Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: 6lO+7zssrYGCma7GC/sPJMjGWO0975zK+Pa+wL+A7eg=
Subject key identifier: 4D:4A:3B:37:DC:77:5C:AC:A6:7D:BA:7C:C3:DE:2F:6D:13:7F:16:74
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 019A4BF3CE1B7B894B51D8D11AFF7E337880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 0540
Signing time: Mon 03 Nov 2025 23:01:00 +0000
Manifest this update: Mon 03 Nov 2025 23:01:00 +0000
Manifest next update: Tue 04 Nov 2025 23:01:00 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: po7nRC0eeP0NQjWPaFw+NQQp1d7IT8AgxRljYi22uVQ=)
2: R82wyiQ6WGXDZ2qmyfic2Rx16EQ.roa (hash: q3ADHp8TbEdc9vO2jFfoJST4ALm7hMCr9dPnLoGdV9o=)
3: msFkodHiiLA7yYTUvQfg1svzo58.roa (hash: 8maRWfYNuUoSqjA1l1zPbJ9FPRTfD/7OAF7wZnEEN9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:f3:ce:1b:7b:89:4b:51:d8:d1:1a:ff:7e:33:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Nov 3 23:01:00 2025 GMT
Not After : Nov 4 23:01:00 2025 GMT
Subject: CN=4d4a3b37dc775caca67dba7cc3de2f6d137f1674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:46:ac:99:f4:81:96:bf:23:72:1a:1e:72:
a5:2e:5f:d7:ee:d8:7e:03:4c:1c:ff:d3:32:96:7f:
dd:73:9a:3a:a2:21:db:8d:71:75:c8:99:52:de:6a:
11:38:83:8a:a7:af:ad:3a:be:d6:4b:56:f9:e2:6e:
e4:6a:ef:28:4d:40:67:c0:16:e8:1d:d8:fb:92:29:
37:8e:d0:da:98:47:4c:a9:7d:81:bd:d8:af:06:53:
33:be:78:ea:bf:2e:8a:28:bf:10:55:1a:9b:db:7e:
f9:22:f0:e3:c4:73:47:5c:64:30:f2:aa:e5:f0:80:
67:5b:7c:e9:4d:68:9f:06:ec:51:1b:66:1c:1f:f4:
2b:9e:88:41:12:c5:29:4b:c9:b1:d0:af:60:82:79:
15:b0:e6:5a:c9:e7:ab:9f:5a:b5:9b:f6:d0:50:61:
99:c7:c8:da:6e:10:ed:93:45:c0:4f:41:0e:e7:b3:
4b:05:52:e1:8f:5e:5d:f6:d3:bd:bc:cc:f7:5c:10:
46:bc:86:e6:72:13:b1:8a:96:19:3f:d5:63:1c:4c:
18:d0:94:be:63:7c:c3:99:ed:91:6e:cb:f8:4a:5e:
48:1e:d3:14:e7:3b:47:33:02:05:dd:a3:45:67:fb:
15:43:1f:ca:1a:90:e4:da:0c:61:af:b6:d1:73:11:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4A:3B:37:DC:77:5C:AC:A6:7D:BA:7C:C3:DE:2F:6D:13:7F:16:74
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:18:27:90:26:8f:1d:a6:a9:ec:ef:12:e6:f8:7f:7f:17:71:
11:a8:13:46:9d:b8:6d:3d:aa:9f:ba:74:74:1f:f8:47:d1:4b:
72:cf:80:27:9f:e9:c6:39:b9:a3:85:07:1b:d8:c0:4e:6d:f9:
75:18:83:29:16:3a:58:75:33:df:c3:fc:82:e1:b1:7b:98:33:
90:ae:4d:6b:66:69:db:e2:e4:d4:68:eb:5e:4f:fc:73:9a:a9:
8d:03:27:d1:4a:26:83:a2:c9:8d:9b:20:fe:22:87:26:1f:2c:
82:5f:ba:f9:6b:03:12:c1:d8:5d:6b:e7:be:05:58:e4:d0:b6:
c8:56:7e:0f:66:85:36:28:3a:9e:ae:1f:51:56:9d:17:6e:24:
18:c9:26:37:f1:91:18:85:cc:a2:63:33:e9:20:20:b7:c4:7e:
c7:5a:3d:3e:c0:90:90:01:02:ef:72:e6:00:21:fb:3a:6b:bb:
49:37:cc:3f:f8:ca:77:71:fe:bf:7f:29:70:e2:f8:cc:a7:7d:
49:6b:1a:b3:c3:4b:18:88:b1:b1:29:5b:99:74:27:ed:32:18:
34:e5:a4:29:2a:a0:cd:ff:29:8a:0c:c6:ac:d1:cf:31:28:73:
cd:b2:63:b5:a3:9d:13:21:3c:4d:1e:fe:94:78:2f:2e:16:a7:
c3:74:77:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:11:08 2025 by rpki-client