Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
File: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft (raw, json)
Hash identifier: OgVdJOyZryWh9Tq4DeortwmYcDt5UFLyUgNVtBNGqho=
Subject key identifier: 8F:72:72:B0:CB:40:56:4F:E0:7A:BB:D5:94:09:5F:DA:43:53:E5:84
Authority key identifier: DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
Certificate issuer: /CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Certificate serial: 019A7225C9F984055943F5C543EC23951E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
Manifest number: 085A
Signing time: Tue 11 Nov 2025 09:01:10 +0000
Manifest this update: Tue 11 Nov 2025 09:01:10 +0000
Manifest next update: Wed 12 Nov 2025 09:01:10 +0000
Files and hashes: 1: 0BpOv7ID4DFMrx668XTbhOenKNs.roa (hash: H36mM6sLdMLgLe3nc9mJCOTiie2y6GYALZ/i/6VFQPQ=)
2: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl (hash: dFPc1ONO+Lh0V7sZfqgvhV9ROCQF7YV2zyFVfBbNLFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c9:f9:84:05:59:43:f5:c5:43:ec:23:95:1e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Validity
Not Before: Nov 11 09:01:10 2025 GMT
Not After : Nov 12 09:01:10 2025 GMT
Subject: CN=8f7272b0cb40564fe07abbd594095fda4353e584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:0c:c3:90:9a:ba:9c:55:37:a4:1f:3b:63:
e0:6e:65:99:fb:db:46:95:33:06:eb:a4:06:41:10:
30:ca:88:6d:53:7b:38:71:dd:78:77:b2:91:2e:e8:
1b:ac:96:a3:93:2e:09:73:39:55:5b:2c:22:26:12:
fa:19:ae:8b:2c:f3:b9:3c:95:10:84:39:86:a7:50:
4a:78:34:ac:cb:20:d0:a3:22:4f:a2:cc:89:ac:01:
fc:33:c8:ca:e3:2c:f6:56:7d:c9:ba:98:22:1a:43:
88:7b:14:41:1e:d8:e5:5a:40:f0:05:ab:de:df:f1:
1c:95:b5:17:94:ac:e4:b0:98:a9:b3:13:78:bc:e0:
c2:fb:5d:79:43:ac:93:6f:76:28:d4:58:d6:4f:78:
c9:dd:7e:f0:d3:45:ce:17:63:7d:99:e8:04:78:f1:
39:24:5c:50:14:c6:05:1c:56:bc:53:86:c7:4e:fa:
5d:41:b2:ad:2c:1c:f0:79:58:2c:23:33:60:a0:20:
94:25:6d:93:3a:de:49:2e:a7:0f:bf:d4:59:ba:74:
d4:3e:fc:f6:10:80:79:7b:40:e0:b8:52:25:e1:71:
ba:54:c5:64:5a:99:f7:15:83:70:be:d3:4d:72:4a:
a6:78:ca:0c:bb:d4:94:aa:ba:a2:0b:c9:44:fc:49:
81:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:72:72:B0:CB:40:56:4F:E0:7A:BB:D5:94:09:5F:DA:43:53:E5:84
X509v3 Authority Key Identifier:
keyid:DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c1:90:09:04:47:34:31:1d:be:32:9d:64:ad:09:cf:dd:90:
1e:3b:76:a1:1e:0f:10:8f:e2:1b:58:6b:1c:00:f1:97:e6:63:
31:b7:7e:24:59:b0:d7:38:5b:43:06:e7:0b:b7:98:ca:8e:df:
36:0c:43:46:d4:7a:de:b8:db:f2:f5:a1:12:a1:b3:d2:34:ff:
be:16:30:05:7f:fc:ea:47:9a:12:9d:6f:be:bd:03:9c:54:f3:
57:8c:f7:96:7b:ae:b6:c3:85:60:a1:33:dc:ef:cf:fc:ba:53:
ea:c5:c3:6b:27:5c:c3:d1:ac:94:77:ea:c0:87:26:bb:f6:b1:
c3:c9:42:14:93:6f:8c:fe:ae:fe:6a:e6:22:c8:ca:59:84:81:
e5:85:aa:e6:36:a3:54:c5:ea:49:6c:4d:2e:74:7a:98:ea:0d:
d4:a7:c4:23:08:08:fb:f2:0f:b9:fb:ad:dc:ab:e6:35:f1:aa:
05:8e:d1:bb:8d:43:3d:96:48:fc:e3:6e:7d:87:9a:55:85:e7:
8e:67:fb:48:4f:76:1d:83:9b:40:56:28:f0:96:08:c7:8b:38:
5c:07:73:52:a5:3c:ff:aa:ac:6d:42:59:57:c1:c9:4b:e0:5f:
41:d1:9f:4b:da:7a:36:b2:c9:85:fb:92:af:1c:69:b0:6f:c1:
22:81:5c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:08 2025 by rpki-client