Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json)
Hash identifier: 8+j3MoJSSFdWK3VXygSWkPhuaLx2irnaN6Ml3zbz3xw=
Subject key identifier: 46:5E:A9:96:5B:AE:A9:7C:AF:F6:42:B3:50:87:EA:0A:E9:3C:B7:C7
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial: 019A714A0D7ACF37178EA4371ECD00230565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 05:01:09 +0000
Manifest this update: Tue 11 Nov 2025 05:01:09 +0000
Manifest next update: Wed 12 Nov 2025 05:01:09 +0000
Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: qXLqg/0APjt7kU1vOpwN01rqQueNNLg6ikFvVl9KcIQ=)
2: urKpUlRihT17e4-sYhWpyMcE8Ac.roa (hash: OKr8BwUnDAnQRh/fja/ALDyKIeKec2Yi0x2apcZhAec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:0d:7a:cf:37:17:8e:a4:37:1e:cd:00:23:05:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Validity
Not Before: Nov 11 05:01:09 2025 GMT
Not After : Nov 12 05:01:09 2025 GMT
Subject: CN=465ea9965baea97caff642b35087ea0ae93cb7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:93:8b:96:2d:69:67:c6:2f:46:2b:c1:1c:
f6:c3:09:d8:22:6b:76:31:fd:30:c8:47:0b:03:83:
a3:29:fd:e0:2c:bf:3e:68:34:54:92:c0:f8:68:e1:
87:62:8c:64:58:0d:5f:b7:46:30:d3:2a:0b:66:a3:
82:ad:2e:d4:f5:46:77:9f:71:09:4c:8d:d0:22:46:
ac:a5:35:78:49:c4:90:2f:ba:c6:91:03:94:d0:38:
99:44:e1:07:aa:3b:62:35:97:e8:66:55:0f:e0:fd:
4e:d1:9d:d1:65:d3:d8:98:cc:16:c0:30:45:4f:35:
75:3f:8d:0f:08:1a:7f:5b:fb:f8:b9:b1:23:3d:3f:
86:09:d1:92:d0:31:18:50:fa:1f:e1:41:ae:4e:64:
33:17:fe:cf:09:e8:ce:f7:93:bb:0b:ef:98:e5:aa:
7d:bb:cb:d9:d9:77:87:98:d1:b3:50:65:ea:ae:c0:
c1:b5:c2:68:4e:25:8b:96:45:89:69:b2:8c:0e:7d:
57:58:dc:39:bd:25:32:78:db:db:05:6c:81:c0:cc:
35:b3:8e:55:56:0a:7f:0a:78:cd:86:5d:77:ed:22:
3c:c0:a2:a9:af:3e:c8:1a:97:94:7b:54:72:df:77:
da:21:c3:f8:47:df:dd:56:e3:f3:db:42:ca:64:65:
9b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5E:A9:96:5B:AE:A9:7C:AF:F6:42:B3:50:87:EA:0A:E9:3C:B7:C7
X509v3 Authority Key Identifier:
keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:54:7c:e9:9a:7a:39:40:53:a3:82:97:1c:75:26:74:e7:17:
95:54:b2:39:d4:58:52:5e:91:3d:da:3f:59:8e:e9:44:8b:81:
cf:bc:d4:c7:2c:f5:bc:36:95:3e:06:a0:44:fb:f2:e4:6a:33:
77:99:98:ef:97:47:7c:4a:ae:80:3a:e7:44:af:9d:f1:44:fa:
cb:39:18:e6:b3:fa:42:d3:cf:48:d9:49:d9:b7:d2:b2:28:b2:
3e:d3:9b:ad:9f:b9:d5:80:ee:5d:03:de:a2:58:8e:bb:1c:c7:
4c:c2:75:52:32:7c:fb:72:18:d5:88:ef:ea:4d:66:f9:73:aa:
da:7f:72:8f:94:7c:1c:5e:a4:ac:fa:60:52:5e:db:f4:3b:f9:
0e:e0:d2:99:64:3c:10:e0:89:84:09:a9:51:7e:26:e2:0c:9b:
ff:31:38:f9:01:b9:46:2a:7f:15:3a:2e:2f:2a:dd:92:0d:59:
b0:a0:84:78:bd:aa:2a:77:71:77:c2:bf:65:5f:20:a5:30:4f:
7a:62:ba:17:21:15:6e:10:0b:78:8a:68:ed:a2:fb:2a:15:81:
49:4d:86:f2:c6:87:22:77:fb:b8:e9:cf:db:5b:71:c1:d8:a3:
4e:74:97:41:e4:83:eb:8f:f7:ac:5d:56:66:61:33:f1:39:f3:
82:9f:ca:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:36:18 2025 by rpki-client