Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
File: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json)
Hash identifier: OhSrb5CHLxg0gUXG2vIBvvcJHF3wztSK4cDJfoyN000=
Subject key identifier: A5:0A:19:4B:DA:E6:3E:C0:59:F8:32:A7:D8:97:61:39:61:28:01:DF
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Certificate issuer: /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial: 019A70DC55A935753DFD7A3E30BC1EEFCCB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
Manifest number: 13A7
Signing time: Tue 11 Nov 2025 03:01:19 +0000
Manifest this update: Tue 11 Nov 2025 03:01:19 +0000
Manifest next update: Wed 12 Nov 2025 03:01:19 +0000
Files and hashes: 1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: +fdhV7/So+ejHUKERk3pE2jlDZTuV1nqGUgCd+/hCiE=)
2: _iwCmsjTAlw634BVcFH9x4y6od0.roa (hash: sGzYd7+zk4VbbBPH9QI8yNwz1RatcjDRVrzAv9yiEMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:55:a9:35:75:3d:fd:7a:3e:30:bc:1e:ef:cc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
Validity
Not Before: Nov 11 03:01:19 2025 GMT
Not After : Nov 12 03:01:19 2025 GMT
Subject: CN=a50a194bdae63ec059f832a7d8976139612801df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f0:bd:7f:5b:04:00:2a:9d:e7:4d:fa:9a:1f:
bd:49:49:2f:53:ce:8b:7a:8a:d4:af:db:44:91:4e:
e5:54:25:30:18:88:4f:b2:0e:f1:2b:1f:6c:7a:ed:
c1:76:5e:91:df:23:01:95:f7:3e:b1:2a:5b:da:4c:
be:58:3c:d3:86:55:56:65:8a:10:5a:e0:b4:e3:ba:
00:95:d0:df:3b:bf:83:ff:a7:f1:66:f0:77:82:58:
05:1d:bf:e2:40:5d:c1:60:5f:ff:1a:ae:82:c5:6a:
19:2c:4a:f7:12:8f:d2:e1:7a:0d:37:95:c6:9b:5c:
67:4c:92:a5:87:d3:c1:d8:b2:f4:b5:37:da:c5:9b:
46:20:0f:4e:84:f2:f0:7a:63:49:83:27:22:02:d2:
14:00:ef:08:dd:da:5d:49:e9:cf:46:4b:be:48:1e:
e6:4b:c7:e3:82:48:d9:e9:06:b8:f5:24:85:87:b8:
2b:b4:95:2c:1e:3f:7c:31:2e:70:19:9d:c5:f4:dd:
0c:bc:a0:e9:e3:61:2f:07:ea:ba:40:36:2a:29:2d:
b9:18:c7:ca:72:0b:53:cb:14:00:78:de:e4:b4:53:
f2:07:b9:da:74:1f:4e:1e:18:db:78:8f:b7:8e:52:
68:49:c1:14:3d:77:ef:ab:37:97:3f:f0:be:6e:44:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0A:19:4B:DA:E6:3E:C0:59:F8:32:A7:D8:97:61:39:61:28:01:DF
X509v3 Authority Key Identifier:
keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d0:26:29:03:9d:d8:a2:b6:71:1a:2e:99:28:3e:ce:0e:cd:
68:0a:12:e9:e4:06:74:b9:2c:45:fe:39:1a:1f:51:e6:81:2f:
fe:07:13:aa:1f:19:fc:ac:2c:22:6e:82:1a:55:28:ff:1c:31:
17:67:f8:04:37:1c:55:ed:ee:47:1c:12:91:46:89:ca:4d:35:
27:dc:a3:e7:ee:b4:98:2e:4d:88:da:45:b6:0e:65:5c:6c:83:
19:6f:51:b0:6c:b9:b1:f3:21:5d:f7:ef:f0:1d:e4:2f:3e:96:
a1:03:03:98:44:75:bb:e9:dd:72:01:a4:b4:81:74:88:70:93:
70:a3:fc:e5:e8:83:54:31:2a:d2:3a:3d:8a:34:bc:c8:fd:f8:
3c:2c:cd:62:b0:bb:4a:e7:c9:f6:40:f1:21:a4:8d:f5:af:a3:
86:be:1a:89:d4:be:65:e0:24:bb:25:8d:32:e4:4b:99:dd:35:
a8:0b:7b:3c:d4:b4:68:25:92:54:62:f3:c7:10:32:40:dd:26:
64:3d:c1:ea:07:4b:78:65:5b:3b:aa:66:fc:19:08:5f:df:17:
43:b8:12:4d:42:71:58:72:48:23:c4:87:51:be:2d:37:3e:66:
bb:6b:6c:85:79:0d:7c:37:3f:2a:21:46:05:ef:51:ae:d9:07:
19:73:93:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:27 2025 by rpki-client