Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier: bmsOFvV66kzU/gMpqrCAVhlO0k3AceB2xFZGPQJtI7M=
Subject key identifier: B0:01:69:8A:B2:B0:DD:38:48:8C:EF:66:B8:90:64:55:F8:0A:35:B4
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial: 019A733839692FA8AB13DF265475D5CDDCDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 14:00:55 +0000
Manifest this update: Tue 11 Nov 2025 14:00:55 +0000
Manifest next update: Wed 12 Nov 2025 14:00:55 +0000
Files and hashes: 1: 6D6NbO4mpX3571YePb7wBqCbgBc.roa (hash: 360JpGFWi4fwKRE3FPgMGW/rJz0k3wsKNSQFnzGnVZI=)
2: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: O+M2Pxd188NJhvdAvOuJ9YDmUEyCXTcemuJO3t30kEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:39:69:2f:a8:ab:13:df:26:54:75:d5:cd:dc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Validity
Not Before: Nov 11 14:00:55 2025 GMT
Not After : Nov 12 14:00:55 2025 GMT
Subject: CN=b001698ab2b0dd38488cef66b8906455f80a35b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:bd:aa:ab:35:bb:6f:66:53:7f:48:09:90:
58:07:cd:7e:3b:f5:8d:3a:89:80:50:e9:de:aa:6c:
be:6c:b7:1b:b0:d1:04:43:f5:15:38:f3:c6:60:17:
61:51:26:46:f7:bf:39:ab:ef:0d:c8:c8:d3:49:60:
43:49:8e:c3:a0:c4:6d:98:ad:35:3b:08:12:f8:cc:
2f:4e:24:ae:82:c8:bb:71:6d:5b:ba:18:0a:49:03:
60:a4:0a:78:a9:1f:c3:5c:a2:1c:a1:11:e2:87:31:
01:10:40:58:75:fa:a9:fc:bb:d1:a5:d1:47:5a:6d:
cd:0f:65:0f:ce:7d:dc:78:74:e1:36:d2:0b:76:eb:
67:bd:4c:06:10:46:95:99:96:ea:aa:3e:29:fc:c7:
3e:72:f5:4e:bd:ca:1d:a6:e0:e2:08:b0:af:da:fa:
ff:e1:87:4f:bd:16:d4:ff:32:0b:e1:5c:6c:f1:c3:
9b:62:7b:32:f7:38:88:43:54:c8:c9:1e:76:1b:73:
12:a2:1f:d5:d9:aa:a0:0f:a9:c6:90:ba:a9:16:85:
0e:b9:0f:3a:e8:ac:04:11:2c:5a:23:46:06:7c:ed:
ff:b6:70:f5:a6:60:74:30:cf:d4:0c:08:4e:53:57:
d1:9c:84:73:44:02:52:fd:fb:14:f9:69:62:d6:3e:
3f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:01:69:8A:B2:B0:DD:38:48:8C:EF:66:B8:90:64:55:F8:0A:35:B4
X509v3 Authority Key Identifier:
keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e6:1e:f5:95:0c:fe:1b:21:6b:c3:07:29:2e:1d:13:05:0f:
a3:4e:d0:96:2d:30:ef:d9:a8:0c:3d:ed:5e:da:d7:5f:26:dd:
51:0e:ec:7b:62:16:67:15:c4:fc:53:f2:88:6f:65:b7:90:69:
2b:47:92:2d:09:93:9f:97:f5:c2:4c:6b:b8:97:36:88:22:d0:
cf:06:f6:e1:79:f9:b7:c6:9b:87:44:53:3c:a8:f2:8e:2b:94:
76:2b:2a:bc:b6:da:56:cd:5b:28:55:a1:44:12:37:27:54:67:
a9:71:2f:64:7c:f5:8a:c2:9b:fe:c2:14:98:28:a8:95:6a:0f:
c7:b9:5a:f5:2a:47:51:fd:9c:ac:03:1c:05:dd:65:e1:41:d9:
84:b8:16:4a:fc:34:3d:8d:c6:d1:d6:78:e7:d3:9c:d4:17:1e:
a5:b3:69:dc:62:cd:91:78:b5:0c:c4:40:71:83:a3:f6:38:56:
ec:86:10:3e:36:cc:1b:ad:ba:f7:41:41:bc:12:e7:82:64:ef:
47:db:cd:28:72:8e:b2:78:42:e7:a9:86:c7:a6:d9:e6:7f:ed:
f0:0f:74:20:c6:fa:ef:83:4c:24:80:43:d0:67:ec:da:e5:18:
57:15:32:34:6f:54:66:56:10:41:f4:a2:59:f2:f2:58:c1:d5:
26:9f:39:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:45 2025 by rpki-client