Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
File: 3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json)
Hash identifier: z+t2791f4IMFetGC1OAppGxcqVlbWepavs0EjkU8aGs=
Subject key identifier: D9:23:E5:51:B5:FE:A5:58:AB:41:BB:14:63:6A:27:00:B2:9D:B2:A4
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 019A71B7DAA3FC953E5A71437386E86326CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
Manifest number: 1135
Signing time: Tue 11 Nov 2025 07:01:05 +0000
Manifest this update: Tue 11 Nov 2025 07:01:05 +0000
Manifest next update: Wed 12 Nov 2025 07:01:05 +0000
Files and hashes: 1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: J3I4MU8MeMl4gf33ve/yT7EflNV/A4FHu9FNsIhnKtY=)
2: 9yOwmAU645k5B-2q5IOc7M05GTo.roa (hash: E7bgo02yf2p1Xr2S53fCsY3j/+dXZDb8jPxeB97qfpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:da:a3:fc:95:3e:5a:71:43:73:86:e8:63:26:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Nov 11 07:01:05 2025 GMT
Not After : Nov 12 07:01:05 2025 GMT
Subject: CN=d923e551b5fea558ab41bb14636a2700b29db2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:d2:9f:91:c4:93:9c:2e:71:f4:d9:ab:a2:
ea:5f:73:a4:32:5b:d7:4a:e7:f2:fd:75:94:fb:df:
61:63:37:8a:af:a8:7a:25:31:ed:1b:a8:7d:2d:1a:
24:59:fb:53:5f:94:6f:7d:80:24:e3:9f:dd:8b:31:
9d:9f:73:89:67:46:ba:09:fa:fe:18:12:1a:78:67:
7f:21:83:c2:64:d6:12:22:95:da:63:e2:9e:4e:55:
bf:bf:87:4c:dc:46:56:97:73:da:f3:ef:16:a0:93:
b4:56:7c:f7:ea:6a:84:a2:63:9e:19:f0:49:cb:07:
03:95:bb:d7:65:65:2a:44:d2:ba:a5:2f:3a:21:42:
cb:09:ab:e9:82:f5:b7:f6:e9:81:d1:f3:64:66:92:
3c:2e:39:78:00:fa:ab:a0:3f:18:30:43:4b:16:70:
ff:7e:e2:64:0c:d2:97:be:61:7f:ff:5c:22:6e:4c:
e6:42:39:54:d2:04:82:f8:87:be:af:39:22:67:8f:
61:de:b7:9b:61:b0:27:ba:cb:64:b4:5f:b4:22:6b:
7a:33:79:52:b9:fa:16:3f:74:54:a6:f8:86:25:02:
17:14:b9:39:e5:dc:13:1a:df:19:7c:19:1e:f4:af:
fa:a8:40:eb:ee:d7:04:09:b4:dd:63:a9:1a:76:f2:
02:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:23:E5:51:B5:FE:A5:58:AB:41:BB:14:63:6A:27:00:B2:9D:B2:A4
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:55:19:3e:3c:d2:e7:c2:58:d9:f9:c9:89:75:bc:53:f1:f6:
29:bf:45:23:68:0f:a9:f5:bc:21:47:30:e1:38:e8:b9:ec:bd:
47:73:ea:df:a0:66:e3:e3:54:10:52:9a:e1:c7:6f:a3:ae:08:
c7:fe:18:0d:2c:37:f2:41:02:93:90:c1:86:f0:ff:d6:00:6c:
01:79:2d:21:ea:b8:33:8d:6a:47:d9:69:0a:09:87:c7:67:66:
9d:bd:68:0e:fa:25:c0:4d:e5:24:23:45:42:3c:9d:cf:83:8d:
23:7a:09:67:a6:25:47:11:69:42:e9:29:6e:c3:69:5b:73:02:
08:ac:ff:5b:f2:eb:25:f2:e0:60:cb:63:3b:fc:e0:c5:44:2e:
9e:c2:86:ab:ef:5a:59:99:89:68:93:09:54:39:70:64:22:38:
fc:a0:be:4c:1b:e4:be:c4:b1:9f:2a:4c:ab:bb:b3:01:95:93:
be:42:ed:95:9f:9d:84:a1:ea:d1:15:7e:e8:a4:91:71:59:62:
e2:d6:26:99:d4:fe:2f:cc:b3:18:7f:f0:f3:78:53:c0:6f:96:
27:d6:c1:e6:a9:08:55:15:1c:9c:e2:2a:b0:a4:2e:2c:76:d9:
bc:d0:ed:31:ef:89:ab:5f:e1:10:93:f3:7f:c8:58:6d:1f:f1:
6f:73:06:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:40 2025 by rpki-client