Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
File: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft (raw, json)
Hash identifier: DbHQNkUOBWCb9wo+5dFaGeasBr1zqTopi82muwm8isE=
Subject key identifier: B8:88:2C:13:74:45:55:80:0E:D0:B0:34:FB:04:59:D0:46:DE:5D:EA
Authority key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
Certificate issuer: /CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Certificate serial: 019A725CE1FE9B9A3505D79D3B3EEAB8901B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
Manifest number: 0776
Signing time: Tue 11 Nov 2025 10:01:20 +0000
Manifest this update: Tue 11 Nov 2025 10:01:20 +0000
Manifest next update: Wed 12 Nov 2025 10:01:20 +0000
Files and hashes: 1: 1tilC1_jin8srVsrV1j052DulGk.roa (hash: vyS0S5gewCJtoxpuN4POioePDrUuw5luS1kTn7wZwZE=)
2: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl (hash: JAJHV22GIc/jBCUUC2UV0m2uHajk96+FVzUlbM58PCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e1:fe:9b:9a:35:05:d7:9d:3b:3e:ea:b8:90:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Validity
Not Before: Nov 11 10:01:20 2025 GMT
Not After : Nov 12 10:01:20 2025 GMT
Subject: CN=b8882c13744555800ed0b034fb0459d046de5dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4e:54:b8:26:04:e2:8f:98:54:58:c5:13:43:
e7:90:48:87:b9:72:53:a3:2f:84:ec:ef:21:45:89:
a7:d9:1b:75:08:88:69:41:1e:d3:08:18:c1:75:98:
3b:47:5d:c2:84:f8:69:9f:14:57:53:4f:e9:e4:7b:
56:94:bb:48:0f:ed:dc:ed:9a:1a:de:ef:31:9d:fc:
e8:a3:46:6f:e4:ca:b2:7f:2f:9f:d4:bd:31:c3:8d:
0a:b3:e6:6b:a4:60:c0:ce:ab:81:4d:bc:9e:6f:c1:
d9:81:3d:9f:85:ba:d5:6c:31:26:8b:1e:0d:25:db:
74:32:c4:e5:88:61:c8:a9:e0:be:e3:69:69:d9:06:
be:98:e0:35:ab:16:41:4c:ab:6f:05:98:73:c6:35:
e9:f3:c2:34:71:10:db:e2:e7:16:7f:21:e7:29:9b:
39:fb:ce:fa:ed:7c:37:19:bd:fc:5e:b7:09:8e:3b:
ac:65:01:66:d0:fb:2e:e5:45:e6:be:f6:bf:0b:7d:
b2:d5:34:51:4e:4a:f6:b2:d3:84:57:e3:ad:ac:26:
ff:31:25:c8:b9:1d:23:61:b1:3e:b2:22:ec:6b:0c:
16:e3:24:15:19:d8:ab:66:54:2b:ca:c1:42:77:fa:
77:36:49:ee:03:eb:2f:bc:0d:48:a3:39:f1:96:b2:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:88:2C:13:74:45:55:80:0E:D0:B0:34:FB:04:59:D0:46:DE:5D:EA
X509v3 Authority Key Identifier:
keyid:DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:58:65:d7:e2:0f:f1:f3:1d:2b:9a:44:df:d1:25:1e:ef:29:
59:25:fc:ca:ec:ce:f2:0f:76:11:09:ad:38:0e:33:2e:9f:c7:
c0:d5:a9:f3:5c:ae:dd:4d:59:a2:37:98:a7:e4:64:53:0b:21:
0e:b6:79:97:d6:76:22:31:56:2a:7a:ee:82:a0:fc:85:8f:4b:
c2:6f:52:ed:75:7b:9a:78:a8:b5:3f:5e:a7:5d:7a:20:dd:b7:
6e:c1:85:8b:98:f8:a6:46:59:cd:57:5c:59:46:5d:67:ec:77:
1d:18:fa:c5:59:29:0f:be:f7:35:e9:7e:6b:42:e2:d2:d9:3c:
d8:16:38:58:fe:66:61:85:52:ca:19:bf:41:45:fe:e4:7f:b6:
3e:88:9b:a6:92:83:05:a5:42:f7:62:ed:1d:d1:d5:21:6f:20:
8b:d6:1f:43:ba:fc:14:cc:b8:bb:a6:87:8b:5e:72:7e:d2:54:
ed:b4:b9:c4:2a:c7:43:33:99:f6:d2:c3:42:15:4c:72:97:eb:
b5:46:d1:a2:83:04:63:55:28:66:bb:d8:31:23:2e:7f:b8:1c:
74:f1:f1:3b:f4:e6:08:62:b6:5e:94:60:ca:c9:e1:5f:b6:31:
a4:20:ed:45:d4:87:6b:b6:b8:48:f8:81:95:d1:8b:8a:f9:63:
ea:32:d0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:16 2025 by rpki-client