Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
File: r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft (raw, json)
Hash identifier: 005Cm/MmBTsCNowt4cas2quGloCDwY8Q2KavqOZyqN0=
Subject key identifier: 78:15:18:92:3D:56:0B:06:74:4F:CA:99:82:E8:C4:BF:4B:A9:4A:45
Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
Certificate issuer: /CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Certificate serial: 019A70A4EADB632ED0FE6F3E6D347701CEBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
Manifest number: 1727
Signing time: Tue 11 Nov 2025 02:00:47 +0000
Manifest this update: Tue 11 Nov 2025 02:00:47 +0000
Manifest next update: Wed 12 Nov 2025 02:00:47 +0000
Files and hashes: 1: N9sOXFw97UnrkSQWGmd4QE2g0Pc.roa (hash: FcVUr7Wqd51Nq1eKBFPb0ZOL/WKLNXNrrGtgMRztb2M=)
2: p6HHOYDEee_YFxcXEQQw4tj_loo.roa (hash: XVgmeoKKw2smz01W8p65Y0a7sBeyS3+sdPmsdrroyxo=)
3: r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl (hash: TDUiY13E0qX9ar7q0xzix8YSPFBUTUPPFT/OEboN7VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:ea:db:63:2e:d0:fe:6f:3e:6d:34:77:01:ce:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Validity
Not Before: Nov 11 02:00:47 2025 GMT
Not After : Nov 12 02:00:47 2025 GMT
Subject: CN=781518923d560b06744fca9982e8c4bf4ba94a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:33:b4:1e:f6:94:38:7e:59:1e:67:4d:8a:0f:
d8:8e:bd:42:94:28:62:db:66:99:9e:be:71:97:f0:
a4:86:4f:36:03:99:ed:f8:ed:ba:f5:d3:b1:fc:78:
96:55:bf:5b:bb:b2:06:c8:bf:1f:dc:1d:c6:71:97:
33:9f:3f:3f:81:5f:2e:47:d5:f7:90:fa:21:66:67:
5c:2e:19:66:6a:73:8c:06:df:ad:fd:02:18:38:35:
5a:b3:b9:37:8d:51:75:e4:a2:1d:41:b7:51:83:f7:
f0:01:b1:7e:b6:45:63:0d:af:b8:61:38:d7:c3:95:
34:e8:47:65:34:d1:51:df:87:0d:04:91:10:95:cc:
8b:c6:05:e1:48:a5:be:4f:89:72:52:0c:4e:cb:a9:
24:9a:82:3b:11:be:09:6b:ae:4a:8d:64:4a:27:4c:
28:4e:ce:8e:c4:12:40:bf:8d:70:e4:97:0d:c5:0c:
3c:fc:de:f6:68:4d:ca:61:ee:48:6c:9f:f2:f4:0a:
34:6f:7e:cf:ad:d5:19:67:7d:1a:bf:cc:86:38:85:
bd:ce:0a:6b:96:1c:db:1d:20:bd:22:cf:7b:b0:7a:
02:c1:ba:d3:9b:73:18:a3:de:d6:75:47:7d:cd:51:
d1:c5:fc:27:6f:ff:38:f4:25:f8:3d:4c:5b:4d:d5:
12:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:15:18:92:3D:56:0B:06:74:4F:CA:99:82:E8:C4:BF:4B:A9:4A:45
X509v3 Authority Key Identifier:
keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:70:8c:4c:2d:28:9c:c7:75:67:26:fc:36:86:cf:7f:50:0c:
d0:88:55:4f:86:99:57:f6:7b:f0:7d:58:2e:f7:c8:de:5f:00:
c0:3a:fc:79:1d:af:99:90:08:df:a4:d4:f2:ae:05:cc:ae:c4:
f5:d4:fb:bc:1f:19:30:9b:42:df:05:3d:5e:82:c3:6a:89:60:
bb:e7:33:64:78:1b:bf:0d:97:a6:c0:c9:97:3b:d6:a0:46:0e:
27:a4:e0:2b:87:2b:88:b6:6d:2f:12:d2:9c:88:99:9a:f5:65:
ca:1f:3e:5f:09:23:90:d7:3e:27:cb:3a:53:e8:13:05:47:e2:
d4:c8:09:3c:25:d2:39:7f:55:63:27:74:f3:58:ad:c5:27:b6:
c4:31:b0:6e:c8:08:d9:f8:f3:14:5c:98:b7:1d:2a:d9:90:2a:
1f:7a:9d:91:46:34:fc:ec:07:ba:b6:e8:71:68:2e:f0:76:82:
5a:5a:1b:86:be:71:67:ad:b6:94:0d:3d:f0:f4:45:f3:cf:ce:
4b:f4:9a:72:38:f7:6b:bb:b0:45:3c:05:48:7a:41:5e:38:dc:
96:70:54:d7:49:7a:92:fc:2c:39:0b:93:32:c4:27:4c:40:e1:
ce:6a:ca:43:54:0d:b5:a3:9f:4a:38:69:b6:ae:51:e9:62:dd:
e2:41:cb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:47 2025 by rpki-client