Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
File: 3SppXEEiHdjt3PxcS1zAt4nLlTs.mft (raw, json)
Hash identifier: wshSy7HJjgj46KiLr444VHIXpY6kzM1lZr2W4C/BLr8=
Subject key identifier: 7D:42:4B:8A:EA:8A:4A:46:02:FD:86:65:E0:04:80:99:2A:89:A1:25
Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
Certificate issuer: /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Certificate serial: 019A72CA6BCEEBFA4F2749DE202681160764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 12:00:59 +0000
Manifest this update: Tue 11 Nov 2025 12:00:59 +0000
Manifest next update: Wed 12 Nov 2025 12:00:59 +0000
Files and hashes: 1: 3SppXEEiHdjt3PxcS1zAt4nLlTs.crl (hash: stCGaCS9ZnKBP9LQfzp+f3jVxGjAxrEwnG8+a5g41Y4=)
2: ZxKbEdzKxauu7o-Y7eoipbP5kS0.roa (hash: bVgUBiwiMttSarotQ+bYBGzvg0m/rWkM8yb5LV2CZwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:6b:ce:eb:fa:4f:27:49:de:20:26:81:16:07:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Validity
Not Before: Nov 11 12:00:59 2025 GMT
Not After : Nov 12 12:00:59 2025 GMT
Subject: CN=7d424b8aea8a4a4602fd8665e00480992a89a125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:1e:8c:15:f2:63:85:4d:f0:a7:ac:e6:5e:
4a:83:42:24:68:49:27:a4:67:e7:66:06:6e:a0:0b:
bc:9c:e0:ee:75:5b:fd:b8:b8:ca:ab:03:50:1c:31:
92:05:32:a2:e1:5f:ff:d8:d7:da:ad:79:70:c5:89:
25:57:75:e7:bd:01:6a:71:30:a4:be:d6:06:27:48:
c4:ba:a4:30:c0:2d:cb:f9:f5:58:2b:08:5d:da:5b:
92:3a:87:07:d2:bd:cf:4a:1e:2a:98:6a:fa:42:3c:
c6:ce:ba:ac:6d:d0:b7:02:d9:4a:97:2d:80:da:74:
bb:08:a1:e1:9b:db:33:d2:6c:c3:32:85:39:2a:7f:
47:ad:30:e6:89:9e:c2:ea:1b:94:6e:4b:fb:73:3a:
09:7c:4e:38:d2:fa:fc:18:09:57:d1:9d:95:f9:ff:
26:32:ff:07:46:03:df:dd:c7:8f:61:43:9a:7e:49:
bb:2d:d2:29:db:25:1c:84:f4:25:28:dc:4d:a3:ba:
86:7c:83:e1:34:81:26:46:bc:5e:f9:44:e6:ab:26:
5f:47:ed:e8:fe:39:28:37:db:cc:77:81:e1:aa:c1:
ec:58:3f:c3:f3:27:e2:96:a6:e6:ca:c9:20:c4:a7:
a2:25:8d:28:1c:cf:d4:64:03:97:84:65:22:20:66:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:42:4B:8A:EA:8A:4A:46:02:FD:86:65:E0:04:80:99:2A:89:A1:25
X509v3 Authority Key Identifier:
keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a0:12:87:a6:b0:f7:dc:a4:20:dc:fd:c4:c6:e3:9d:ce:29:
c1:9b:88:21:e6:30:1a:23:34:f5:15:91:6b:e4:ab:fe:d4:f9:
75:21:39:70:75:81:42:30:ed:0f:60:cd:44:e7:20:64:6e:68:
1e:fd:92:44:fa:ed:00:f3:54:2a:c3:fb:4a:48:78:33:cf:aa:
e5:f6:74:7a:67:fd:80:10:8a:b6:eb:1b:4f:51:e9:97:43:ba:
a3:59:ce:69:50:f4:e4:92:21:b8:0b:05:d0:6a:7f:ff:60:5a:
22:68:63:10:b2:d2:52:af:69:ff:88:c9:10:20:73:37:23:14:
99:93:84:50:31:45:98:d4:e1:56:b8:50:22:20:55:01:e1:49:
2d:bd:7e:9a:7c:40:71:68:13:5c:a3:6c:5a:78:d4:5f:f2:c9:
19:af:02:c5:1d:5f:73:d1:ef:64:8d:87:9c:ff:5a:e7:a5:f2:
0a:ea:2a:9c:b2:e1:cf:b9:e4:e9:68:80:bf:81:07:9a:7a:b4:
bd:21:2f:4e:36:c6:4d:82:55:f4:7b:e2:b5:67:5e:35:fa:fc:
98:a2:0d:28:7e:07:8f:8e:d2:59:9c:e4:d7:37:5e:de:e6:1a:
f8:37:26:2f:d8:20:24:c6:f4:e5:15:6a:a0:2d:91:89:88:d5:
7a:b1:c1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:31 2025 by rpki-client