Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: fN+CsSzxfXhlxn6H0l0q2+CAqyk0N7+CE2QpCRd3qQg=
Subject key identifier: 82:99:BF:F1:C6:D6:BA:61:2E:EE:02:12:93:07:4C:BB:FE:31:44:30
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 019A725D0377596AC576F29D9D3A0B093EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 10:01:29 +0000
Manifest this update: Tue 11 Nov 2025 10:01:29 +0000
Manifest next update: Wed 12 Nov 2025 10:01:29 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: 90FxEKfmVr7IZKTMnbLONnyJmtLdnoaeEqHfJhksMUM=)
2: d-cXZlvvdlyn7ox05EmpqUd6gwY.roa (hash: nBiz8J2UJroitgcJmWpKEDt0TmsVS2dSW257R8wSk2M=)
3: ddyzrC5BC4wxEQNwmkjcZcFPmY4.roa (hash: 0XE307HFpJ7wb9YEVzh633mz+Wdn4W7KWCgB9kPDSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5d:03:77:59:6a:c5:76:f2:9d:9d:3a:0b:09:3e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Nov 11 10:01:29 2025 GMT
Not After : Nov 12 10:01:29 2025 GMT
Subject: CN=8299bff1c6d6ba612eee021293074cbbfe314430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:95:30:22:5a:bd:e8:e6:25:74:26:d7:9b:d7:
5c:04:58:4d:5c:c1:af:75:67:cf:b6:86:81:d4:e1:
87:d3:2b:24:72:98:1c:7e:b8:85:be:68:fc:4c:26:
ca:0f:b9:21:3c:41:14:8e:c2:4a:fe:c1:d7:61:ea:
f0:ff:7e:0e:94:99:d3:56:a0:7b:14:49:64:60:81:
23:ad:96:9d:3f:e6:81:35:d7:4e:d0:63:e2:34:ec:
ad:dd:18:66:b7:22:59:50:7e:c1:75:b0:b5:c6:42:
ac:36:58:5d:85:3a:80:ba:a5:08:0f:7f:50:36:83:
d9:9a:c7:42:81:64:e4:d0:99:f9:d7:90:92:9d:41:
d2:e8:ac:fb:58:00:17:8c:11:6b:05:31:e9:08:a8:
84:b5:fe:16:61:33:3a:97:bd:9b:ba:6e:30:27:67:
92:7b:9c:d0:df:d9:fd:29:e6:f6:43:0d:75:cb:8b:
3a:6b:1b:5c:3a:8d:0d:ea:84:4e:2f:c1:e1:35:28:
b8:35:76:f1:3b:b4:53:ac:7a:07:e4:f0:f0:bc:94:
dc:7c:45:29:d1:6a:8b:18:5a:94:9b:3a:c4:ae:1e:
04:96:b2:91:8c:d6:16:2a:fc:29:27:47:e5:c7:5b:
f7:ff:89:8e:d8:29:b0:e1:78:56:2e:2f:a1:9b:9d:
9e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:99:BF:F1:C6:D6:BA:61:2E:EE:02:12:93:07:4C:BB:FE:31:44:30
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:cb:db:b0:1f:9a:2f:78:77:5c:e2:12:8b:ee:44:ec:87:a7:
3e:90:a3:7a:31:51:e6:01:cf:ee:b5:21:35:09:86:51:b6:ed:
31:13:1d:c3:50:d5:ca:98:7d:3c:a5:16:38:f3:ea:55:82:64:
c5:42:70:01:7d:0c:ca:7f:05:d8:95:92:7e:df:73:99:bd:11:
ab:a1:21:2b:f2:38:8e:ff:b7:3a:02:c8:15:35:22:3c:b5:46:
e8:37:ca:f9:16:dc:e5:d2:2a:71:f5:76:1e:a4:11:ab:61:dc:
db:b9:5d:22:c3:31:14:0d:11:22:6f:a4:5e:06:a3:1a:9b:62:
3f:67:86:09:e8:86:db:78:af:dc:e9:c1:ac:26:37:14:d4:29:
b2:de:20:1b:a4:7c:5b:bd:f6:16:8a:7e:13:c6:be:47:0d:52:
9e:fe:98:b2:51:80:da:d0:db:b1:51:e9:3a:99:63:27:81:e4:
53:24:f8:cd:49:f6:07:90:9a:aa:66:b1:2d:62:da:1a:cf:d1:
6c:92:b7:5b:19:d6:1d:9f:da:6c:a5:d2:63:39:f0:42:5c:e8:
23:5a:dc:b0:10:3a:a0:5b:e3:02:bc:a9:6f:cd:4f:9a:e4:56:
82:aa:0e:86:20:44:31:88:56:37:f2:40:fc:47:22:9a:27:5d:
32:93:8d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:52 2025 by rpki-client