Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json)
Hash identifier: SrwJVkALHDMCx3lCSDFy4C4rBNBGFcTRsgTdPhHgo80=
Subject key identifier: C2:5F:34:02:3E:86:1C:86:FC:FD:C4:FA:35:67:34:E5:28:03:67:B2
Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Certificate serial: 019A7225FE55186C3FD870D651059A624D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:23 +0000
Manifest this update: Tue 11 Nov 2025 09:01:23 +0000
Manifest next update: Wed 12 Nov 2025 09:01:23 +0000
Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: f3NujuE3jzQJRcXM/GRLE2D9RYmMOfkLZlHJCe1ZTnc=)
2: 6GNxdzK9UE9bHySiQzQ4c2EkGfY.roa (hash: xWTUJszNKd3dbNHz1f2JomMkK2hd4V6IPZrJaK6VjKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:fe:55:18:6c:3f:d8:70:d6:51:05:9a:62:4d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Validity
Not Before: Nov 11 09:01:23 2025 GMT
Not After : Nov 12 09:01:23 2025 GMT
Subject: CN=c25f34023e861c86fcfdc4fa356734e5280367b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e3:88:62:c3:95:a8:c2:bc:32:a6:17:72:0e:
ea:00:8e:db:71:4b:0c:0a:7a:f1:c2:d4:c9:33:19:
7c:c7:b4:53:31:02:26:d1:1b:d8:0d:80:5e:73:e0:
ba:f3:25:d4:ae:a6:7a:f5:35:3b:24:8f:68:19:46:
26:36:53:3a:da:8a:2b:4c:c3:d7:26:b6:86:64:05:
ac:b8:4f:19:26:a6:1d:fd:93:8a:57:13:f6:a6:cb:
67:96:54:c1:4b:38:4b:f5:bb:0d:01:fc:54:78:b4:
bb:67:00:8d:a9:60:8e:c4:2e:fc:42:5d:23:ba:71:
78:14:90:bc:3b:d8:f1:46:18:a4:68:e6:73:4a:b5:
5a:f4:a4:39:24:d2:3d:7c:40:36:3e:12:fc:cc:9a:
93:63:d8:75:83:0d:52:55:32:a4:5f:03:3e:0e:80:
e1:f7:67:3c:83:c7:c0:f5:bb:dc:f4:5c:21:78:f5:
06:a3:b3:78:c0:49:4d:6c:14:d2:e1:2b:af:a6:6f:
30:d7:2e:18:ba:14:0c:44:b4:3a:18:c3:69:34:66:
05:39:8d:6b:85:87:aa:f9:34:8d:43:f8:ab:fa:44:
b4:ec:4c:de:c6:13:19:f7:d0:e3:d0:86:b7:c8:c1:
57:ec:cd:4d:99:f5:bf:8a:a6:4c:6d:4a:11:bf:dc:
db:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5F:34:02:3E:86:1C:86:FC:FD:C4:FA:35:67:34:E5:28:03:67:B2
X509v3 Authority Key Identifier:
keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5b:d7:d8:98:8e:2d:b7:9e:13:97:ff:81:9a:99:8a:b9:20:
c8:19:c5:5a:02:4c:bd:f1:91:ee:e0:2a:6e:3d:84:9d:65:a5:
19:e0:69:15:99:5c:7c:fa:1a:73:85:fa:b0:43:a0:27:d4:d1:
48:41:d0:71:e8:ad:62:25:dd:74:7e:2d:d1:ac:d5:12:93:a1:
64:db:8a:c8:48:65:09:72:b4:df:ff:20:e2:c9:09:f9:0f:42:
10:c0:54:1a:27:fb:f4:64:3d:21:93:cc:f7:13:d4:1d:74:86:
85:d2:3e:23:81:98:64:55:ea:68:32:7e:08:6a:07:98:a4:e3:
0c:da:7d:83:0e:f9:21:5c:e3:fe:2f:ae:9d:9d:b3:de:45:11:
5a:da:e8:24:2b:6e:8d:6b:ad:85:e8:08:d4:90:68:a1:58:e4:
25:1b:00:73:31:62:46:b3:9a:b8:34:6d:3a:81:96:83:8d:b1:
2d:27:cc:86:3d:74:9b:0b:91:94:6d:e4:bd:0e:b7:48:10:6a:
53:98:b0:9a:b5:70:4b:f5:f6:1c:4e:12:f4:a7:28:d7:f6:8a:
da:c2:1c:32:72:7d:9a:00:e1:a2:cd:2a:39:40:04:d8:95:a9:
ca:3e:df:11:e1:77:c7:bd:fb:75:9c:f9:a1:1c:36:04:fc:db:
ed:0a:76:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:39 2025 by rpki-client