Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: 0l9CkGLke0TTqCTzvZm7VfRcWDTtSECNEXxoVtCHdlg=
Subject key identifier: 36:D7:8C:60:A1:B0:ED:02:46:99:7B:83:FE:4F:EA:93:3B:F4:F1:A0
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 019A71B90090A296EBF16821A1275AAFDE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:20 +0000
Manifest this update: Tue 11 Nov 2025 07:02:20 +0000
Manifest next update: Wed 12 Nov 2025 07:02:20 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: ddcv+gYuuz4OTFvPDuX9WTV1e5duunjLwj6MR/fwzBU=)
2: O3I8fzz4GA8viyeptOfjUJ2mnRw.roa (hash: MhSpfjBUjJxXqy4aU0rHbneKVULz0h6JWSZvHTRBN24=)
3: ovS3rx1XoRtGLlvdJ72CyzvNZcw.roa (hash: lov3tLPiy71ecc5+P9JXxH2Fu9PCJbxZNtxQg4EVWM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:00:90:a2:96:eb:f1:68:21:a1:27:5a:af:de:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Nov 11 07:02:20 2025 GMT
Not After : Nov 12 07:02:20 2025 GMT
Subject: CN=36d78c60a1b0ed0246997b83fe4fea933bf4f1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:4d:13:3f:5d:4a:f5:8e:17:c1:03:9c:35:
aa:13:3b:e4:1a:90:09:5e:d6:c9:20:db:45:9b:67:
51:54:a0:9b:43:b1:e0:c5:d2:96:d2:c9:fb:69:07:
c8:e9:fa:d8:de:0f:66:a0:00:9e:0b:8a:18:2a:19:
61:d9:6b:bc:48:40:ba:94:de:4e:81:0e:28:54:5e:
6a:30:b9:7b:71:5f:f2:c4:5e:39:53:a6:a1:79:1c:
b1:11:24:6d:ce:62:99:4f:1c:90:b6:5f:ec:7f:6b:
f9:b2:d7:a3:5f:07:6a:2f:6a:57:e8:82:31:ea:13:
a0:4f:b3:8f:e8:1c:3c:a6:57:a7:c1:d6:d3:77:7e:
55:0b:21:a6:59:c9:53:e0:b8:43:7a:fd:c0:d5:78:
62:39:09:58:26:53:db:27:e6:a0:ff:ac:86:c8:ae:
88:69:b2:de:ae:71:33:7c:8e:de:f4:df:c5:7b:36:
a8:d0:ac:90:c0:df:ad:0a:7e:49:aa:fa:0b:ce:27:
4e:a9:17:d4:50:c8:89:3f:dd:e8:80:0a:da:8b:1c:
38:80:a4:f4:bf:e1:af:6a:e2:42:50:12:58:59:30:
09:5f:7f:9f:47:42:d4:b5:6a:b1:79:12:b6:dd:b7:
f5:f7:3a:30:7a:c7:bb:65:05:4b:09:97:e2:23:30:
6a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D7:8C:60:A1:B0:ED:02:46:99:7B:83:FE:4F:EA:93:3B:F4:F1:A0
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b2:a4:de:b7:42:48:53:26:0a:52:fc:0e:35:1e:6b:14:e8:
86:50:a5:89:33:18:df:40:69:f4:e1:ae:7b:78:2e:28:8e:f0:
af:ff:91:e8:f0:bb:40:15:83:a0:08:bc:fb:9c:17:0a:20:a1:
3a:34:99:e8:7e:eb:db:26:c1:fa:b8:84:84:91:6c:65:a8:3a:
25:1c:65:cb:20:27:41:81:76:6a:ec:bf:d6:c5:60:8d:8c:97:
72:8d:d5:42:06:71:ee:e2:97:b3:c8:8b:98:cd:fd:4b:eb:b3:
b5:fd:51:6f:f2:e7:e7:7a:5f:19:ac:14:2b:f4:78:68:1f:47:
93:ac:4c:05:b7:24:65:1a:32:59:00:48:bc:df:4a:c0:cb:02:
f9:4c:f9:ba:d9:1c:cc:ae:ed:2f:62:2f:e3:ac:12:84:dd:43:
02:a6:57:b7:f2:8a:40:b7:d3:6b:ce:65:7a:29:05:2d:a9:a3:
b4:8e:16:2f:af:89:e7:cc:65:36:46:75:01:59:43:d8:72:8f:
f9:32:b1:3b:42:0a:f4:2b:f0:75:94:ba:f0:45:ea:7f:20:dc:
5e:62:a9:2a:62:8f:00:21:38:41:4c:61:63:ec:8a:c3:35:ce:
ac:2e:05:1a:00:44:7a:63:b1:29:4a:cc:f7:cc:8d:8c:aa:ba:
15:9b:37:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:45 2025 by rpki-client