Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: QHW4uTQLaiLvzZ6Y+4vFiU3fCKNQnZwdoQQxN3CSFeE=
Subject key identifier: 24:A7:0D:F4:A7:87:8C:1F:AA:64:E2:B6:55:24:29:85:32:B4:77:C4
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019A93316528712F3747AFF6A47AB8E9522A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 12F9
Signing time: Mon 17 Nov 2025 19:01:19 +0000
Manifest this update: Mon 17 Nov 2025 19:01:19 +0000
Manifest next update: Tue 18 Nov 2025 19:01:19 +0000
Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: qVYaTxDdsf4Wm/d6p1rYhV0k9eJWosuKDV0qnNfAwDU=)
3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=)
4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=)
5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=)
6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=)
7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=)
8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 14:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:93:31:65:28:71:2f:37:47:af:f6:a4:7a:b8:e9:52:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Nov 17 19:01:19 2025 GMT
Not After : Nov 18 19:01:19 2025 GMT
Subject: CN=24a70df4a7878c1faa64e2b65524298532b477c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:ae:aa:7f:69:bf:f6:2f:9d:00:3f:d6:45:
5b:da:d5:7d:b3:c2:1e:50:23:20:2f:1f:34:71:c0:
0b:cd:8d:79:f3:9d:b0:e9:cd:c0:e8:21:55:f9:16:
05:ed:7a:37:b1:cc:3d:fe:9d:cb:78:9c:a3:f9:08:
7b:08:14:14:90:8d:6e:49:ee:35:78:72:97:a5:df:
65:2a:40:46:d2:1f:3d:73:58:8b:41:97:60:59:3a:
3e:65:a4:cb:ae:3b:5f:fa:f0:df:83:d9:24:ac:08:
8a:ce:48:02:65:2b:f2:9d:11:7a:0d:33:32:2b:a6:
86:7d:23:f6:26:d6:c7:a4:a3:3c:fb:67:40:04:9d:
23:de:5a:a0:37:40:af:ac:69:6d:16:c4:91:94:39:
b3:9c:d7:08:49:4c:fb:9f:35:22:8f:3d:67:3f:39:
1b:83:56:e8:49:dd:44:28:dc:1e:bd:28:78:a4:a4:
1a:5a:27:ee:05:2e:a0:7f:a0:a9:a8:e8:49:6e:42:
b3:f0:90:86:20:83:60:5d:06:64:4c:2f:d7:2a:fe:
ed:57:08:60:d6:c5:66:04:f4:67:d8:e7:96:f7:25:
c0:49:ac:2a:2d:0b:9f:52:fc:8f:60:aa:c1:03:7d:
2f:59:d9:4f:cd:ae:2c:ca:77:dc:f7:38:64:bd:22:
7e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A7:0D:F4:A7:87:8C:1F:AA:64:E2:B6:55:24:29:85:32:B4:77:C4
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bb:19:1d:c7:c2:82:f8:9e:4c:21:d6:a8:66:4d:69:6d:67:
1b:73:36:5a:32:8e:4e:2d:b4:29:3c:7e:c2:46:f1:78:5d:6c:
51:45:7f:fe:7e:f0:e9:e8:ff:b0:30:6d:41:f9:94:68:8d:9b:
81:c2:d4:4f:f9:bd:bb:c2:87:1f:e6:53:bf:7e:93:51:fc:b7:
07:ec:de:03:45:72:e5:1b:5e:13:0d:15:50:c0:aa:8d:c8:91:
32:32:db:d8:90:70:eb:3b:c0:1e:4d:73:72:c3:4a:f9:43:1e:
c9:c5:be:76:16:6f:0e:18:0f:eb:92:31:83:fd:fb:72:3e:da:
55:06:b0:02:3d:76:d6:ed:fa:3a:f5:55:8a:75:38:14:f4:b1:
02:6f:03:8c:62:77:56:f0:55:89:08:8c:01:c9:dd:1c:a0:db:
dc:50:e1:e4:d8:a0:5a:62:c7:b4:d5:44:11:12:64:05:82:21:
9a:7f:cf:9c:b5:a2:94:e0:de:3d:62:27:4e:19:52:f9:63:2c:
d0:ee:1c:b6:8f:09:2d:69:e7:cf:77:f2:16:96:0a:7f:0f:1a:
c4:2d:3c:ad:20:85:ab:cd:96:8c:2d:c3:d6:c1:bf:5d:ee:de:
10:95:21:5e:81:81:18:10:5f:03:71:30:7b:2a:1a:4d:0b:b7:
4a:51:44:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 20:38:01 2025 by rpki-client