Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
File: 3pRhwhG_NVHFUHyTC0IExuxDsyI.mft (raw, json)
Hash identifier: s/yicU3MSNhfWpVMyRycstMt/pTkr77eo7LJFQF3QoI=
Subject key identifier: FF:90:2C:68:F9:C4:BB:D7:B3:B7:29:D9:45:F7:06:A3:B8:93:A3:D7
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 019A7112E844007815B102A41B8AD46A713A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
Manifest number: 11C0
Signing time: Tue 11 Nov 2025 04:00:55 +0000
Manifest this update: Tue 11 Nov 2025 04:00:55 +0000
Manifest next update: Wed 12 Nov 2025 04:00:55 +0000
Files and hashes: 1: 3pRhwhG_NVHFUHyTC0IExuxDsyI.crl (hash: pAmWT1TwTPuSAgSqNr2J7apqZc/MRL3aieOdByMiVyA=)
2: To63YyOS4m4xGKG36WLK52zQE8c.roa (hash: tp9xM1hLtDqI8FvsSwdqSoCI37g77m4oJd7PdWAciIs=)
3: nCbygDSQqVJActb3a9ygHH55YMo.roa (hash: q7RNrOka1+1oTdyfp9kvm4i2FWeBDfQoN31cSGJUoVg=)
4: rNJomldCeu_xMB-3_GrfVy4SpuA.roa (hash: 0qwCuh+Crxi2V764XIv8ArKA6g54Zdfi93Itg0+iAvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e8:44:00:78:15:b1:02:a4:1b:8a:d4:6a:71:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Nov 11 04:00:55 2025 GMT
Not After : Nov 12 04:00:55 2025 GMT
Subject: CN=ff902c68f9c4bbd7b3b729d945f706a3b893a3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:88:b8:d5:ad:bc:52:a8:fd:25:62:ae:ab:
ad:57:08:62:b9:49:d1:65:9f:0e:09:10:41:62:00:
09:1a:59:61:66:86:2a:83:8d:e8:c4:52:43:4e:44:
03:1f:37:5f:80:d8:59:83:ab:c5:39:25:3c:d5:9f:
3d:00:65:aa:dd:23:5c:58:4e:f2:80:48:f4:d7:18:
86:e3:cf:73:29:87:ab:ef:2a:f7:9d:9e:22:cf:af:
e7:d6:22:e5:7a:cc:ca:85:99:a2:a4:9a:89:f1:48:
dc:b2:45:5a:83:27:d3:87:94:1e:f5:ae:75:03:9d:
4f:6f:8a:eb:84:2f:8e:8b:63:29:f0:c0:91:74:f1:
71:26:0c:6b:d4:f9:43:fa:a0:4e:fd:e9:32:9f:c5:
f5:d1:b8:75:0d:56:f9:22:de:c3:67:98:ef:b3:8d:
52:97:a1:bd:bf:2f:d0:85:d2:a8:6a:b2:bb:b5:01:
52:32:28:89:e9:be:7b:8a:9e:a8:17:70:cd:6e:dd:
a2:d7:0d:90:c1:fa:c9:0f:9f:ba:8f:8b:64:f9:b2:
50:31:b4:65:83:d7:07:55:9f:cb:59:a4:d9:a7:28:
0a:53:97:ce:e8:b0:4d:22:c0:fc:cf:72:2e:c6:d8:
d1:ae:f5:8c:02:02:67:75:60:ab:ed:ca:7d:81:2a:
fd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:90:2C:68:F9:C4:BB:D7:B3:B7:29:D9:45:F7:06:A3:B8:93:A3:D7
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a7:c5:71:47:68:31:d5:e9:5e:62:93:e6:68:06:20:02:1e:
64:d2:2b:3a:1f:85:e7:d0:a7:65:ce:37:1b:6b:be:b2:d5:64:
d1:3f:22:c3:80:c2:9d:71:fa:f0:ac:d9:c3:8c:11:ad:1e:18:
a7:53:d4:c8:ba:64:7d:76:32:3c:55:9d:67:d7:14:de:86:db:
4d:8b:5c:b6:42:63:49:ac:d7:a1:1e:cc:96:f1:87:11:08:b0:
08:36:ef:82:45:de:86:ba:81:16:0c:9d:89:ba:58:2e:13:85:
58:dc:cf:ba:59:77:63:af:fa:23:e8:ac:55:4d:b8:91:ca:b7:
7e:3a:15:cf:b5:7f:ed:10:ae:16:43:0b:1a:9f:5d:8b:09:a6:
40:31:e5:76:02:35:03:72:14:03:2b:f2:96:b2:ce:90:35:50:
d1:14:3b:b3:21:cf:44:58:c9:df:8b:c7:f9:0b:a9:cc:61:7e:
f5:09:73:98:ba:6f:f0:53:91:b9:2c:ee:35:a5:98:59:21:26:
f2:68:24:b8:1a:07:74:18:93:61:5d:1c:2d:34:5b:d1:f7:98:
35:56:d6:4c:e0:f6:7b:90:97:a3:ca:7f:28:ed:25:54:f5:28:
f3:66:1c:83:0d:7d:db:7c:74:4e:26:b0:17:6e:f9:ea:9b:b4:
2a:cd:c5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:49 2025 by rpki-client