Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
File: 3vwmhsKavvGPQLMOfpUTJHpm7xM.mft (raw, json)
Hash identifier: QBO4DbDwUWwEljwwK3K+7yOj5rvu2/nSlhJ9JZvKRqY=
Subject key identifier: CE:A0:30:62:99:5B:ED:CA:EC:DF:11:F5:E9:43:C0:62:B7:D7:9E:F9
Authority key identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
Certificate issuer: /CN=defc2686c29abef18f40b30e7e9513247a66ef13
Certificate serial: 019A7149E088A8D7D6513D2FB7FE08FDD260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 05:00:58 +0000
Manifest this update: Tue 11 Nov 2025 05:00:58 +0000
Manifest next update: Wed 12 Nov 2025 05:00:58 +0000
Files and hashes: 1: 2jede6KT-wWXlr-gV_HV5g4z3cE.roa (hash: mv6a2TTy4FTvxK1u9z+/AeZmzO5akrk+XnGtMMkB+UQ=)
2: 3vwmhsKavvGPQLMOfpUTJHpm7xM.crl (hash: bUyWQkS2YPh+g81BOgESBxyAlRStfoXAGogUUd+mNyI=)
3: IJD_U3KWZ58BdYUivTasUkoSb14.roa (hash: QMy/+qKyMyM01JHQHllqOzvjbF1AM/QefZV5csA0T9s=)
4: NxF2Cyt5llnCNI_vXdmc9sDjjDg.roa (hash: R2BQ5eg/vIm8OWNUAn8Iiim/Pq6eL5zypKjZ8nuw8W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e0:88:a8:d7:d6:51:3d:2f:b7:fe:08:fd:d2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defc2686c29abef18f40b30e7e9513247a66ef13
Validity
Not Before: Nov 11 05:00:58 2025 GMT
Not After : Nov 12 05:00:58 2025 GMT
Subject: CN=cea03062995bedcaecdf11f5e943c062b7d79ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:38:6a:e5:e6:21:62:14:63:49:87:41:7e:9a:
75:86:fb:5d:d5:28:45:93:01:49:ef:47:97:de:39:
7d:4b:44:22:2b:e7:62:da:4c:ac:37:2f:7d:6b:66:
3a:5e:bd:d5:66:c2:4b:52:f1:2f:2c:55:8f:81:6f:
30:1f:ce:29:89:cd:de:dd:c2:18:f2:bb:cc:63:57:
3c:b3:87:f0:54:71:6b:d0:fd:c1:2b:d0:81:7e:19:
33:23:36:55:54:a4:72:df:6a:15:24:a8:66:f9:43:
7c:c7:01:d5:12:45:c5:4b:19:ce:c9:b5:f8:9b:84:
5e:c3:8c:7b:32:85:ee:98:3f:65:e7:c6:9e:f9:d6:
6f:bf:05:12:b2:d7:9b:ac:31:49:23:06:b9:a3:0f:
18:fe:60:0d:5e:f0:62:e0:a1:6e:07:97:31:7e:68:
cb:1e:37:42:e0:fb:07:7c:78:fe:d5:f3:a9:74:7e:
5f:0c:73:59:f9:44:1a:9d:2e:fc:6a:46:11:3a:1b:
01:7e:39:8e:ae:80:a9:e3:52:8a:ae:51:18:43:81:
ff:06:42:67:72:24:54:ea:92:ab:8b:69:8e:df:7f:
1f:88:b4:43:e7:d3:13:55:47:31:d8:06:63:a8:d7:
9e:4a:d7:b1:d5:fb:6e:d5:8b:1e:96:34:81:12:de:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A0:30:62:99:5B:ED:CA:EC:DF:11:F5:E9:43:C0:62:B7:D7:9E:F9
X509v3 Authority Key Identifier:
keyid:DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:73:ab:d9:7c:fb:a8:7a:47:3e:dc:82:d5:7b:08:6b:87:a4:
55:a0:d5:19:cf:c2:e6:dd:2e:bd:11:c2:38:5a:f0:50:4a:d8:
d4:20:86:16:97:b7:39:3f:d5:38:dc:20:be:69:43:b3:ee:cc:
3a:5e:b0:f3:a1:7c:57:b1:3c:88:d1:4d:04:58:99:52:5e:82:
6f:55:1b:1d:a8:09:f5:06:53:6d:33:05:46:ff:95:64:c2:49:
2b:4c:2b:88:9b:b9:f8:f4:ef:12:9e:fa:96:76:df:9e:65:7d:
94:44:a7:39:d0:f7:44:75:fb:2c:5a:ca:69:50:54:30:3c:32:
66:a3:f9:98:95:88:94:00:55:38:ae:d3:52:1e:4a:b7:f0:3f:
55:60:cc:b7:ed:c9:b7:4c:f0:33:f5:87:ab:8d:ca:1f:72:16:
2c:aa:5d:17:20:dc:03:8d:f9:4d:7c:4e:c5:cd:fa:e5:a6:0f:
c4:61:5e:ba:a4:e6:8d:91:35:5e:72:5a:4b:d1:45:c3:bc:2d:
20:3e:da:7b:53:8c:43:58:8e:c5:46:dc:04:a5:90:8c:58:b2:
5f:be:2c:1f:5e:1d:9b:be:08:da:fd:a5:99:63:8b:7a:af:5d:
01:bd:dc:44:0c:45:e2:d2:f4:d7:17:1e:e7:ac:b5:8f:fc:7d:
2a:a0:58:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:50 2025 by rpki-client