Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: K6h+7dO0a1FBcZKxJVg/e4CHUkXt/7P+wCE8TnMFfT8=
Subject key identifier: E1:99:D0:07:25:1A:60:C0:2F:32:08:05:53:40:4E:CB:AF:18:B6:07
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 019A71EEBC459990E812551C7A2790C5EB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:01:02 +0000
Manifest this update: Tue 11 Nov 2025 08:01:02 +0000
Manifest next update: Wed 12 Nov 2025 08:01:02 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: p6z7IJIryPLI7RXz5UOx5LJ6Tevj7Olyrmn1QbflgWE=)
2: 3o2OhEX8D-C9sW1xo7_jlOmD_j0.roa (hash: k3QEknU5rjZnXpONxqfvLO581xpn3+pyaYB6EDwI7ck=)
3: 7vdY6fKyJL6xOTEWHPQznWg1cuQ.roa (hash: LAvqsJ06fMyPoV983D+eGZunyZuIfO7UCXuYbTjEljc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:bc:45:99:90:e8:12:55:1c:7a:27:90:c5:eb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Nov 11 08:01:02 2025 GMT
Not After : Nov 12 08:01:02 2025 GMT
Subject: CN=e199d007251a60c02f32080553404ecbaf18b607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:a7:79:bd:5c:3b:1b:9e:af:5b:71:36:5a:
20:56:71:30:cc:c8:0d:65:fd:ba:46:94:61:98:77:
25:00:70:fa:42:da:65:21:5a:dc:9f:59:8f:a1:03:
8f:e7:41:1c:5d:ed:57:b0:9a:27:9f:a0:60:8a:e2:
a8:ab:3c:4d:e8:75:a9:8b:7b:9b:27:3e:0f:0a:0e:
e9:57:f3:33:56:42:01:3a:5a:38:94:ac:5f:a9:94:
29:21:1c:dc:ff:4a:70:07:e9:37:c1:be:37:f5:cc:
4f:26:a0:a6:ab:19:44:4b:52:64:8e:34:c6:65:81:
c0:ff:55:df:14:b6:9b:1a:f4:66:e2:51:b1:70:e9:
6f:74:94:4e:62:65:14:48:1a:63:50:93:b3:19:d5:
df:e5:cc:95:12:8b:1d:da:ba:4a:e4:d1:1d:3f:58:
ba:40:95:87:b6:32:29:a6:df:b7:16:b3:0e:8e:fc:
ee:ea:31:ed:7d:ce:0f:c7:4a:75:65:2b:a7:46:25:
18:30:76:3c:45:38:72:6f:63:8f:28:01:f7:a8:93:
31:3b:cf:2a:a3:09:47:c5:69:53:3c:9b:d6:44:96:
2b:0a:e8:78:1b:33:1b:74:8e:30:ea:88:9f:9e:46:
47:34:91:8d:4e:e4:5f:9b:db:1b:ef:b7:e9:ea:67:
ea:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:99:D0:07:25:1A:60:C0:2F:32:08:05:53:40:4E:CB:AF:18:B6:07
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:82:d5:64:b9:1f:c1:15:94:e8:5f:5e:ce:84:d4:3a:5e:c8:
b4:34:01:d4:cc:13:d2:71:43:c0:be:b9:9c:7d:4f:2c:12:ae:
5f:73:d7:ae:85:06:9b:7b:4e:55:fd:6f:f4:09:df:b4:a4:5b:
04:cd:c7:d2:98:2e:1b:60:c7:d1:46:03:3c:6b:26:ee:e8:9a:
92:dd:85:45:3b:84:c5:9d:1b:39:1e:09:d0:de:8c:1a:3f:a8:
48:34:7c:16:7b:fe:59:ab:1a:4a:f2:7e:8b:53:2b:11:0d:f9:
03:f0:b6:8a:67:a3:03:72:55:57:16:e4:a4:31:d9:89:e1:ca:
b8:7a:ee:f8:1f:4b:6e:b1:ed:52:59:7a:e6:ed:9a:97:f8:8f:
a4:5b:65:cd:0d:b3:b2:5c:bb:9f:20:9e:1e:ae:a3:b6:ad:1f:
cc:65:a1:48:a0:68:e8:45:7b:69:9e:a4:b5:df:b0:34:19:9b:
63:c6:ab:e8:6d:8a:b0:fb:00:8c:dc:a7:3b:7e:ea:b3:5b:64:
e3:25:fa:37:5e:bf:ad:c4:cd:34:15:57:62:f7:e4:63:3a:78:
a4:97:4a:41:82:d0:be:cc:01:eb:f7:cc:31:ea:84:d5:4c:0c:
80:9c:0c:02:63:d0:e1:52:ae:1b:97:eb:0e:2f:c3:71:94:67:
50:d3:7b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:13 2025 by rpki-client