Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: KXXPsiqTjmTgukOjMKo7HRtvBW58rp4PrZA0aDY/waI=
Subject key identifier: CC:5A:F2:2E:B0:5B:59:A3:FA:45:D5:CE:7C:B4:12:A8:23:2E:5B:16
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 019A71B77DCEECFD2BB862B7ED612B6A108C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 0C2C
Signing time: Tue 11 Nov 2025 07:00:41 +0000
Manifest this update: Tue 11 Nov 2025 07:00:41 +0000
Manifest next update: Wed 12 Nov 2025 07:00:41 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: nC7nPBxDb1qwvvEQSqo0ly438aAj3d5Lo2z5RIRaDkY=)
2: 4NcSUJ4Kg8dewIwP8RGgWPLVsGw.roa (hash: NfguGRutDpTl33g3TT2hnx9Rfi2f9fnIaQJYs24UAYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:7d:ce:ec:fd:2b:b8:62:b7:ed:61:2b:6a:10:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: Nov 11 07:00:41 2025 GMT
Not After : Nov 12 07:00:41 2025 GMT
Subject: CN=cc5af22eb05b59a3fa45d5ce7cb412a8232e5b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:6e:63:d9:77:86:9a:e0:24:ed:a0:e4:d9:
d5:54:f1:0b:7d:f0:1d:fa:b4:aa:53:f4:22:a6:d1:
02:3d:21:fe:12:09:22:dc:93:71:59:4c:c2:c8:5a:
28:cd:da:57:a3:85:58:32:b9:a1:18:a8:72:fc:e9:
69:63:09:bb:57:00:40:12:46:18:5f:85:1b:7d:4b:
a4:01:3b:df:2c:cc:89:09:86:cd:67:3e:b4:9e:52:
84:a7:43:53:92:cf:2a:4b:6f:c1:d0:59:12:c8:a9:
5b:1b:73:ad:8f:cf:3d:67:38:85:cd:36:75:68:55:
ee:c8:84:7f:6d:a1:8c:26:2a:fe:86:89:bf:20:43:
ec:a1:25:38:e9:c6:9e:0d:4c:0a:12:18:3e:8c:93:
fb:59:e1:ab:93:7c:94:9e:b4:93:e2:e0:0f:4d:25:
65:f6:bf:b9:b2:56:86:30:21:86:ab:f5:29:d8:f7:
76:03:8b:f8:02:f9:51:ac:70:17:91:e1:4d:64:2a:
69:65:1a:6c:3d:ad:a9:4a:cd:30:7a:1b:1d:d4:f8:
f1:82:53:c2:b3:1d:1d:57:43:c2:2d:1e:dd:0b:d8:
4e:e9:28:07:71:4f:56:ad:e4:91:cf:2a:9f:47:ab:
ba:cd:48:a3:45:0a:00:28:d1:d8:cb:31:e8:68:79:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5A:F2:2E:B0:5B:59:A3:FA:45:D5:CE:7C:B4:12:A8:23:2E:5B:16
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:40:fe:7d:2b:e8:45:83:50:f7:34:df:b1:57:43:7c:91:3c:
07:43:e3:8a:9f:9e:6e:7d:b1:84:4c:66:69:15:61:ed:1f:8b:
6e:d7:90:5f:eb:36:2c:04:42:e5:7e:78:0d:22:3c:0e:80:36:
f6:bb:d5:1b:4c:df:97:6e:85:55:5b:9c:43:e7:bd:81:73:ed:
2e:1e:da:d3:fa:f5:d2:71:8f:7d:e9:bb:d8:23:e4:23:c3:bb:
d9:41:46:e0:6e:5b:be:62:99:84:df:38:a9:81:46:b4:ca:fc:
a1:c0:4c:d9:5b:4d:b7:f4:6c:dd:2f:5d:84:11:80:f6:59:8d:
0c:9c:93:e9:d2:62:01:03:46:d9:e9:c6:5a:f1:4c:d5:95:64:
16:70:ff:b0:70:3d:77:42:1e:ee:b9:7d:f0:55:5b:b7:b5:82:
a8:d2:55:72:33:31:e3:f2:53:ec:16:41:ab:70:a9:cc:db:09:
10:2f:71:14:8c:ea:28:f9:4e:ec:fc:62:6b:9d:5b:eb:43:e9:
fa:a7:05:14:fb:97:f2:cc:ea:99:45:e8:72:cb:d6:5d:bd:9e:
31:11:0d:15:4c:25:73:e6:8f:90:b1:dd:a1:61:94:86:3e:70:
7b:c6:d3:00:b6:de:30:5b:0d:ff:3a:90:c2:12:96:39:86:1e:
50:05:a9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:25 2025 by rpki-client