Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
File: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft (raw, json)
Hash identifier: J0jBPMDBECQ/Rgx9BgAmqsvIs3EMfaEBysZ2YYgqpgs=
Subject key identifier: A2:E2:D6:B4:84:42:14:4A:6F:3B:1B:7B:58:6B:90:B3:64:35:9D:32
Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8
Certificate serial: 019A7225978B8466CC4261677CF884605873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
Manifest number: 0D1F
Signing time: Tue 11 Nov 2025 09:00:57 +0000
Manifest this update: Tue 11 Nov 2025 09:00:57 +0000
Manifest next update: Wed 12 Nov 2025 09:00:57 +0000
Files and hashes: 1: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl (hash: HZNTzQowEm11Zm/ovbQ5z2ERd1mnwX2pNBQBP3leMLA=)
2: hfSj4Acr0ZdBdVZF-bmfhSWxDR0.roa (hash: qMvzKdtsac1CrAS5/GB10mnE0HZEb+d2b/OglfbpJc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:97:8b:84:66:cc:42:61:67:7c:f8:84:60:58:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8
Validity
Not Before: Nov 11 09:00:57 2025 GMT
Not After : Nov 12 09:00:57 2025 GMT
Subject: CN=a2e2d6b48442144a6f3b1b7b586b90b364359d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:3b:16:cf:2d:7f:72:88:b8:98:b5:3d:ba:
c0:00:83:47:3c:a2:3f:f7:ee:fd:ce:5c:9e:ac:bc:
05:25:33:f3:d7:12:7e:51:b9:86:41:de:84:78:41:
2c:44:8d:c9:0d:c0:4b:03:7d:a2:b6:13:af:3d:02:
e1:31:b5:15:b6:1d:61:d6:07:b3:29:3b:34:06:79:
97:d1:06:e7:db:8d:e9:18:b9:49:24:46:aa:38:fb:
89:f5:e4:35:f7:a4:78:44:34:05:53:f8:e2:7b:28:
49:5c:59:08:0f:2f:e4:77:8b:1f:f6:da:d3:93:cf:
7d:0d:b7:c0:93:b0:7b:3c:5a:11:05:e8:f2:6a:2a:
39:7a:fb:0c:71:e3:7b:8f:f1:a3:60:2e:f5:22:1d:
a6:3f:4d:d7:db:12:87:af:e5:01:8f:d0:4e:fe:4d:
a5:c4:9a:ec:22:5e:be:21:ae:77:e6:94:26:a8:21:
5e:29:09:93:ac:dc:6d:f8:63:ee:86:e0:30:a2:ba:
cb:dc:82:64:0b:4d:bb:b7:8c:17:de:6e:4c:33:bc:
31:04:9c:c6:59:d0:28:aa:9a:7c:96:33:f4:ff:80:
f1:d8:98:fc:09:b8:59:81:8b:bf:a3:dc:7d:3c:28:
b0:11:04:ae:ea:b7:b3:af:ba:a0:f3:f0:d6:05:75:
90:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E2:D6:B4:84:42:14:4A:6F:3B:1B:7B:58:6B:90:B3:64:35:9D:32
X509v3 Authority Key Identifier:
keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:de:9a:d2:70:7d:f6:77:c7:81:4c:a6:91:8a:a5:41:4d:97:
46:4b:d0:35:a0:e6:85:59:a3:25:b6:e8:15:33:03:8a:2b:2e:
21:90:6d:15:04:97:65:00:dd:fc:47:07:c5:30:d9:3d:9f:97:
cb:86:43:3d:9f:b5:ec:39:91:9b:04:d7:bc:fc:04:50:55:74:
7f:99:3e:85:64:ec:1d:5c:b7:23:ad:a9:73:b7:42:f9:77:2b:
7d:4e:fe:4f:ed:8d:21:33:62:ba:74:36:94:ec:2c:bc:d8:6e:
66:f0:46:81:10:2c:30:cf:c5:42:00:76:b5:0e:4d:40:4b:b2:
6e:e6:70:e6:80:57:c2:40:25:b7:29:fe:f9:e9:d3:35:4b:ea:
3a:4e:16:cb:c5:44:72:3b:c0:ba:45:56:2a:ad:39:37:77:c9:
76:d2:99:d3:70:b5:f6:0b:d2:51:3e:3f:74:1c:8c:d2:d1:9c:
18:2d:e9:04:fe:fb:b9:d8:c2:3d:f5:e8:63:ac:3b:08:13:b0:
e7:7f:d4:e2:07:6f:8f:81:84:ad:8b:83:99:f8:2f:57:bc:c4:
5a:be:55:f7:5f:75:3e:1e:0b:37:7e:3c:f5:c4:cf:9c:63:a2:
07:f8:18:b3:86:8f:92:c7:77:72:34:01:94:22:3d:b2:97:f7:
c2:cb:37:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:06 2025 by rpki-client