Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
File: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft (raw, json)
Hash identifier: hiJDF23Ft8wwBLbRzH48EiUxAI+XOgyqQa2Q1XM3lzQ=
Subject key identifier: C3:97:16:5D:F9:95:E0:AE:B9:0A:C2:DD:DB:FF:AD:EB:A1:23:F3:32
Authority key identifier: DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
Certificate issuer: /CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Certificate serial: 019A150472AA13443BAAA69B39FC34458FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
Manifest number: 0AF4
Signing time: Fri 24 Oct 2025 07:00:04 +0000
Manifest this update: Fri 24 Oct 2025 07:00:04 +0000
Manifest next update: Sat 25 Oct 2025 07:00:04 +0000
Files and hashes: 1: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl (hash: KQ7XSCF0lsonYm9VZQtrrBmP8aock5fLVdMsTXhlJiM=)
2: EiOjn6Cn36HWuMJFodH0EVbfYdc.roa (hash: prKCNtfilLl42pcGEF7Kjg7za6QhPHVZeIUhroTyVuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 07:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:04:72:aa:13:44:3b:aa:a6:9b:39:fc:34:45:8f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Validity
Not Before: Oct 24 07:00:04 2025 GMT
Not After : Oct 25 07:00:04 2025 GMT
Subject: CN=c397165df995e0aeb90ac2dddbffadeba123f332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:90:a9:14:f9:92:16:87:cf:90:f0:56:e1:
3b:fd:f5:aa:f3:65:2d:4d:52:75:13:f7:34:6a:1b:
3a:d2:66:fc:2e:6f:b1:95:92:39:2b:91:4b:3f:b1:
11:fc:50:ce:b5:17:f1:d9:60:5e:9b:74:e0:83:df:
0e:ec:f9:8f:5b:66:f1:78:d8:49:31:20:38:25:a4:
ee:5f:f0:ee:c2:3c:25:f7:0a:cf:a4:43:bd:9a:52:
11:2f:01:92:20:6b:6b:87:c4:93:94:fd:ce:a5:6b:
42:ec:d0:1c:3f:71:e0:55:5d:91:36:5b:77:c0:a7:
a8:f2:0b:41:3c:d4:fd:9f:d6:29:cb:28:55:2b:c2:
15:99:25:ea:d8:43:60:fa:82:75:49:49:2a:68:4e:
a9:45:bc:ca:76:b8:9a:51:2c:f5:e9:94:b8:be:d6:
58:8d:4a:a2:ee:d3:cd:f5:5c:95:c8:8a:c6:40:06:
06:8c:2a:a1:61:e7:d3:0c:c6:fc:0f:cd:b1:52:78:
7a:14:ad:63:5d:92:d1:51:4d:a5:ee:a9:ad:57:8c:
4d:b5:5d:b1:8b:4c:89:17:4e:bc:46:2a:43:79:ce:
1d:34:fc:0e:06:46:d6:ea:2e:89:43:13:1f:03:5a:
1a:b5:67:ff:4e:d3:15:c6:01:94:aa:ed:fa:c4:c7:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:97:16:5D:F9:95:E0:AE:B9:0A:C2:DD:DB:FF:AD:EB:A1:23:F3:32
X509v3 Authority Key Identifier:
keyid:DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c4:27:64:76:48:ae:08:c0:25:70:40:83:71:84:39:7d:b6:
26:59:05:fa:f9:3a:50:92:ca:c7:2c:dc:63:f1:aa:5a:a8:fe:
0c:9c:b9:01:10:f3:64:a9:5a:6c:2c:01:3b:a0:3b:ae:cd:d0:
00:02:92:d6:bf:d1:0f:6c:97:a7:75:eb:54:5e:eb:cc:7e:53:
96:45:7b:bd:4b:0a:3f:a7:7b:af:ec:9c:98:d5:19:fe:c7:98:
58:5c:3a:20:49:f6:17:e3:b6:24:e5:8d:58:eb:a1:a2:1c:20:
ed:2d:5b:d8:bd:61:78:d7:e8:d3:c9:60:07:4e:80:fe:34:b8:
8c:33:6d:3e:b7:d6:77:06:9e:0a:af:ba:ff:bd:a5:14:a4:f7:
55:00:b6:dc:0c:4f:a2:72:3a:a0:89:a5:64:e8:18:22:ef:68:
47:21:9c:c9:90:a9:64:9b:69:9d:f2:c8:46:23:07:e4:e7:55:
e1:04:cd:4c:2c:cb:bd:9a:4b:bc:59:f0:41:41:d1:22:77:c1:
ba:05:9d:e1:13:e9:53:fb:ac:1d:99:de:f1:96:a6:c7:84:35:
9c:09:54:87:ba:f5:c5:8d:da:40:38:f2:90:e8:c9:00:4b:f5:
48:86:c6:6c:31:2a:7a:5e:8e:df:0f:20:25:8b:c3:1f:8c:c7:
11:d9:5b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 12:00:44 2025 by rpki-client