Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier: 681BY3JRBhoTi2XTcl2Nt1ZSjg2K8cHqmKUJuSz4dkg=
Subject key identifier: C9:BB:84:31:02:63:F7:1E:9B:68:42:9D:8C:AF:70:A2:99:41:CB:43
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 019A36101DD0D932CFBBAC6DA6470CE79B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number: 10E6
Signing time: Thu 30 Oct 2025 17:00:17 +0000
Manifest this update: Thu 30 Oct 2025 17:00:17 +0000
Manifest next update: Fri 31 Oct 2025 17:00:17 +0000
Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: KZZbt0TQmVm8o7x8J7vqG/VoxgV/ls/Qy965fxzxGXM=)
2: HbrG3H8i4MVchy7ux-rBNewfgN4.roa (hash: ZEnkqludW6ORRLo4vaUnR4azLQNvPJWfXdiBq5telHQ=)
3: eqT6wyPQANegQWczS_E8NsRIGH0.roa (hash: uVTDWyi87OupvvigMLyo7l17Ar6OD8Dv20/y/RB28lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 15:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:36:10:1d:d0:d9:32:cf:bb:ac:6d:a6:47:0c:e7:9b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: Oct 30 17:00:17 2025 GMT
Not After : Oct 31 17:00:17 2025 GMT
Subject: CN=c9bb84310263f71e9b68429d8caf70a29941cb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:6b:28:65:10:10:d2:68:61:fa:72:70:a2:
85:df:68:54:3f:bd:53:8a:58:be:62:99:04:c4:88:
d5:4c:bc:f7:8f:96:11:48:5e:48:59:62:0c:f4:51:
eb:95:1b:1e:60:8a:a8:bb:71:34:ee:dc:dc:2c:e9:
ac:e6:f5:9c:13:01:5b:60:0e:32:4d:74:a6:89:8e:
c0:fe:7d:e7:cc:c3:11:1f:5a:73:9a:b8:ca:0a:60:
b2:87:a5:2a:d4:d1:a1:bf:e6:96:53:8f:25:11:7a:
04:1e:9d:37:49:f1:28:15:dd:13:23:c0:4b:98:d2:
77:c6:71:3f:60:51:12:84:e7:e4:0b:c9:e6:5b:e3:
af:9d:0c:8b:08:7b:53:39:fc:bd:b2:24:9d:6f:8f:
5a:54:32:9c:d2:f5:bc:27:bc:68:f9:2e:93:3b:09:
8b:96:8e:6b:71:49:7d:2e:42:74:17:e4:28:f8:6c:
9f:aa:3f:cb:47:bf:78:ce:17:6c:99:63:65:84:44:
bc:55:ac:2e:72:4c:e8:05:7d:a3:d6:4c:db:79:bb:
51:01:bd:b3:f8:bd:37:4e:2e:6c:9b:80:b0:cc:9c:
dd:99:93:15:10:45:ec:e4:2a:7d:1e:f0:a1:80:e2:
67:f1:8a:75:69:fb:d6:9f:02:aa:b1:31:b1:8d:67:
73:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BB:84:31:02:63:F7:1E:9B:68:42:9D:8C:AF:70:A2:99:41:CB:43
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:36:a7:95:c0:f7:67:9c:55:d4:92:47:a8:c3:fb:5b:c8:12:
fb:ae:53:f0:ad:8a:ef:44:96:bd:09:46:13:d7:e2:bc:93:c9:
ea:51:07:ad:2c:fc:79:7c:29:bb:1c:c0:3a:6d:58:d1:a6:b6:
c0:75:9b:26:81:bf:bb:68:ae:51:c2:32:f4:58:90:96:0c:bb:
c2:77:45:3a:48:f9:a9:1c:7e:3c:ff:1a:c4:e6:9a:c8:fd:0f:
51:3c:b6:b5:0f:f6:d7:a8:c0:a1:5e:c2:fb:93:a1:f2:6a:06:
76:13:f3:34:b7:f1:07:d4:2c:8e:50:74:ed:31:61:d6:e4:bb:
a3:ca:a4:90:4c:b7:f0:f3:6e:ab:f5:6e:e9:62:52:ed:7b:66:
5f:03:09:28:3c:ee:61:b7:88:06:6c:4b:a4:8b:67:1f:47:1e:
57:de:72:e4:e7:b9:28:c5:50:2d:14:65:99:2e:61:f0:df:ac:
cf:ec:97:fe:17:57:1f:05:8e:a6:fd:51:7c:07:6f:e8:41:34:
df:d0:6c:fc:c7:48:fc:b4:65:03:8a:59:19:37:52:9e:8c:f1:
0d:87:0c:5d:27:bc:00:48:ea:1f:e6:14:b1:54:33:41:08:a0:
cd:31:0a:67:34:4c:1d:6e:0b:53:37:9c:77:bc:92:ea:5c:80:
2c:04:11:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 22:09:41 2025 by rpki-client