Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier: OCIZqb1Mz9Yaf1qf9G3bCh2+VFD98HG9g/uSCgYRq9c=
Subject key identifier: AF:96:AA:82:01:01:BC:21:93:59:68:17:F4:45:F4:FB:47:FD:A1:95
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial: 019A71EE6C2D8210E5D97EF2CD2A681E9A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number: 0818
Signing time: Tue 11 Nov 2025 08:00:41 +0000
Manifest this update: Tue 11 Nov 2025 08:00:41 +0000
Manifest next update: Wed 12 Nov 2025 08:00:41 +0000
Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: KLC7FIk9LSuX1+bGEjnNYwlW6deVIKcH2csJREpgAGM=)
2: xR2Kuj_X5JRY3WX_WqgPgukk9Lw.roa (hash: wP9kQODXoT56dWOB0bEFnWVWD/Y0ndzO5Fzna/QZSuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6c:2d:82:10:e5:d9:7e:f2:cd:2a:68:1e:9a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Validity
Not Before: Nov 11 08:00:41 2025 GMT
Not After : Nov 12 08:00:41 2025 GMT
Subject: CN=af96aa820101bc2193596817f445f4fb47fda195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:9c:08:d7:70:4d:85:d1:06:f6:34:49:8d:
2a:9e:5b:03:c1:db:49:a2:33:ba:59:99:87:40:66:
e0:cc:32:25:49:ff:e2:51:31:07:bf:7c:5a:28:e5:
06:f4:5d:b3:94:e8:95:d4:e4:d9:f8:35:3f:08:04:
fe:98:2a:19:fc:22:42:36:33:cf:ba:99:10:30:5a:
f2:94:70:3a:37:db:96:c8:5b:d2:2b:ae:4a:88:72:
82:4c:7f:85:7b:4d:cb:64:47:90:bf:4c:8f:46:6e:
61:30:c3:fb:f8:4b:a1:d4:9b:40:89:88:51:a7:51:
5c:2d:6a:83:10:08:42:f4:87:96:b0:48:65:87:a6:
ef:ba:79:08:29:a1:0d:09:e0:28:23:23:4a:dd:3e:
97:aa:c7:86:70:4d:68:8c:77:27:a4:30:22:9a:ad:
93:73:28:7d:57:d7:20:7a:60:e8:0d:3d:82:47:d9:
a8:e9:c9:a8:93:4c:7c:c3:49:02:ec:a5:17:9a:b5:
c6:c1:19:0a:e1:5c:c2:f6:3f:ad:a1:5f:9d:46:90:
8a:16:9d:8e:e4:36:07:72:82:df:38:96:ae:f4:bf:
b7:bd:89:5c:f3:70:34:2d:82:9e:f9:d9:14:1f:f4:
be:5d:c7:cf:0d:87:d3:06:c5:d7:0b:70:c2:1d:70:
a6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:96:AA:82:01:01:BC:21:93:59:68:17:F4:45:F4:FB:47:FD:A1:95
X509v3 Authority Key Identifier:
keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cd:f9:a8:09:4d:b9:c5:1d:da:f0:2b:51:29:6d:5c:3d:aa:
10:55:c0:dd:40:e7:8d:22:e6:64:81:e2:af:8c:84:34:ab:31:
ea:8a:73:25:91:80:3f:33:03:8d:1b:14:81:4f:8e:fc:1c:7e:
a5:3b:df:71:66:e3:91:e3:b0:dd:84:5b:1d:cd:e8:85:48:b4:
1a:cd:6f:07:ac:85:28:a1:70:07:0b:e0:06:b3:7e:a5:64:8a:
f9:3c:90:db:f6:9f:1d:70:09:9a:43:ad:22:d8:e9:02:fb:bb:
c4:ec:41:8e:be:c4:fa:40:80:98:44:df:57:fc:75:5a:77:92:
c4:03:bb:cc:e2:dd:60:1e:f4:d6:c6:29:f4:36:e6:3a:cf:0b:
45:e4:1d:11:d9:b2:77:7f:ec:0d:b2:b2:99:75:94:40:5a:48:
8d:c1:29:67:11:ed:86:d0:c4:84:f5:6d:4c:ee:ff:a8:49:4b:
f8:19:51:ac:62:4d:f3:6b:33:40:5a:04:41:5b:c6:d1:24:71:
4e:bf:ce:54:e6:fd:ce:90:7a:6d:90:ef:5e:38:6e:e4:73:bc:
83:fd:7e:0e:d2:43:f0:15:06:85:1d:1b:d2:01:fb:69:80:8f:
8e:0f:9f:33:73:af:39:23:cc:9a:08:19:fc:0a:30:fd:5d:0e:
7e:b2:72:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:16 2025 by rpki-client