Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
File: 3V7mW6NorXTZoD_ygkQMhXeiFZY.mft (raw, json)
Hash identifier: hNPNlayaBglfHRdvAZUFx/YlIYZqunsmPx/L9M3FWeo=
Subject key identifier: B8:EB:53:90:DE:10:08:EC:4F:D2:DA:65:4F:5E:76:53:F5:28:33:DA
Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
Certificate issuer: /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Certificate serial: 019A71135190365759D93ED658D807DF845F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
Manifest number: 0D79
Signing time: Tue 11 Nov 2025 04:01:22 +0000
Manifest this update: Tue 11 Nov 2025 04:01:22 +0000
Manifest next update: Wed 12 Nov 2025 04:01:22 +0000
Files and hashes: 1: 3V7mW6NorXTZoD_ygkQMhXeiFZY.crl (hash: Rz0WCzf2TX0Ky3WBBDCfatekT6632bhc1LJJh2wTbZo=)
2: Fu2SG4loZ2malz9WaofXCDUPGUQ.roa (hash: v34bq7itFiS09euDmLvsea1XPjuasihGiJjC++WIBUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:51:90:36:57:59:d9:3e:d6:58:d8:07:df:84:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Validity
Not Before: Nov 11 04:01:22 2025 GMT
Not After : Nov 12 04:01:22 2025 GMT
Subject: CN=b8eb5390de1008ec4fd2da654f5e7653f52833da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:f7:d4:7e:7d:c9:6d:d5:90:23:a9:c2:8c:
0b:ed:a7:78:c0:fe:65:26:80:c8:3c:b8:06:ef:9e:
d5:c1:ac:2d:08:ad:5b:f6:39:55:78:b6:e8:03:69:
45:7d:16:ae:b5:56:8a:51:94:a1:73:03:64:e8:39:
98:8f:e6:48:87:d7:0d:30:da:83:a4:36:37:c5:07:
a2:38:3a:91:2a:ee:4f:ff:82:ef:1a:2a:8a:c7:f4:
6d:96:51:3a:4b:4f:0c:7a:38:41:d1:68:f0:2a:55:
cd:89:f3:44:2c:3e:98:37:05:20:ec:3e:1d:9f:42:
55:6e:e2:69:15:3a:7a:9b:06:c7:c2:79:df:2d:02:
4c:52:7d:e8:a9:ce:49:ae:28:d0:c4:d2:0f:61:9b:
4e:d5:14:5f:f4:a0:47:a3:70:3f:b9:97:29:67:b0:
4d:79:cf:8a:a9:35:e0:1a:4a:3e:17:40:76:98:11:
33:99:5b:3f:a9:0f:21:72:3b:41:f7:27:c7:bd:33:
fd:69:9e:22:a9:62:00:75:0f:a8:07:69:06:50:34:
a0:96:c6:ab:a8:cb:9c:bf:83:97:2c:44:7f:20:3d:
fc:d6:f2:c8:8b:a4:92:c0:47:ff:da:2a:9e:3c:7d:
f7:64:95:fc:c1:a8:2e:11:2f:e3:64:b4:6b:d0:76:
29:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EB:53:90:DE:10:08:EC:4F:D2:DA:65:4F:5E:76:53:F5:28:33:DA
X509v3 Authority Key Identifier:
keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:01:f2:7d:c6:95:c8:48:b2:78:67:ad:15:83:9c:1f:49:97:
88:ee:5d:43:df:a2:bf:77:30:ba:d4:e8:ed:15:94:2f:27:7d:
68:0a:1a:42:88:48:9e:d0:5b:68:da:02:12:f8:48:e3:5d:31:
3e:8b:ef:01:3e:f6:0c:6f:94:25:f9:30:8a:f4:fc:5c:99:1d:
db:27:d1:50:3a:90:1f:96:77:5a:e6:9e:6b:a3:00:c9:6e:5e:
80:31:f9:20:de:5d:30:65:8b:4f:2d:01:dc:eb:cc:0a:6f:d9:
67:73:b7:d3:3a:05:85:b9:fa:3b:6c:b8:ee:59:e3:8b:6b:fd:
d1:5b:f1:4f:17:28:a5:84:55:ad:47:ef:3a:69:1e:2c:b5:53:
c7:e1:6e:5f:fd:b2:12:e2:ae:8e:ea:a9:0f:a2:1e:79:9d:b7:
60:ba:fd:f0:6f:4a:81:03:c3:bd:02:5e:57:7b:84:8b:f3:bb:
7a:51:4c:51:e6:93:2b:b0:46:0e:b0:3b:02:c4:c0:4a:d8:ec:
ae:ee:59:72:c4:e9:d9:49:bd:b6:02:eb:08:d2:c1:75:e6:ea:
a5:ca:5a:2f:50:d3:a1:3b:0b:40:bd:a8:9f:95:ff:ce:38:a8:
a9:f8:d3:0e:9d:88:7f:b8:64:bc:e2:68:04:93:ad:b5:a0:ac:
64:14:93:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:51 2025 by rpki-client