Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
File: 3EtKGKfhUaN9peTM2qnn29iOnZM.mft (raw, json)
Hash identifier: r49EHce2bZDkcspc52Pp7K3pzc1IfgoUSzeCQUI+IfI=
Subject key identifier: E3:0B:76:EE:58:E3:B3:E9:D4:03:97:DE:B5:3D:DF:F0:4F:81:21:11
Authority key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
Certificate issuer: /CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Certificate serial: 019A72937FE47BF37DC6D2918B0F28BAFD4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
Manifest number: 06C8
Signing time: Tue 11 Nov 2025 11:01:00 +0000
Manifest this update: Tue 11 Nov 2025 11:01:00 +0000
Manifest next update: Wed 12 Nov 2025 11:01:00 +0000
Files and hashes: 1: 3EtKGKfhUaN9peTM2qnn29iOnZM.crl (hash: q4mHu0PBHqqu785YhgcHNPd8josW3Nr3La5MscQxeQ4=)
2: Q6We2_Kzknmf_FU65X_ThS9Li9U.roa (hash: T5kdvis2FcaJDZX7ZiymCfqr46qyRqmHtR1xf7wekhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:7f:e4:7b:f3:7d:c6:d2:91:8b:0f:28:ba:fd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Validity
Not Before: Nov 11 11:01:00 2025 GMT
Not After : Nov 12 11:01:00 2025 GMT
Subject: CN=e30b76ee58e3b3e9d40397deb53ddff04f812111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:38:83:b8:b5:e4:d2:84:4f:a9:79:76:37:
23:6f:cf:6a:93:66:d2:76:be:9c:09:98:5b:46:d8:
67:cc:46:45:43:ea:89:33:29:80:2a:e0:71:71:e7:
50:69:18:06:b1:33:eb:30:01:67:1b:a2:c6:77:56:
7e:f6:58:dd:cd:e3:3a:67:46:2c:1f:a7:b7:a7:0a:
04:72:3b:94:93:0d:22:84:5b:cf:ab:88:ab:11:3f:
54:d3:e9:82:9e:1c:36:18:25:c4:a6:04:a8:14:da:
79:74:37:09:9b:02:35:5e:2e:2b:84:94:e0:4a:b8:
b8:82:f3:a6:ca:24:aa:49:91:5f:1e:33:0c:dd:4a:
cc:76:fd:00:c2:a7:ae:9c:ec:75:6e:8f:a8:2e:09:
6d:84:d0:3c:e5:ff:ca:ad:e1:cb:2f:98:28:c6:18:
a9:58:e3:4c:c0:46:d5:3c:05:54:02:2e:c4:77:2b:
0e:87:92:d7:81:ea:a7:b9:c2:4e:3c:50:17:26:0b:
a2:a5:1d:2f:e8:e9:6f:65:11:7a:38:d2:d8:30:e2:
dc:d8:2a:2c:57:d6:da:90:a9:f5:6f:79:62:9e:fa:
80:16:b8:68:1e:02:36:98:70:91:64:d9:c0:c8:01:
15:9d:36:b5:35:48:67:f8:ba:fd:cf:0a:78:ca:79:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0B:76:EE:58:E3:B3:E9:D4:03:97:DE:B5:3D:DF:F0:4F:81:21:11
X509v3 Authority Key Identifier:
keyid:DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7a:42:2c:dd:28:b6:c2:db:fb:7a:28:26:12:6c:91:2a:7a:
57:df:1e:19:fa:5a:23:d2:43:16:4d:fb:68:ef:4a:9d:30:79:
c2:f2:65:62:c7:d5:48:a8:cf:50:3f:b7:b3:29:27:fb:2a:24:
1c:b4:15:eb:a9:ec:15:42:2f:f1:79:6e:de:21:ec:a0:f3:7b:
5f:66:fe:b4:dd:58:50:9d:66:27:de:15:23:d5:38:f2:90:e4:
a0:d6:e8:a0:54:41:f0:d9:03:49:93:82:a7:2f:e6:6e:c5:6c:
d1:b8:14:3b:fc:ec:58:f7:cd:8b:14:30:e6:9a:3a:c3:38:76:
a9:62:54:e6:b8:12:37:b8:1a:66:74:90:90:ca:aa:86:39:06:
a4:34:5f:bb:84:4d:f1:18:8e:66:6b:db:f4:32:3a:50:24:fe:
33:80:c9:d8:00:5b:55:10:70:e6:36:5b:a7:54:e5:2d:f2:e8:
80:7d:fc:08:f6:ed:a7:ec:21:6c:d0:82:1a:5a:f7:a4:5b:29:
fa:61:8d:fc:2b:17:89:9c:3f:ab:83:ea:b8:5e:ee:8e:bf:14:
e1:84:2c:6d:5d:4e:bb:de:f7:ab:65:2c:9e:20:26:12:8d:b6:
01:b3:d7:59:8f:19:b9:ee:95:23:95:70:4c:14:3a:33:46:d0:
90:d5:0c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:39 2025 by rpki-client