Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: UAhPh36BuvR8vGfBaoD2GV1aip+OiqlKyzHHNBBZNkY=
Subject key identifier: A0:8E:3E:E7:ED:5D:CE:3A:F8:8D:DA:E7:6E:BF:A2:44:5C:1F:C4:4C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019A5D1E40593E52CA1E562436DCCB920D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 12DD
Signing time: Fri 07 Nov 2025 07:00:54 +0000
Manifest this update: Fri 07 Nov 2025 07:00:54 +0000
Manifest next update: Sat 08 Nov 2025 07:00:54 +0000
Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: 5RfMKvOdIFwD8fMQqMkroZMHG7iEaxE/JQGsqS3WArs=)
3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=)
4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=)
5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=)
6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=)
7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=)
8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:1e:40:59:3e:52:ca:1e:56:24:36:dc:cb:92:0d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Nov 7 07:00:54 2025 GMT
Not After : Nov 8 07:00:54 2025 GMT
Subject: CN=a08e3ee7ed5dce3af88ddae76ebfa2445c1fc44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:45:7c:a3:f3:5a:8c:0b:e7:b1:e5:bd:10:9a:
dc:14:c6:dd:bd:b3:d9:eb:e6:74:43:44:e7:b7:80:
9c:6c:2c:e9:1f:66:13:59:e4:19:c4:db:1f:32:94:
6b:54:a4:9d:29:a8:e3:95:95:09:98:26:eb:87:fa:
8d:3e:84:3d:9a:ab:55:0b:dd:f4:af:23:ea:d3:d5:
f9:ef:f7:0f:ba:45:57:e1:0d:8d:66:d0:ce:06:f4:
27:eb:88:84:23:2c:f4:b2:3b:22:74:15:76:47:6e:
4b:10:b4:57:53:1d:e2:36:5a:af:b4:1a:b8:87:20:
4d:85:fc:17:8b:fe:3f:80:a1:70:17:ea:19:70:bd:
97:d4:62:e2:c9:75:42:54:1f:08:b9:d3:8a:f0:55:
fb:d5:ad:fb:f5:70:dc:a4:ea:e6:04:0f:d5:b3:1d:
06:18:2c:83:4a:b7:fd:de:e0:98:8f:a1:8c:7f:9f:
c5:40:51:6a:06:47:8c:dd:01:4e:1f:c5:fc:09:1e:
b6:09:66:cf:a8:62:51:07:57:7e:dc:33:84:d7:fd:
a1:13:95:ec:70:76:86:50:62:15:f9:bb:df:7a:39:
0c:66:1e:2c:6d:dc:50:ee:82:c4:4a:7d:3a:15:80:
58:83:ed:ed:0f:f0:12:5c:00:32:5e:76:22:b9:26:
49:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8E:3E:E7:ED:5D:CE:3A:F8:8D:DA:E7:6E:BF:A2:44:5C:1F:C4:4C
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:71:c9:99:b6:ba:6d:1d:10:32:eb:12:dc:29:64:64:11:8d:
8d:10:aa:46:0b:00:05:6a:28:9f:6b:24:d4:30:2f:22:8f:e4:
f0:b5:d8:4c:f3:cc:75:61:30:2a:ed:a7:9e:5a:9f:9f:75:99:
2c:87:68:81:57:9e:b1:c9:5a:f2:6e:0d:d7:f8:72:52:90:aa:
39:b9:87:c0:8c:29:c4:ea:41:75:91:8c:9e:4b:bc:51:f5:ef:
d5:87:64:28:3f:f2:87:31:55:bd:23:3a:20:93:08:98:3c:e4:
2d:dc:40:74:e4:a2:f1:b1:a3:0a:cc:14:89:26:be:ea:f6:ce:
74:cd:a1:d5:98:0a:f1:54:05:25:40:38:e8:87:4b:d9:50:ca:
db:95:f6:f2:bc:1a:d1:95:7e:4a:6c:35:c4:b3:8a:b4:42:b8:
27:8c:2b:1a:da:68:10:3d:95:75:d9:2e:15:08:32:56:30:05:
75:17:5f:a2:98:2a:5e:a3:1b:eb:de:65:92:2d:45:1a:0f:af:
e4:ab:9b:1b:40:80:9d:df:6c:c0:b7:b5:41:e3:2d:22:09:4b:
52:70:40:e0:43:cc:21:5f:f6:53:8f:3f:f0:1d:30:fc:fc:45:
90:13:2f:1c:01:1e:e2:af:18:fb:01:a5:3e:c3:0e:7b:6f:9c:
12:d5:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 12:43:27 2025 by rpki-client