Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: VzYeaiUspbluE1PnnveM66L7gq9AtRlpQncv+CBZxpU=
Subject key identifier: D4:A0:16:71:C9:48:0D:B7:C1:23:04:F1:E5:31:CD:F8:2D:11:CC:9D
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 019A71B88C17C65B17523A16517DE0D5E5FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:51 +0000
Manifest this update: Tue 11 Nov 2025 07:01:51 +0000
Manifest next update: Wed 12 Nov 2025 07:01:51 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: eBELaji0uGQssniVnl6/RhCmcaUtu/cagTl2wkEPbEo=)
2: VU0FkvZgVaRI8EGkm-qXkP1h2_c.roa (hash: FXgImtBv7FeA5blXsKdg5pD7MuiscFVJi0Lfx25h6e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8c:17:c6:5b:17:52:3a:16:51:7d:e0:d5:e5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: Nov 11 07:01:51 2025 GMT
Not After : Nov 12 07:01:51 2025 GMT
Subject: CN=d4a01671c9480db7c12304f1e531cdf82d11cc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:a4:76:76:27:c4:4a:0e:03:88:2d:18:c2:
e0:4d:1e:87:ab:1f:fd:c4:b2:6e:2e:c5:cf:36:69:
4e:ad:3b:71:cd:2a:ca:f8:0e:17:f8:74:2c:4a:67:
f2:45:c2:ac:58:48:2e:f9:1b:13:58:a6:b1:5f:1b:
85:65:89:9f:bd:0e:68:bc:1e:ab:c1:2f:c2:48:cb:
64:49:41:ae:44:9e:f9:3b:4d:4b:c2:2d:90:4c:7b:
a0:f9:bc:a2:72:f3:46:d3:2f:45:b4:ec:f8:80:7c:
24:af:43:f0:8a:40:1f:a1:59:19:aa:83:e2:35:a4:
2f:6c:f8:f3:9e:db:55:b5:8f:56:ae:dd:63:0a:45:
b9:ac:e8:52:c9:8f:dd:13:b5:bb:07:df:09:b8:e4:
20:12:a0:c0:16:cf:d5:78:e1:94:36:69:3c:0f:6a:
41:ae:a1:58:ee:8d:63:be:8d:a7:18:5a:dc:7b:7e:
ab:9c:2a:a5:b8:84:13:c8:79:fa:3c:33:e7:d0:4d:
43:e0:32:7f:6b:03:c2:14:54:7a:50:12:db:fb:05:
77:50:49:b7:9a:28:15:61:9b:d6:a9:0c:bf:92:9d:
95:7c:c1:15:41:77:bb:2b:11:bd:1c:cb:44:59:73:
30:af:27:9d:13:d4:cb:88:3f:27:ad:ec:48:3b:bc:
7e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A0:16:71:C9:48:0D:B7:C1:23:04:F1:E5:31:CD:F8:2D:11:CC:9D
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:bc:6a:fb:45:c9:9d:05:7b:d5:1c:e7:05:a4:ab:fd:00:63:
a9:ad:79:a6:62:06:33:cf:87:d0:0c:a0:e2:b4:fb:db:f3:57:
c2:5c:0d:d4:d9:fc:d6:3f:f6:5d:ef:d1:d6:69:34:56:be:e6:
d3:f3:4f:1c:72:0a:53:3c:37:c6:0d:dc:54:b0:2c:49:db:9b:
05:e5:b2:23:c1:f2:d2:77:e0:36:06:3e:c0:b6:02:8a:98:1b:
e2:63:ca:9c:7d:7e:19:26:47:79:0c:0e:cd:cb:34:5b:d5:12:
e6:6b:3d:e0:18:f9:d0:7e:73:bb:6f:2f:dd:fc:fb:bd:b6:10:
90:62:4f:d2:e5:72:a3:67:b3:8b:a6:0b:de:b1:b8:71:b9:e7:
54:c2:79:ea:db:03:17:1a:5a:ce:98:e3:b8:18:85:ea:28:a7:
83:8c:61:4e:d0:ed:a8:6f:d1:55:ee:1f:7d:ef:9a:12:98:40:
a6:20:53:8d:0f:7b:7b:ea:5e:df:61:56:d4:1b:85:69:77:d5:
86:16:f8:de:61:3a:9d:38:de:a2:ab:cb:60:3f:55:ea:36:41:
a0:6c:d7:c1:b4:9b:46:fa:8e:7e:35:f9:dc:27:6e:18:70:a3:
7a:d9:03:75:d3:ae:ea:cb:2e:06:27:e1:57:5c:3c:9a:ae:e6:
53:ab:ac:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:06 2025 by rpki-client