Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
File: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft (raw, json)
Hash identifier: blkwZKnGijaaRXmm9bhTv90cjOBE0teCwactnfgetFU=
Subject key identifier: 96:43:9A:54:1D:31:58:6E:F3:E6:4D:D7:C0:F4:AE:53:7E:AD:6A:97
Authority key identifier: DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
Certificate issuer: /CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Certificate serial: 019A71B86BE1E4E1B5088A9BFF9FF6390967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
Manifest number: 0105
Signing time: Tue 11 Nov 2025 07:01:42 +0000
Manifest this update: Tue 11 Nov 2025 07:01:42 +0000
Manifest next update: Wed 12 Nov 2025 07:01:42 +0000
Files and hashes: 1: 1OnAxERvwCdnk__Rn-ReVSlbcoM.roa (hash: aqwsdMgIbP4mFzFG0p4x2dQgO0GnM+i3JMeyA55YC7E=)
2: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl (hash: HtIt0KYPeujQJ5pNEmcxIowdaZ1AqUgD61jnUtgFrUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:6b:e1:e4:e1:b5:08:8a:9b:ff:9f:f6:39:09:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Validity
Not Before: Nov 11 07:01:42 2025 GMT
Not After : Nov 12 07:01:42 2025 GMT
Subject: CN=96439a541d31586ef3e64dd7c0f4ae537ead6a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:49:9d:34:98:13:d1:a6:fb:ad:f7:21:4b:
b3:4b:5a:5b:f7:e0:e6:49:96:19:b1:a4:02:14:63:
59:ea:2d:f8:d8:87:d4:f8:18:d0:a8:32:7c:6b:50:
42:44:ba:70:b3:e3:54:a8:1a:79:61:82:5b:4d:14:
a6:f1:2f:a3:ee:ef:48:3a:37:08:0f:93:ab:f4:f6:
de:4a:02:fc:f2:81:a8:f6:4b:cf:88:db:65:3e:bf:
a0:cb:27:18:27:47:11:38:3e:14:b0:0c:44:fa:60:
c2:54:16:53:cd:c7:bf:5e:18:46:59:aa:2c:20:5d:
6f:e5:02:63:22:96:28:93:8b:3a:16:d3:47:18:97:
1d:4f:be:58:58:9a:98:f9:b3:74:f6:e5:4a:5d:3d:
c9:97:2f:0e:bf:66:52:38:c9:3d:77:0e:1b:36:c4:
1c:9d:6c:83:ab:8b:60:33:17:22:2d:9b:ac:87:2e:
0c:de:8a:34:9d:91:3f:a6:05:62:d9:b2:f0:e7:b2:
bb:c6:ca:ee:b0:ea:62:e7:15:a6:e2:86:76:db:ee:
ed:ad:5d:2d:7f:a7:f9:c9:01:df:34:a9:05:04:51:
c8:2f:52:55:9c:66:49:74:2e:24:70:dc:fb:f3:ba:
81:95:e7:92:ce:09:13:2d:61:70:5b:35:7f:79:ea:
58:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:43:9A:54:1D:31:58:6E:F3:E6:4D:D7:C0:F4:AE:53:7E:AD:6A:97
X509v3 Authority Key Identifier:
keyid:DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d9:07:e9:2a:16:68:02:4e:f6:54:e2:1f:36:f7:a0:88:20:
a0:2b:54:de:16:f0:e7:37:cb:9c:d0:00:a8:81:fa:9c:d5:e9:
e5:63:27:3e:c7:b6:08:cf:30:02:da:27:09:1e:4e:2e:69:7c:
02:08:d4:ae:68:62:06:23:3d:0b:c5:b7:6b:a1:8b:07:c6:49:
33:50:dd:29:2c:ec:8d:a2:c8:ce:cf:05:84:51:5d:2b:ad:e6:
68:e7:2c:59:0f:8c:bd:80:86:c7:e3:67:e9:95:45:e9:03:84:
bc:10:f6:a8:44:09:73:bb:e2:c6:36:0a:4b:14:2f:e4:52:b8:
0d:63:9b:ba:c9:7d:24:cf:5a:84:dd:c0:65:9e:d7:3a:62:9c:
82:18:59:b6:c6:c4:e1:e7:34:ce:2e:26:bc:f7:8f:1d:1f:cd:
88:67:35:f0:35:1f:6b:b4:77:d7:9d:d1:b7:32:c2:c7:2c:86:
3a:76:e9:e6:49:4b:0e:d2:ef:04:a8:2e:0c:1f:49:32:33:73:
4e:26:d4:d6:c1:c5:d0:71:5a:f2:90:68:2d:59:24:9d:2c:0d:
9c:af:eb:05:72:ca:e9:f1:a6:f3:88:49:1d:7f:dd:c4:e1:bc:
5c:af:35:b1:b1:31:9e:7b:24:dc:17:85:8a:6b:3c:2a:97:89:
fc:ab:b0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:52 2025 by rpki-client