Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: TiueW2tT3AVE3DSogshEHBdhVaxLypoyzBPj23mfBYI=
Subject key identifier: A7:2A:4D:DE:11:4F:AE:E7:7D:5F:E1:C1:6F:F9:AA:6D:D8:AC:12:76
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 019A72940B06C7FB1A121EBEE4A08C8DC426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:01:35 +0000
Manifest this update: Tue 11 Nov 2025 11:01:35 +0000
Manifest next update: Wed 12 Nov 2025 11:01:35 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: 6Z7xRtKNUZSF6aIdvVxmIf3AoFwQfIjlrU51Q1tlIzA=)
2: sHHovkPcLVWIMQ_tboQIdcTBHy0.roa (hash: fYwK2GNfLuzV598M+4d1qnmBbMriSVB83QSoeu+hALg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:0b:06:c7:fb:1a:12:1e:be:e4:a0:8c:8d:c4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Nov 11 11:01:35 2025 GMT
Not After : Nov 12 11:01:35 2025 GMT
Subject: CN=a72a4dde114faee77d5fe1c16ff9aa6dd8ac1276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:06:ff:ae:b9:88:c4:ab:a5:79:b5:91:90:
7e:ba:70:15:68:4a:20:5f:d2:5e:e8:65:66:fe:c6:
0a:a4:60:0a:d7:74:f2:e4:d5:0e:be:61:b1:0e:72:
d8:0c:bf:84:77:c9:7a:f5:32:41:ce:f3:71:69:33:
7d:98:eb:21:91:98:51:2a:ed:e8:24:3c:e7:7e:56:
76:82:f2:e6:dd:2a:71:37:87:05:89:2d:73:b3:13:
15:43:b2:c1:db:94:c8:ad:f1:fd:f8:3c:10:40:41:
c5:7e:88:d4:e7:d2:54:c2:87:6f:81:a1:93:cc:ab:
07:db:a3:e4:33:84:cd:8b:81:2a:ba:a3:92:c2:45:
57:84:bb:9d:a7:c6:42:78:6d:48:04:c9:e0:7b:e5:
3e:79:be:68:66:12:7d:09:68:ee:4d:f8:c2:c8:2c:
e2:b5:db:16:65:70:d0:7a:fd:de:23:6c:ba:ac:ce:
b6:99:31:c2:98:64:f9:ad:86:ad:7c:fc:23:fb:6c:
0a:10:4e:87:bf:55:b4:ac:e9:37:b4:34:ca:9c:c5:
f1:e5:cf:59:4b:01:8b:da:70:a4:25:da:e6:20:08:
60:7a:6a:d7:b0:08:c3:e0:f0:ba:f6:34:83:ce:25:
a0:5b:7e:a4:68:0c:9f:0e:74:4b:8a:72:20:18:50:
65:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2A:4D:DE:11:4F:AE:E7:7D:5F:E1:C1:6F:F9:AA:6D:D8:AC:12:76
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:da:63:ac:0c:63:9d:c3:3e:7a:ae:c3:57:95:a6:2f:81:55:
42:00:ff:ec:96:36:25:5f:37:a5:0b:26:b0:66:07:4d:c4:83:
96:4b:bf:f5:2f:80:84:2d:90:be:6f:82:05:c6:65:4a:84:f0:
3b:a5:b1:1a:30:60:35:22:ee:12:af:23:c9:d4:f2:c3:fe:48:
70:9a:df:28:78:52:25:03:eb:ef:87:86:fa:1d:c7:5c:4f:97:
43:09:6f:26:dd:5f:60:2d:8b:c6:f5:9b:76:ee:2b:3a:58:75:
84:6d:d1:56:f2:81:07:ef:99:5a:25:67:c6:5b:c1:5c:e0:e8:
12:22:3d:75:a5:71:62:8a:84:a0:47:0e:7b:4c:bf:bd:1d:6d:
0e:d1:40:b5:c9:93:e2:5c:35:90:73:14:2a:fa:2d:da:7c:8e:
9d:4d:9c:7c:5f:12:c3:ac:7c:58:30:2b:98:a7:58:87:c3:4a:
bb:8c:e6:f8:3e:e3:42:30:03:02:8a:a2:03:62:dc:f1:b5:f6:
3a:7b:40:b8:ac:f4:5a:88:b9:0a:af:00:17:a1:f3:79:1b:f3:
a6:aa:94:73:c8:51:6a:88:82:6c:da:28:db:42:86:0b:bc:73:
d2:0b:bf:74:ca:c9:37:1a:be:4a:0e:51:ab:fc:1a:5f:0c:ca:
48:a5:56:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:15 2025 by rpki-client