Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: oJUWX7Yt1lRDKBb3ot/wxuvpHkN9MpJQ1wSa4p/q9HY=
Subject key identifier: 98:F4:56:31:19:44:C2:61:CD:1C:13:91:CC:CD:ED:06:F2:EC:3A:A3
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 019A7112C17FDB638E1F39F6DD6D2E9B8AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 10DA
Signing time: Tue 11 Nov 2025 04:00:45 +0000
Manifest this update: Tue 11 Nov 2025 04:00:45 +0000
Manifest next update: Wed 12 Nov 2025 04:00:45 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: /3n3wW7eWGS5mlEr4lq8Rfu0CwM7Q9RuleEBx13n+lA=)
2: 6f05f7w22zRcUpz28tjM6XCdsYk.roa (hash: kl4KaLs8etslFAKNgVQw6su1C8PWL6O+HJhYp1T4Tak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c1:7f:db:63:8e:1f:39:f6:dd:6d:2e:9b:8a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Nov 11 04:00:45 2025 GMT
Not After : Nov 12 04:00:45 2025 GMT
Subject: CN=98f456311944c261cd1c1391cccded06f2ec3aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:e2:eb:de:12:91:56:c4:d4:3f:cf:7b:a4:
e3:b0:76:da:34:68:dc:c6:e8:76:4f:34:cc:a5:5f:
cb:c4:64:4e:65:4b:61:d0:c1:00:64:82:4e:b0:4e:
df:a0:f0:68:27:35:1d:60:30:7a:d9:cf:4b:b5:92:
46:7c:df:a7:19:ee:59:fa:b5:3d:e5:70:4e:e2:bd:
b2:cf:17:b4:ea:58:64:67:a5:35:af:e6:1b:d2:09:
35:73:3d:ae:ac:b7:02:2d:de:5f:9d:08:8a:c0:c6:
e8:a9:c4:14:7a:24:c8:b9:1b:e2:a7:62:bb:18:2b:
88:a4:2b:a6:ce:4f:e9:06:23:02:89:da:fe:bb:12:
e8:78:7e:76:a5:fe:ee:0e:70:82:96:2f:23:e2:36:
98:1c:2b:4d:d9:08:51:20:0c:02:14:82:1f:57:b7:
92:9d:f4:d9:dd:43:51:7c:7c:75:ea:b8:9f:0d:de:
75:40:5a:18:06:e0:42:19:99:a7:d4:82:a4:72:42:
c6:a8:53:8c:c6:16:4d:93:2f:de:25:c6:82:f7:0c:
c6:94:94:06:fb:e0:28:a8:3f:d3:52:fd:58:07:39:
a5:d8:26:13:21:a4:c8:89:5f:e8:e5:86:3e:b0:72:
01:0d:3e:32:8b:65:ee:8e:a3:c3:e4:fd:ed:6a:c3:
4e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F4:56:31:19:44:C2:61:CD:1C:13:91:CC:CD:ED:06:F2:EC:3A:A3
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:38:30:13:00:17:45:80:7d:6f:5d:90:7e:0e:be:72:fb:0d:
b3:07:5a:09:e5:24:75:47:8e:c8:9b:0e:aa:bb:bf:20:09:f0:
d0:ee:95:d1:be:47:d1:d1:be:2d:9d:2a:1e:7d:ec:f1:4e:02:
42:69:38:f7:23:e1:81:36:7c:93:82:d6:c5:71:32:4e:64:b3:
21:d1:3b:de:a1:15:6f:6d:9f:00:c4:c5:82:81:d5:31:16:e4:
cd:20:a0:4e:46:dc:ad:91:9d:9b:b5:0d:3c:26:7e:91:58:f7:
12:15:ae:1f:fc:84:62:7c:c2:14:22:60:58:68:c6:92:4b:a7:
84:29:9f:f9:ec:99:e5:1b:1b:3d:a9:fd:c6:5a:4d:7d:b6:e2:
8d:96:0e:79:09:d2:01:90:80:0d:a4:0f:bb:9f:6d:45:bc:4f:
49:f7:5b:a0:96:9c:7e:01:64:bf:30:53:51:9e:20:f0:68:30:
d0:16:94:ec:10:72:3a:ad:2b:b2:b1:01:d6:3c:3c:14:75:9d:
16:7b:8e:a4:67:a5:ae:b3:95:5b:46:ea:05:73:57:2f:b9:b2:
42:61:f4:ca:46:d3:cd:7a:90:3f:03:41:7f:b8:38:44:05:ee:
09:84:6d:e0:62:02:4c:9e:08:78:fb:73:72:ae:97:ff:31:16:
3f:cb:60:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:23 2025 by rpki-client