Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
File: 3o44GHrnDLx77WlXWfDgMpn7swI.mft (raw, json)
Hash identifier: 4kuz7EpfpUpISzFX1e3a4C9ADgbrtxiS+zWltCNcMT0=
Subject key identifier: FD:C9:33:E9:D7:E9:6E:4C:53:23:C1:70:15:3C:40:20:BB:75:7D:54
Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
Certificate issuer: /CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Certificate serial: 019A71EE91198333B43EB40C68F8D5448355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
Manifest number: 03A7
Signing time: Tue 11 Nov 2025 08:00:51 +0000
Manifest this update: Tue 11 Nov 2025 08:00:51 +0000
Manifest next update: Wed 12 Nov 2025 08:00:51 +0000
Files and hashes: 1: 3o44GHrnDLx77WlXWfDgMpn7swI.crl (hash: Bft52N4C9jIPs4e5+kdRK/LZxXJEI6i1qU6md+fktoM=)
2: wSO8Qf5_v1p-oNDifbsTI9tUaPY.roa (hash: t8VFb4R1YuauyoB16s9G5smfDaNXuP879i5idHgDRZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:91:19:83:33:b4:3e:b4:0c:68:f8:d5:44:83:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Validity
Not Before: Nov 11 08:00:51 2025 GMT
Not After : Nov 12 08:00:51 2025 GMT
Subject: CN=fdc933e9d7e96e4c5323c170153c4020bb757d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:b7:9c:da:a5:88:14:b0:aa:cb:b1:65:c7:
2d:2a:0b:9d:69:8e:1c:5e:79:54:a9:c0:e6:a8:23:
75:c3:e9:65:9e:00:3f:f5:ef:5a:cd:6b:0e:9d:fd:
1e:84:63:91:81:0a:6d:a4:42:e0:08:4d:d6:00:eb:
70:cc:98:61:1a:dd:e0:2f:de:50:47:8a:ec:f6:0a:
8f:1c:71:87:41:7f:ea:f4:8d:dc:43:ea:26:01:1f:
83:ca:6d:70:1d:75:45:05:aa:f9:46:78:69:5b:87:
7b:4a:f6:f5:59:66:92:a3:54:70:1b:10:a7:e6:2c:
47:fa:38:b4:10:3f:80:27:9e:77:8b:ef:24:c5:5d:
2d:25:75:27:42:6b:2c:47:26:a5:0e:2d:63:ec:64:
f3:69:49:16:af:2d:26:67:99:8e:50:bb:e9:ec:4a:
3d:2b:f4:b0:e5:84:e4:86:2c:d6:e6:b6:61:a9:ce:
10:46:75:a5:59:22:d1:e7:75:51:7e:a9:66:f3:e5:
09:6e:db:b5:39:69:c2:0f:30:29:c2:d1:3f:b6:d4:
12:a2:03:e5:99:21:7b:ad:d6:ae:b5:82:fd:83:69:
a7:4d:70:ca:6d:e1:84:e6:1f:a3:41:fa:92:ff:29:
51:28:17:3b:31:71:8d:95:11:4b:44:3c:c5:e4:7b:
9a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C9:33:E9:D7:E9:6E:4C:53:23:C1:70:15:3C:40:20:BB:75:7D:54
X509v3 Authority Key Identifier:
keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0f:97:3e:8b:0b:c5:aa:39:18:a0:af:a5:01:fd:f9:ea:7e:
13:0f:b2:ae:9c:4d:85:a3:ca:d8:7e:99:ba:58:16:54:bf:26:
58:b2:4f:21:0b:a2:2b:aa:66:61:cc:6e:73:e5:e9:e1:6e:16:
78:37:e8:81:79:ba:62:12:c6:4b:de:85:57:10:6f:09:8b:34:
08:20:67:fe:f6:a7:8e:4e:7e:8b:57:ee:73:a3:c5:98:d6:73:
29:3a:f1:e5:47:15:4b:bb:f3:80:21:09:92:10:14:56:12:f3:
ed:2d:8a:dc:38:f3:83:18:d6:a3:35:0f:88:e2:af:f5:b6:a0:
ce:d1:7b:25:84:8a:35:0b:b3:3c:41:f0:d4:f1:c4:bf:b5:5a:
4e:77:2b:ad:b1:8f:ad:79:7d:73:75:f1:8b:67:96:63:b7:6e:
aa:12:1d:7b:f2:bc:8c:23:f5:13:92:42:a6:24:19:cc:d2:a3:
3e:33:66:b7:bd:9f:0c:8b:32:93:58:fb:06:ff:52:cb:14:c8:
19:33:c7:91:94:99:b7:f9:fc:bf:6e:18:78:de:d0:ab:5d:b2:
2b:b1:f6:1e:00:f2:55:a0:49:bb:7f:c1:ff:d2:73:71:2e:b4:
9f:37:e6:3e:39:54:9a:4c:df:a9:df:68:87:18:e8:13:0a:d9:
3a:a6:0b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:48:00 2025 by rpki-client