d4:13:a7:3f:8f:
c3:3e:31:ee:c9:e0:3e:b7:5d:3a:54:4f:f6:6f:49:3c:d5:3f:
c3:c8:be:c2:e9:3f:25:ce:81:c0:69:5f:79:c4:8e:9a:39:8c:
ab:ca:61:a3:0e:72:38:e0:af:2b:ea:f8:3b:63:d2:a9:b5:42:
cd:a3:f2:3b:29:e5:4d:fa:b8:47:6b:de:2e:24:6c:07:e1:91:
14:94:c8:ee:b1:6f:ee:a3:25:1f:16:e3:ac:35:ae:3d:8b:aa:
08:4f:cd:ee:c0:ea:f7:4d:c8:ca:1c:15:fc:50:2f:db:f0:75:
6f:6a:65:3d:52:d6:a8:50:92:b7:6d:16:02:82:9e:7f:52:2c:
00:d0:01:40:ae:31:80:97:bb:48:d9:47:1b:33:da:b9:02:a2:
76:72:d3:98:7c:70:44:d1:e2:29:ef:06:63:9f:11:21:6d:3d:
ea:cc:64:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:10 2025 by rpki-client