Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: eQ8+cL8yFO9zibphpJRLQS/or3LkMHc0DXsY8dj5EfQ=
Subject key identifier: 29:B6:B8:22:13:10:35:E9:69:DA:71:53:05:6A:8B:F8:F8:1B:A7:51
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019A81CFDBAA355D2C9D787F4A34274F6C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 12F0
Signing time: Fri 14 Nov 2025 10:01:14 +0000
Manifest this update: Fri 14 Nov 2025 10:01:14 +0000
Manifest next update: Sat 15 Nov 2025 10:01:14 +0000
Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: janETNCNnN9n9tLORD624eZBqBTU1gWjKd3VNwM98bk=)
3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=)
4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=)
5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=)
6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=)
7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=)
8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:81:cf:db:aa:35:5d:2c:9d:78:7f:4a:34:27:4f:6c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Nov 14 10:01:14 2025 GMT
Not After : Nov 15 10:01:14 2025 GMT
Subject: CN=29b6b822131035e969da7153056a8bf8f81ba751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:37:1a:15:df:b1:68:19:c0:02:57:21:1f:
2b:16:5d:80:56:1c:30:b2:08:f5:66:aa:2e:73:8f:
e1:52:de:45:88:54:40:ad:40:c2:1f:f7:5b:99:b9:
17:e0:0a:e2:b4:70:bf:35:9c:88:02:39:f9:b8:33:
03:d7:cb:b7:ad:32:5b:e0:d4:97:aa:f4:90:f6:ab:
85:73:58:83:20:da:da:f2:c2:48:87:07:4c:4c:6a:
5d:c1:95:5d:45:05:f2:4e:33:58:5e:8b:c3:2d:ba:
3c:f3:2a:8c:46:e3:49:05:06:8e:b3:d1:82:81:3f:
b9:d0:4e:c6:3e:d9:c3:fa:2b:25:54:ef:c1:d7:8e:
98:68:ce:14:44:78:50:40:c0:d5:0f:42:3e:32:c6:
78:55:97:9b:2b:a8:74:54:48:a3:f9:e4:91:80:e5:
29:9e:5a:8a:84:04:c1:19:31:6f:e7:ac:9b:83:d0:
4a:d4:5e:1e:57:f3:b5:c7:a5:ce:63:fd:2d:d8:21:
8f:c0:9b:d9:34:ad:83:25:70:a7:5f:68:9b:f2:a5:
79:9b:be:de:48:b6:71:94:d6:01:39:f1:5c:82:9f:
2e:7b:91:11:c6:da:9d:f9:9a:81:03:c1:9f:2f:27:
8e:9d:8d:b3:e2:6d:00:7d:99:6a:83:8f:ba:ff:dc:
59:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B6:B8:22:13:10:35:E9:69:DA:71:53:05:6A:8B:F8:F8:1B:A7:51
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:63:f1:19:18:91:08:32:ab:8a:b1:ee:08:33:b8:78:81:3e:
3b:b2:2e:7c:79:c7:b2:76:0c:f0:54:85:36:78:50:68:6f:9e:
51:7f:a8:1b:5f:62:ae:94:cd:cc:42:64:72:f0:c5:1c:8b:68:
3d:f3:14:d1:cb:56:e6:cf:a8:f9:5c:ac:bd:8a:35:b8:76:8c:
3e:0b:d8:48:8d:01:e9:e0:b3:d4:f7:ac:f3:ad:8f:51:59:9d:
45:1b:e4:11:c9:b2:a3:b0:7c:ee:e0:46:04:f0:b6:76:55:e6:
36:25:46:92:33:ff:ab:1a:38:90:ce:55:08:dd:09:52:08:16:
1f:c1:3a:69:47:60:b9:88:15:da:d4:cd:31:39:77:11:53:7f:
c5:0c:d3:50:a0:d1:30:4a:35:d7:57:08:ac:b3:3e:ee:27:17:
da:1d:56:ea:d5:1f:2d:b5:74:2d:26:c6:a8:42:e6:55:aa:34:
9a:b1:0c:e7:45:2e:83:77:71:0b:c5:e0:ff:0d:a2:d6:eb:6c:
f8:c9:4a:30:a7:ff:f2:94:46:04:67:d3:10:fd:02:81:4a:8f:
bc:d0:03:61:19:e7:8e:57:a2:fc:56:1b:87:d7:ee:56:ad:97:
81:83:f3:5d:7b:f0:95:64:ff:b0:62:35:a4:d7:82:d2:c9:12:
f8:ff:3f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 14 14:27:13 2025 by rpki-client