Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json)
Hash identifier: ky4nDcVKGXDD/80jB/8xjfShDZxY+4MCGju8C0tbi0g=
Subject key identifier: 2A:39:76:4C:46:4B:C7:A4:3B:04:CC:3E:47:83:2E:C8:23:20:16:F0
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 019A7112B00318C9C9E286F98A763EDB81A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 04:00:41 +0000
Manifest this update: Tue 11 Nov 2025 04:00:41 +0000
Manifest next update: Wed 12 Nov 2025 04:00:41 +0000
Files and hashes: 1: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: lNSqOizWzM0R1tLanpbmCGHJlQHqQYC+ueBRYFIrVes=)
2: I2pncAJfzNdJmYYh59kVF5OSpUs.roa (hash: lHfLeGadLKnQRU2ejGfcyZ67n8h62UJ2WQIx9Gm+axg=)
3: MnzrFfyCM6_m24BkwXpZ_Rso1RQ.roa (hash: XgLOcASonVn7TWXy+ktIGTPZ2UgFdKpsifVTE/uxOB0=)
4: UJU_wGK_nKOpS66Lv-qw5sHx6Yc.roa (hash: DVPLZ7QtHdhq6Tawu/C5Hzz46ZghvtTkOTNBcz5aL5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b0:03:18:c9:c9:e2:86:f9:8a:76:3e:db:81:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: Nov 11 04:00:41 2025 GMT
Not After : Nov 12 04:00:41 2025 GMT
Subject: CN=2a39764c464bc7a43b04cc3e47832ec8232016f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ea:cb:0b:c5:0e:00:fb:53:89:af:fc:4e:91:
29:56:72:e0:33:31:d7:dd:a0:f8:51:1f:71:11:be:
ca:be:51:c5:7b:f4:c5:85:eb:76:1f:20:30:a7:48:
e6:ce:6e:fc:3d:15:27:1e:ea:14:76:5c:33:b5:cf:
5e:50:00:ce:e6:cf:86:90:8b:21:0d:a6:6f:6b:6d:
56:e3:58:a7:ca:c4:bb:0a:ce:7b:80:87:72:ed:ef:
10:6e:e3:40:4b:e3:0b:b2:d5:5d:60:1b:3d:10:5d:
29:79:5c:33:a3:ef:96:06:04:bd:5a:e0:c9:78:4a:
4a:2d:59:ed:f1:af:65:e9:12:fe:22:26:cc:7d:58:
bb:c6:8a:bd:15:10:2e:16:96:f3:d1:6f:af:8b:ab:
4d:3a:0a:53:c2:51:f0:04:a0:aa:86:ae:97:01:4b:
a4:bd:39:84:e2:84:1a:9b:a7:2b:a2:30:d5:f4:b1:
e7:08:95:fb:ce:e0:6b:dc:e4:ff:38:dc:ad:74:17:
1b:27:3a:5f:97:c0:4d:cc:78:5b:46:7d:4f:aa:13:
c7:5c:1b:1d:88:99:7b:89:ce:fa:d5:6d:30:b0:42:
fc:0f:b4:80:ef:71:c2:89:9d:8b:31:cd:67:b8:37:
ea:92:20:71:bd:15:69:bf:d0:d1:07:c5:63:a4:35:
74:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:39:76:4C:46:4B:C7:A4:3B:04:CC:3E:47:83:2E:C8:23:20:16:F0
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9d:67:93:93:a6:7f:37:ac:fb:c9:7a:ec:d5:d3:7f:df:d4:
04:d1:46:e3:76:16:9e:6d:bf:a1:d2:25:27:68:69:ab:a3:56:
f1:53:96:ec:f0:cc:93:4b:63:81:fc:ed:65:33:00:b8:c4:3f:
7d:dd:d6:f6:37:9a:b6:29:57:82:64:ab:95:49:51:ed:cd:25:
5d:32:70:25:72:15:a5:1f:0c:2a:6a:1e:ae:7f:cf:29:e0:e2:
aa:e5:5f:b7:7e:21:de:8a:bd:78:0c:90:9a:be:58:08:80:5b:
c1:55:b3:f7:9d:de:fe:e3:18:c7:34:3a:b1:d9:b5:ad:31:f2:
28:ba:71:5b:6b:b6:ae:d2:1d:bc:1f:94:23:2a:53:b0:e4:33:
87:98:ba:cb:3c:4d:dc:b1:75:10:e8:b4:80:49:a9:b8:8e:3f:
e3:9a:2b:46:d6:08:4e:a5:fa:dc:83:66:d0:a3:6d:7b:d5:da:
64:86:10:8d:bb:a4:2b:00:29:21:26:98:b6:84:ba:da:4e:d8:
35:91:84:37:30:ba:83:90:ce:e0:72:42:c9:71:1b:70:f7:c3:
33:94:2a:ac:f3:60:ef:b7:f5:9c:23:74:5a:fd:34:05:0f:c0:
e3:95:7a:7f:6e:5a:39:ae:33:66:71:c3:25:f9:35:7e:a1:02:
ff:e7:3c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:01 2025 by rpki-client