Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
File: 3SSW_v-ZEna9G4Uza3aXqYAPhME.mft (raw, json)
Hash identifier: w8Ujgg7b73t0FIqCU80nPHue75oTLuA9n0YTboNupaQ=
Subject key identifier: 53:23:C0:E0:0A:2D:58:48:23:68:BC:4A:3B:11:C8:99:C0:A0:A0:89
Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
Certificate issuer: /CN=dd2496feff991276bd1b85336b7697a9800f84c1
Certificate serial: 019A7149E5DFCBB45AB7477206679DD1BA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
Manifest number: 14F8
Signing time: Tue 11 Nov 2025 05:00:59 +0000
Manifest this update: Tue 11 Nov 2025 05:00:59 +0000
Manifest next update: Wed 12 Nov 2025 05:00:59 +0000
Files and hashes: 1: 3SSW_v-ZEna9G4Uza3aXqYAPhME.crl (hash: E7ZdKnlWWjfD2bx7B3msdU9IWqBs1YkxJFAWLmKO83o=)
2: _TZfk1Rmeyf1zvc7aTw1N_o9jl4.roa (hash: YhjRwkXWYnkbx6aMihX7dtN/B/p9Fk3n2XWBk8oSMZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e5:df:cb:b4:5a:b7:47:72:06:67:9d:d1:ba:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1
Validity
Not Before: Nov 11 05:00:59 2025 GMT
Not After : Nov 12 05:00:59 2025 GMT
Subject: CN=5323c0e00a2d58482368bc4a3b11c899c0a0a089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0e:8f:49:5d:c9:e8:1e:60:8d:80:56:c4:39:
ec:82:41:3e:25:63:3a:ad:15:dc:ec:34:43:08:24:
12:1e:07:f3:93:e7:36:cf:e1:46:cc:4c:87:91:3e:
07:d7:a1:98:31:2a:41:88:d2:80:02:c0:17:10:93:
57:7a:f9:0f:f6:a5:7e:1d:76:50:17:dd:ac:a6:0c:
22:d7:4f:83:54:34:df:1c:50:bc:85:20:db:77:71:
c2:6e:59:87:85:28:1e:f8:b2:50:b1:5f:d4:00:43:
ea:29:1e:38:27:8b:1c:c5:f2:b4:12:99:e6:14:c2:
b9:39:eb:9c:ea:2f:60:0a:53:21:49:ce:ea:d0:9d:
2b:31:c6:b9:61:b5:fd:1c:52:47:61:56:cd:e3:94:
16:b0:dc:b9:cd:a1:eb:15:1d:7c:df:4f:e2:54:4d:
63:13:79:18:3c:cc:a3:01:40:72:68:04:63:f8:ef:
12:28:3e:a6:0c:b2:0e:ed:75:d9:69:a2:aa:f4:b2:
da:9a:d9:89:8e:1a:79:6e:b5:e7:94:29:48:f9:d6:
0e:0f:2e:a0:dd:a3:f6:b9:02:fe:1e:9f:b2:ba:39:
7c:8f:2f:12:34:c9:69:f1:38:84:c4:f9:3e:ac:72:
a8:0e:1e:34:71:32:82:f1:aa:44:78:97:a3:8c:35:
e8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:23:C0:E0:0A:2D:58:48:23:68:BC:4A:3B:11:C8:99:C0:A0:A0:89
X509v3 Authority Key Identifier:
keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:32:a9:1e:09:70:33:98:ed:25:c8:44:df:4e:31:d6:9b:c6:
73:1e:9d:89:09:a1:8b:c7:de:fc:18:54:0c:7e:d9:6f:b0:03:
38:7f:f8:b8:a9:1a:14:a9:bc:23:24:63:c0:7e:70:32:c2:63:
27:45:73:16:b5:93:62:fe:bf:c7:8e:c7:05:42:b6:4c:f6:06:
27:17:af:eb:06:c2:6b:a9:b6:60:8a:4f:17:64:e4:ec:c4:de:
6d:c7:a5:45:4c:3e:9c:79:10:86:d9:6c:d6:ef:c2:cc:cc:f8:
53:70:21:20:23:fc:04:dd:1a:6b:48:6b:d2:19:ce:09:5c:b7:
28:9d:32:41:dc:f4:42:43:5a:dc:45:72:7e:29:1c:84:7e:65:
5f:da:f8:e7:df:22:c3:87:2c:81:1c:bc:9c:d0:da:42:06:2a:
17:85:fe:c5:39:26:e3:d9:82:20:7e:2e:a7:18:79:5f:64:77:
35:60:74:44:c3:78:56:63:a1:fc:29:97:40:42:63:c4:d1:d4:
57:7f:74:e2:8f:87:a1:3e:e9:d8:f8:1b:4e:37:d4:ee:8d:bc:
20:31:a5:1a:03:ee:62:bf:c3:a4:01:4a:f5:73:bb:4c:ab:bc:
e1:a3:bc:dc:79:7c:cc:d2:de:4b:6e:fe:ac:7b:a2:28:21:df:
65:4b:06:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:30 2025 by rpki-client