Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
File: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft (raw, json)
Hash identifier: hc1FjCgXTX6EryM1tklYo+FUlbs7rvZvCLFRe3kuPn0=
Subject key identifier: C9:B0:2B:9F:DF:3C:E1:EA:78:6E:79:B6:A4:AD:93:2E:9F:15:36:71
Authority key identifier: DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
Certificate issuer: /CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Certificate serial: 019A71EEE31689254FE3ADE7FB61A2619456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
Manifest number: 0C
Signing time: Tue 11 Nov 2025 08:01:12 +0000
Manifest this update: Tue 11 Nov 2025 08:01:12 +0000
Manifest next update: Wed 12 Nov 2025 08:01:12 +0000
Files and hashes: 1: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl (hash: GVWvhI895m7WlBgo/Nh70Se8Fkv9N/F+WoRIzdSEM1g=)
2: gLtRgaxc3dQh-hyBwzctMY8Z2Kg.roa (hash: kQ5eH+OBT0t4XuJxKyLguz534gAGBpghvIPZ6PMDpiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e3:16:89:25:4f:e3:ad:e7:fb:61:a2:61:94:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Validity
Not Before: Nov 11 08:01:12 2025 GMT
Not After : Nov 12 08:01:12 2025 GMT
Subject: CN=c9b02b9fdf3ce1ea786e79b6a4ad932e9f153671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:4a:0d:22:67:25:b8:1d:f8:df:b2:71:a4:
74:3e:17:69:e2:a8:6f:eb:2a:c1:2a:41:44:72:69:
2e:98:f4:d6:a8:5f:27:74:32:ff:3f:3e:52:c3:56:
05:71:a6:a1:a7:f9:f9:71:56:d9:c5:bc:5e:27:11:
30:16:19:bd:0b:b3:32:a6:b6:3a:e1:21:26:3b:07:
ec:b4:34:84:5f:c7:a2:bf:0d:e4:86:61:14:45:e0:
88:d2:80:39:59:7d:cd:d6:7f:89:5c:33:22:50:30:
91:7c:dd:9a:d1:3f:39:d1:44:d4:08:76:7e:f4:ff:
58:02:ed:1e:33:e8:a7:2a:ca:ff:e5:0c:83:08:25:
4e:7a:07:6a:d2:5d:0e:d2:58:26:e6:de:06:68:01:
5d:8a:5c:a2:87:89:a3:f0:0c:3a:34:e3:1b:ed:09:
28:45:ee:8e:8a:fa:43:25:f5:7e:26:1b:08:ed:5d:
17:d0:77:7d:b4:50:a0:73:5f:60:42:4c:48:33:9c:
1b:52:7c:58:8b:8b:6c:91:d1:72:6d:1d:f0:10:0f:
cf:b5:4e:e1:8e:26:73:97:9f:14:d9:2f:4e:d5:d3:
f8:e3:30:94:f8:92:c3:e8:0e:a6:04:a0:91:5a:bc:
51:05:b3:4a:bd:0f:60:7a:04:cb:9d:8a:cb:a9:dd:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B0:2B:9F:DF:3C:E1:EA:78:6E:79:B6:A4:AD:93:2E:9F:15:36:71
X509v3 Authority Key Identifier:
keyid:DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:cb:10:b7:81:21:d1:9a:76:3c:97:1b:7d:ba:b8:7b:13:fe:
44:9d:d4:01:c6:a5:ce:0a:4b:e0:f8:83:15:63:2f:0b:4c:ed:
d3:aa:ed:42:88:a0:ed:7a:f6:b5:e7:c4:7a:2e:e1:7a:44:09:
99:55:1f:77:e1:f6:43:7d:55:fd:de:5b:1a:3e:91:e7:37:de:
61:13:94:cb:33:3f:eb:02:be:f9:51:d3:41:6a:77:ed:24:5e:
53:dd:ce:b5:f8:6c:95:c7:90:a4:76:53:da:71:c3:76:78:56:
2b:5c:2a:36:e4:15:6b:46:17:42:d5:30:2f:09:53:84:07:f4:
4c:01:5c:b2:86:b6:b0:a3:45:67:81:75:ab:7b:fd:85:53:c6:
54:2c:15:e1:d8:60:20:63:03:7f:69:75:13:ea:6b:b0:11:b1:
03:50:c3:d5:2a:46:8b:5c:4e:fc:ac:b7:14:6f:fc:7f:29:a1:
e6:af:6f:6e:65:0b:b7:53:94:71:40:aa:47:80:c3:c1:4d:59:
4d:d6:f0:cb:63:2c:dc:9e:cc:5a:ce:9b:95:d2:22:9c:91:56:
31:67:c7:9b:72:50:24:58:ca:32:57:e5:7d:96:4b:f6:b7:50:
21:56:67:60:1b:1a:c8:20:0d:89:86:70:5a:00:4c:ca:c6:33:
4d:b3:48:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:51 2025 by rpki-client