Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier: CbQJXSk3P8dGDT/W85+5nTcE7IvHDCGQd7OkH82v7U0=
Subject key identifier: 90:F8:55:F1:8D:12:79:CD:54:F3:AD:A0:83:09:2B:81:95:F4:AC:A2
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 019A725CBB9B5380C52EAC4FCADB09B9DE94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number: 0D48
Signing time: Tue 11 Nov 2025 10:01:11 +0000
Manifest this update: Tue 11 Nov 2025 10:01:11 +0000
Manifest next update: Wed 12 Nov 2025 10:01:11 +0000
Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: GceAzE+VOaptrC1NQArmpVf+518eJgI4SAEUuieDFt4=)
2: Iq-f1EnfL9Yhl-QlX-qFh7tpN7I.roa (hash: WJuJSZpxmjSdIh4Z1HVT6GKRflZm//sdti8VMNi88hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:bb:9b:53:80:c5:2e:ac:4f:ca:db:09:b9:de:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Nov 11 10:01:11 2025 GMT
Not After : Nov 12 10:01:11 2025 GMT
Subject: CN=90f855f18d1279cd54f3ada083092b8195f4aca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:d7:b4:59:fb:40:c0:02:36:27:da:60:41:
c1:da:b6:73:5c:61:45:74:9a:af:b0:07:a2:2f:1c:
8e:e9:e0:df:12:8c:1c:17:ab:0d:e5:1e:93:94:e4:
00:b8:40:a4:f1:1d:51:ea:dd:14:f5:e9:04:50:96:
9f:35:8f:3d:c6:3d:4d:24:28:be:f0:44:e8:cf:07:
7a:b4:e1:52:9b:c9:8c:3a:43:5c:8c:c4:72:c0:2c:
9d:f8:1f:c2:22:79:6d:3e:fa:69:68:22:64:8a:4e:
92:bc:a8:12:0c:15:08:8c:67:41:a4:a9:c3:d0:6e:
3e:52:43:33:5a:28:1b:20:be:f8:04:16:80:dd:df:
32:0d:03:13:44:c7:17:ba:e7:dc:69:03:47:0a:25:
13:85:21:7e:55:b3:29:ae:e6:b5:27:a1:1e:d9:ce:
7f:1b:3f:8d:f1:77:4a:c1:37:c3:1d:cd:a9:71:79:
3e:7d:7c:a1:33:58:c7:b4:c5:6b:e8:4e:17:20:b9:
ba:51:97:65:4c:43:ec:fa:12:0a:8e:b5:d2:ad:43:
84:68:01:ce:28:f2:88:1a:30:99:0d:f6:6e:d5:9b:
74:98:62:ed:cb:21:78:50:a7:1d:b9:68:e0:d4:b9:
7a:49:42:ac:3d:80:a8:38:18:49:9d:11:4c:8f:99:
ec:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F8:55:F1:8D:12:79:CD:54:F3:AD:A0:83:09:2B:81:95:F4:AC:A2
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d9:93:40:88:03:de:53:96:a1:53:70:0f:64:f7:0a:66:a3:
42:fc:7e:a3:3a:1d:59:55:cb:b7:d6:a9:90:92:48:e2:86:bb:
ff:02:6e:43:73:17:f1:a6:9d:43:08:f6:e6:55:75:93:f2:98:
da:96:cb:d3:e7:31:19:1a:bd:36:28:ee:43:75:99:93:4a:a7:
db:bf:b9:a8:8e:41:2b:02:ba:31:d7:e3:1a:ea:c8:65:15:98:
28:29:44:35:fe:c2:e4:9d:f7:dd:a0:24:c9:1b:69:cd:9b:98:
6d:14:6b:3b:5b:06:be:8a:13:a8:7c:4e:a3:6e:07:4d:84:61:
b0:c7:d3:9a:36:ed:4a:b6:10:1e:ed:59:e7:21:cf:57:a1:50:
9c:5f:d3:d3:4c:6d:3b:77:bf:5b:15:12:da:dc:8d:d9:6f:54:
6c:1f:d4:33:91:69:1c:8e:44:7f:d5:8e:2d:ce:aa:4c:f5:c9:
fe:ad:e0:59:39:cf:0a:1a:a6:f4:a8:f8:7c:02:65:9f:85:0b:
26:6e:52:d2:0f:d9:49:94:26:dd:a1:ac:c6:63:05:1b:19:94:
2a:07:6d:b1:7d:f8:98:e7:b2:51:14:57:28:5d:fe:1c:23:f0:
b0:7e:fe:20:4f:8c:56:21:cc:58:19:ee:ff:20:da:13:18:70:
31:4d:82:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:57 2025 by rpki-client