Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
File: 3c6wiktA8fheTroXzcfIPke7WX0.mft (raw, json)
Hash identifier: r486FNH8jM5/XcpmNGqmx6e9ZPNPob1uXhqaVHeITnU=
Subject key identifier: EB:E9:B1:28:5A:4B:4E:06:6D:CD:70:40:A1:D4:1B:B5:6A:D4:FC:EE
Authority key identifier: DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
Certificate issuer: /CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Certificate serial: 019A725C79B997601CD4E1E43522443D0FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
Manifest number: 0C94
Signing time: Tue 11 Nov 2025 10:00:54 +0000
Manifest this update: Tue 11 Nov 2025 10:00:54 +0000
Manifest next update: Wed 12 Nov 2025 10:00:54 +0000
Files and hashes: 1: 3c6wiktA8fheTroXzcfIPke7WX0.crl (hash: 3rUORX04/A5fnpiRi/GLCnllewT1VVerKRv3bnMGNSk=)
2: wkcnsTzQjgo9eEySS50APSZKqWQ.roa (hash: SKv++65s2nAU0vbkJDBqrGiZUMw6xX7YKBnglQkJRuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:79:b9:97:60:1c:d4:e1:e4:35:22:44:3d:0f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Validity
Not Before: Nov 11 10:00:54 2025 GMT
Not After : Nov 12 10:00:54 2025 GMT
Subject: CN=ebe9b1285a4b4e066dcd7040a1d41bb56ad4fcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f5:07:ea:9d:48:db:a5:5c:5f:de:99:e5:4f:
69:a1:ea:db:20:26:d9:8f:1a:62:f9:fe:98:c4:2e:
33:8f:dc:7d:73:6a:c5:9e:20:b4:c2:4c:0f:ca:5f:
7b:3f:4c:14:76:4f:26:6c:1b:aa:c3:08:3a:65:7d:
4c:1a:01:6e:f7:6d:61:49:09:29:cf:2a:24:b3:c4:
d2:3e:f7:cc:ca:a2:f1:a2:af:31:9a:1a:7a:74:cc:
bd:29:57:89:6b:8f:89:1e:37:cb:5a:d1:6a:94:5b:
ad:52:48:0d:7a:73:98:e5:b6:d4:94:55:af:58:25:
84:a9:9f:75:3e:aa:44:cf:17:22:9a:1c:44:3a:ed:
ef:97:12:7e:31:fd:62:fe:46:1e:f3:68:e5:68:51:
9f:39:35:93:b6:e0:4c:38:c1:79:5d:a0:2c:5a:c0:
19:b2:b1:3c:f7:18:b3:a2:74:03:59:e1:e4:95:cc:
1e:18:7a:60:a0:73:46:0a:5b:88:6b:b1:1b:13:5a:
71:28:ce:f1:2a:f9:ab:58:26:df:17:e6:69:a1:3e:
a4:31:a1:3a:2a:f9:be:14:0b:13:87:21:b9:6e:e0:
e1:29:8d:9a:7e:ad:ad:bc:27:09:cf:72:78:61:c7:
c9:91:f1:ff:93:3c:5f:52:dc:d4:6d:08:11:9c:a2:
ff:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E9:B1:28:5A:4B:4E:06:6D:CD:70:40:A1:D4:1B:B5:6A:D4:FC:EE
X509v3 Authority Key Identifier:
keyid:DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:78:2e:ea:e3:c4:2a:16:a7:3f:95:0a:1d:a6:7a:2f:c8:90:
d9:1d:10:f2:e4:fe:60:64:03:ca:07:c8:e3:7d:4b:c5:04:ea:
7d:34:fe:db:49:db:ce:2a:cb:37:9d:67:64:68:88:b3:f5:f7:
0e:c8:2f:60:b4:e4:76:ae:92:39:c7:2f:40:c9:30:7f:f1:66:
82:3c:fe:75:1f:45:09:d6:0c:90:af:eb:0e:f4:ab:e1:42:d2:
8e:23:80:dc:de:7e:d6:31:d2:7c:61:07:3b:a1:02:c7:ed:93:
f5:d8:60:aa:b2:fc:67:9f:a4:75:3f:b1:6f:65:27:5e:69:df:
74:08:91:01:62:ac:c9:4c:39:d7:2c:a0:46:09:3f:4d:c6:6f:
db:62:72:2d:6b:aa:9a:01:c5:25:63:2e:93:25:88:23:14:3b:
94:8e:f4:e6:d4:65:31:7d:30:40:b1:6a:eb:61:15:c0:67:13:
76:28:01:61:05:33:40:3e:19:09:c4:2e:38:14:5f:2a:9d:77:
51:b4:8d:ed:b1:e1:8a:61:ca:8f:60:72:c0:39:08:34:b8:01:
cd:f2:8d:22:d5:8b:08:77:f4:7e:22:b6:39:de:4e:a2:20:bd:
bb:e6:56:23:1e:b5:63:ef:83:27:dc:1f:19:12:8f:b6:fa:29:
a7:a4:0a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:52 2025 by rpki-client