Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json)
Hash identifier: VHmoe3ZRwhyDCa2p8BJldB7ZwvmjzztslpxZKD4Nw7Y=
Subject key identifier: 61:A1:BE:F1:1D:B1:4D:89:20:C5:D4:60:32:F2:1C:5C:2B:90:51:EC
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 019A18737D20E4DAB24BF69A9B4013D35CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
Manifest number: 0DB5
Signing time: Fri 24 Oct 2025 23:00:13 +0000
Manifest this update: Fri 24 Oct 2025 23:00:13 +0000
Manifest next update: Sat 25 Oct 2025 23:00:13 +0000
Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: Wcl8YwHpNz58iPAfRCQ9MEQylpiezQh8SDXUa6zdEMM=)
2: 3y9oPhhQ76ajFYxPaGTfj0mGenY.roa (hash: aJMldfOcg7PSjdceOikOWHYMelePcp968D1IHsbQCQs=)
3: Eru4dcnP3AWADVXKAGfzuxLYfJc.roa (hash: qrokzcnnG9HxWIaV9kzA+31DT5BxA/ZSbotCh3hraYc=)
4: Kbhh_-jKSqwyjY9YyEcKOFQSYSE.roa (hash: a+ayqrZ5gSfoloT8KLq9Di5/TpqXgWgvxKNvHS7J0us=)
5: Tz-eGTasLTxJaRB_AyMo0GbjCYY.roa (hash: y/BDSOiRtRFchkB8Upvuvb+MNs6zs82qA1XU7WJzVqs=)
6: n1PdHVenW5fayjdB9KftVERroVM.roa (hash: vk271JDoo1aPMh1SkN6xn//CcT9hk4SqnKTKa0JtzvQ=)
7: njV-GA0Ii5_5OkqbA6b8eDCoFt4.roa (hash: 3zM9PD2sx2obkpcLLLOA9+i/X09CCKUBp/Xzom7yXUE=)
8: zH0GORTR7Uyj1Cp9s_FZC30xG7E.roa (hash: hQY0rZB8ZrQ/2LTg6dzNd2hK2I9T6rcNdp9cuBHVHhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:73:7d:20:e4:da:b2:4b:f6:9a:9b:40:13:d3:5c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Oct 24 23:00:13 2025 GMT
Not After : Oct 25 23:00:13 2025 GMT
Subject: CN=61a1bef11db14d8920c5d46032f21c5c2b9051ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c5:f5:15:33:bf:35:c0:28:b1:6d:c3:10:60:
99:b2:56:49:d1:ce:3c:87:b9:0e:e4:4a:0f:f4:1d:
72:04:11:ed:ed:94:7c:f9:74:8b:b1:a2:c2:50:8f:
c5:2d:2a:14:a4:68:eb:1b:5d:82:cb:5f:41:e4:f6:
2e:5a:93:84:13:32:f0:b2:f8:14:b9:09:24:9a:b9:
e8:01:1d:ab:c5:80:dd:c5:6e:8b:9b:a5:e5:79:df:
22:80:8e:ea:23:d3:22:bc:fb:fe:39:3a:f5:5b:f4:
9a:07:cf:f8:bf:ea:28:9c:e7:d8:db:c7:c0:20:36:
5a:3a:f8:0d:e8:44:61:52:7f:d3:3f:07:26:ca:f9:
7a:bd:df:11:2f:5e:0c:db:7d:c5:2e:d1:ff:cf:5d:
06:54:ff:94:70:c4:7b:c1:23:f7:5c:4b:a9:37:2f:
69:f7:30:7f:f8:d9:75:3a:e1:1e:b9:70:7c:31:c2:
b7:5b:36:4d:f8:42:fc:0a:9c:14:c9:bb:38:b4:b0:
1e:dd:ff:93:b4:0e:78:d0:57:fc:a1:b4:22:6c:bd:
82:82:cb:83:b2:4c:07:1b:e4:8f:a5:26:cd:35:aa:
c9:9a:ee:f9:89:02:c6:fe:01:f0:2d:f7:b8:51:57:
24:f4:bb:07:9e:2a:6d:7a:ab:a8:9b:0b:a7:d7:dd:
63:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A1:BE:F1:1D:B1:4D:89:20:C5:D4:60:32:F2:1C:5C:2B:90:51:EC
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:73:bb:94:c5:57:57:89:3f:00:e5:38:0c:c3:b0:d0:7d:86:
14:92:e0:5c:7b:45:98:a0:15:60:e3:9b:e1:76:b3:92:80:ef:
4a:fb:f3:d7:d5:f9:74:4b:b7:57:29:fc:9c:83:85:0e:16:23:
b8:c7:4f:37:3f:1f:4e:c4:31:43:27:9b:84:04:eb:1f:65:80:
ca:d9:a8:3e:e4:2d:ef:63:2b:8c:49:d6:59:97:c6:22:9e:55:
21:43:0c:8b:61:fd:4a:ec:f1:47:7d:ea:c8:61:04:a4:0d:f1:
aa:6b:fc:86:5b:94:82:86:26:9d:f9:b8:e3:7b:b7:fb:24:fa:
4c:67:19:7a:f1:06:66:42:0d:14:b6:a6:72:12:f3:2c:26:3c:
24:4b:24:bf:3b:7c:a2:d8:1f:c7:37:36:c7:2b:70:46:1b:db:
6b:46:74:dd:31:4e:e9:74:23:60:87:ad:ee:c7:20:d3:4a:70:
ad:3d:b9:40:1f:23:47:71:c7:a2:16:96:a8:ff:63:30:2d:ac:
3d:86:6b:48:bb:61:99:76:d8:3e:c1:73:35:25:c2:67:70:ec:
1a:09:14:59:29:4b:37:42:32:11:5b:4c:ae:ee:2e:6f:01:17:
c6:43:5d:c4:e0:e8:03:54:e9:93:d5:74:6a:33:50:6d:d6:b4:
50:a9:e2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:19:06 2025 by rpki-client