Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
File: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft (raw, json)
Hash identifier: Uk15iSe1arqgPXp45PMn4VXiCIggUT7nBkQMrXKx+dQ=
Subject key identifier: A8:76:D5:53:9E:81:17:7B:A2:2F:B4:CC:1D:9C:6F:BA:6C:92:0F:34
Authority key identifier: DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
Certificate issuer: /CN=dd189621d2fa872166e6a05ee47a7d756243e919
Certificate serial: 019A71B8E0894C345632EF4F25DCBBAEB67B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:12 +0000
Manifest this update: Tue 11 Nov 2025 07:02:12 +0000
Manifest next update: Wed 12 Nov 2025 07:02:12 +0000
Files and hashes: 1: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl (hash: EKUM2By3TpDzWAi+FrJHnZJobbDkBrJIf9oMnnuL6mI=)
2: IbWAiMp66FrrjCqKdb7PL52gYqc.roa (hash: ZvFHwkqxl1Y1UkoOepo0AdZCTZvXFwyowt6Ue0U0AQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e0:89:4c:34:56:32:ef:4f:25:dc:bb:ae:b6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd189621d2fa872166e6a05ee47a7d756243e919
Validity
Not Before: Nov 11 07:02:12 2025 GMT
Not After : Nov 12 07:02:12 2025 GMT
Subject: CN=a876d5539e81177ba22fb4cc1d9c6fba6c920f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ec:ba:01:3b:51:e9:b4:0f:ec:28:1c:98:c4:
73:ba:34:14:14:89:b7:54:17:47:99:94:af:1b:46:
05:f6:15:af:ae:20:b0:ed:df:ed:bf:a3:88:c0:69:
84:c0:47:ba:9c:5b:f2:c1:f8:84:21:89:98:31:8e:
a7:a6:b1:c2:98:00:bd:6a:2e:a5:a1:86:e7:64:82:
18:f7:38:f6:c7:ef:21:e6:75:55:03:9b:42:7d:ec:
ee:ab:61:0b:ea:74:5b:86:b8:4f:27:1a:69:53:7b:
e9:c8:3a:89:9a:0f:d9:77:93:8a:b8:09:e2:06:12:
60:b8:93:2e:4a:6c:0d:79:cc:25:6e:ed:76:0e:9c:
d5:cd:a4:3e:38:37:46:82:ff:bc:4f:50:a5:6e:bc:
bc:60:a9:6f:bd:ce:a8:1b:4f:24:75:e6:e0:db:47:
7a:33:73:e9:4a:68:b8:69:88:ae:4a:85:48:b1:e1:
18:1d:47:53:83:38:c3:ee:5d:c3:ad:c6:ed:b3:8e:
dd:87:23:60:f4:33:08:e8:ae:b1:54:7f:c1:0a:34:
dd:36:21:8f:ac:fa:7c:14:62:d7:9c:02:8b:e9:9b:
67:bf:68:fa:34:18:ad:e7:e1:1e:40:0c:12:49:82:
67:db:63:88:1f:26:1c:ea:e0:a6:ab:46:82:3b:e6:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:76:D5:53:9E:81:17:7B:A2:2F:B4:CC:1D:9C:6F:BA:6C:92:0F:34
X509v3 Authority Key Identifier:
keyid:DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c3:aa:94:5c:fa:6e:51:2a:3a:1a:c7:60:fc:11:eb:c8:d0:
47:7a:04:36:2d:52:bc:5c:5e:37:26:69:b3:72:0d:a0:7c:b5:
41:fb:9f:33:03:58:33:d2:26:e7:34:41:bd:8d:64:ca:5d:5d:
52:9f:75:20:d4:78:78:45:dc:98:5d:d8:11:32:c3:8e:1f:37:
5c:31:b5:31:d8:fc:ae:e6:6f:a7:f4:4a:f6:90:09:6e:74:1c:
9f:e0:cf:75:87:6e:54:cd:37:dd:98:8b:2f:c3:d1:64:cb:6f:
d8:64:d1:26:c7:08:06:07:6f:f6:3e:f6:b0:9f:67:ec:c9:c8:
82:41:16:04:cd:a4:35:6c:dc:c7:5f:1e:a4:c8:f4:bd:76:4a:
26:7e:21:a1:a6:f9:4c:d7:0b:73:ae:07:d3:bf:04:f9:f9:93:
69:3a:02:68:ef:ca:62:37:00:c8:d0:92:29:3e:fc:f7:59:41:
75:d2:85:79:c5:1b:19:1f:be:ed:86:ca:56:d7:de:f5:f8:9e:
62:75:6a:eb:1d:c7:fb:6e:21:5d:b6:5f:c4:43:1b:9e:a5:f7:
36:ec:b1:06:58:47:06:e7:5c:de:ba:b3:fb:63:7e:0f:c9:58:
25:4a:48:9c:31:bf:85:b9:5a:e2:44:87:fb:86:0a:57:59:fe:
f6:93:43:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:33:11 2025 by rpki-client