Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
File: 3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json)
Hash identifier: PF5V+mUHpfuDhrLwTqGNS1lFw7LJU0GHiXnQcbx17gM=
Subject key identifier: 23:1C:A0:A7:D9:56:C0:D7:CD:A7:71:69:74:4C:1A:1F:23:21:65:D7
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial: 019A71131588B9B8EC064C1354C6F385E12F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:01:07 +0000
Manifest this update: Tue 11 Nov 2025 04:01:07 +0000
Manifest next update: Wed 12 Nov 2025 04:01:07 +0000
Files and hashes: 1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: cUNq1VUOTpmB6Jo1hAh+i4YefqxQWgmLrK+n6ABaOWw=)
2: MAicR0R3ncVMTkKV0oZy3oBwEck.roa (hash: WaK4eGmwJjqB7bEEMx1lPorCW+4yf4wVwlYB8uvjgfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:15:88:b9:b8:ec:06:4c:13:54:c6:f3:85:e1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
Validity
Not Before: Nov 11 04:01:07 2025 GMT
Not After : Nov 12 04:01:07 2025 GMT
Subject: CN=231ca0a7d956c0d7cda77169744c1a1f232165d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ee:99:d1:99:81:44:34:2c:66:cc:c4:b5:2e:
10:e9:f3:3c:92:a6:bb:fb:3c:f6:9d:e4:3f:20:5c:
da:bc:43:3a:c8:fc:7e:89:00:e8:31:55:5a:71:59:
50:f5:f1:b4:37:a3:cb:a6:9e:c3:8c:2e:41:ad:e9:
5f:b4:4d:a7:27:cf:e2:41:f5:80:9a:fc:8e:2f:90:
f7:0c:6c:89:b7:28:47:0a:fc:40:83:bd:56:f1:f2:
0b:61:02:76:df:ad:b8:af:02:5d:87:5f:59:0c:bc:
4f:83:94:51:a2:34:90:97:02:f7:11:63:83:c7:fe:
56:57:e4:22:ce:11:b5:9b:cf:b8:4a:b5:9d:26:4d:
2c:fe:05:2c:09:a3:80:39:a7:ad:f5:3b:3d:a8:c3:
d5:7c:c4:e4:fe:db:9c:53:4e:b1:85:bf:d2:f2:62:
0f:3f:3c:9a:d8:ab:19:dd:86:16:9c:c6:f9:58:9d:
5b:50:cb:3a:74:56:61:27:92:e6:69:39:e4:ef:9b:
d1:7e:59:67:07:8c:b3:4a:5b:2e:99:fd:40:55:0e:
04:6e:4f:6f:9f:17:eb:ac:67:b6:30:18:0f:62:56:
b8:6a:7c:30:b7:9b:b8:57:38:62:56:8f:40:d4:9f:
e7:16:9e:6f:0d:74:6a:53:d3:fa:00:ca:61:0f:19:
e6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1C:A0:A7:D9:56:C0:D7:CD:A7:71:69:74:4C:1A:1F:23:21:65:D7
X509v3 Authority Key Identifier:
keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c5:26:f3:fa:bb:51:aa:d2:15:6a:23:be:4d:75:37:37:2b:
c5:50:ca:72:f5:75:8c:64:ba:ce:cc:81:da:e7:2a:29:48:01:
ac:a2:c6:69:13:01:90:96:4b:20:a1:16:63:ba:46:63:f5:50:
f6:fa:f0:de:ab:36:c3:f8:02:d0:fa:45:d3:8d:58:34:b5:4d:
d9:e6:00:90:39:50:6c:fc:8b:26:fc:c7:1f:90:e2:81:64:6e:
1a:4c:6f:91:9e:19:b2:67:66:5b:c3:74:60:8c:bc:80:c7:2e:
1a:e7:bb:60:c5:b3:57:3b:75:96:98:2b:36:ad:a0:e8:87:e0:
fd:fe:28:09:5f:0b:a6:bd:ee:3b:66:e1:c6:18:d0:8c:ab:53:
ec:d6:d6:72:7f:cc:cd:84:48:c5:89:05:e0:e8:f5:7d:e7:73:
64:2b:2a:5e:a5:8c:a3:df:70:7b:77:ab:bd:72:71:c0:7d:30:
80:21:ea:1c:38:12:4e:c1:05:8a:f4:2a:df:12:ab:09:58:41:
19:e8:12:e4:99:c1:d8:76:05:72:69:21:60:f9:ed:2a:a0:2b:
37:b7:04:88:c5:38:7a:48:5f:a1:17:d4:46:0d:6f:17:af:90:
0c:7a:52:9c:43:82:33:19:8e:04:d2:d0:6f:33:c2:aa:ed:68:
db:35:36:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:45 2025 by rpki-client