Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File: 3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier: Qoh0/4g3Qym0s7NbdU6oi3A37Q4wq7wQz69+4QI6DOo=
Subject key identifier: B4:08:45:0C:97:CE:B5:4A:CB:44:83:9B:F4:91:D1:46:76:64:3A:41
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial: 019A70DC7F73AC4664952578653CA7A2AC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number: 060D
Signing time: Tue 11 Nov 2025 03:01:29 +0000
Manifest this update: Tue 11 Nov 2025 03:01:29 +0000
Manifest next update: Wed 12 Nov 2025 03:01:29 +0000
Files and hashes: 1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: Ar5WiYNqeDLmMqU56vaB8qMRdle4TnB9L/MwoDdE6ZE=)
2: wLvB8cGiUEUZNSS38jCt0kGtb0w.roa (hash: m3dcBbH2bIeKi8Ap8eHL2CuPz3vf7Stl96ekMV6tjIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:7f:73:ac:46:64:95:25:78:65:3c:a7:a2:ac:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Validity
Not Before: Nov 11 03:01:29 2025 GMT
Not After : Nov 12 03:01:29 2025 GMT
Subject: CN=b408450c97ceb54acb44839bf491d14676643a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:c4:4e:f1:57:b0:ee:5f:92:5d:5b:cf:d4:
6a:df:31:2c:d3:be:5a:b0:00:92:d8:12:ea:57:be:
0a:12:c8:20:18:63:4c:7b:c5:25:e6:85:5a:3b:7f:
63:d2:ce:0c:8c:cf:4d:38:7e:51:fa:a9:ee:ed:43:
d6:49:f9:9e:d2:7f:08:6d:8c:19:a3:a7:61:cf:80:
31:cf:1d:b2:f7:6a:6d:29:20:62:19:e1:d9:53:36:
0d:fa:66:c3:75:21:bf:e9:a9:b7:07:9f:20:23:f9:
db:97:59:59:30:00:5f:e1:0c:8b:91:01:e8:88:f9:
79:2a:b2:20:b5:2c:30:3c:0b:8c:b8:86:f2:f9:03:
ca:e1:97:54:4b:94:07:ed:ad:ea:bd:ac:08:4e:bd:
1e:51:07:7a:51:47:c5:85:db:b1:07:0e:ba:bd:e8:
d8:98:ec:f1:4e:37:04:67:a1:41:7f:b8:ff:f5:5e:
c2:68:0e:0a:14:42:49:f1:7f:96:45:4a:17:14:6e:
6a:e1:cf:16:45:7a:e4:2a:07:00:e8:a9:da:dd:99:
9a:6e:26:71:fc:52:2c:2b:26:57:27:eb:f7:db:a4:
c6:9e:58:ce:a9:94:c1:a9:20:b7:9e:cb:7f:7d:7e:
67:3b:9c:e4:84:90:52:a3:8e:04:2e:e4:fa:1a:87:
06:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:08:45:0C:97:CE:B5:4A:CB:44:83:9B:F4:91:D1:46:76:64:3A:41
X509v3 Authority Key Identifier:
keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:1f:6c:fa:7c:5e:37:a1:c4:3d:27:f9:89:06:ce:2a:ed:8b:
8a:58:c8:eb:20:7b:50:f8:21:5d:1c:e4:0b:33:d0:ee:c0:a9:
e8:8e:9a:59:76:6f:a6:f5:03:fd:b8:f8:71:fe:f9:10:65:1a:
6f:64:93:ab:36:e1:ad:31:b2:7b:7d:e5:8b:3c:08:c1:4d:64:
96:04:c1:f3:c9:2d:8b:38:d7:98:c6:c6:36:1b:d0:f8:f9:26:
de:21:4f:ab:5f:29:7f:2e:7d:ae:0b:d7:f5:70:d7:9e:87:d3:
84:bb:18:c2:05:6e:e4:03:49:35:fe:0e:94:43:19:6c:ec:42:
81:ce:0c:8d:c2:c8:e3:f1:5a:7a:e6:14:d1:aa:6a:16:f3:ac:
69:9d:b6:25:71:d4:13:1f:08:12:6b:3d:ac:d5:8c:ad:27:29:
e4:bf:6d:75:06:1c:7b:fb:28:ca:f6:d8:74:cd:d0:77:7f:14:
22:9a:22:09:82:a5:f8:5d:5c:a8:d6:eb:61:7f:f4:7b:9e:c2:
c6:b7:5f:f8:17:1a:b1:b6:e2:36:49:ed:19:76:87:b3:5b:af:
f5:9d:10:8b:e5:57:d9:a0:44:2e:81:9a:3e:64:a8:f9:cd:e6:
f6:c9:c5:b0:61:67:2c:e7:19:2b:70:a6:b5:79:c6:a2:14:23:
d7:d0:ab:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:01:33 2025 by rpki-client