Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
File: 3mxgNQQsxTJRbrwZaPQb__S4U34.mft (raw, json)
Hash identifier: tDPsdypu99Q9BCDTNhNiY3QeuAfhfd1ng5NAuJQIfXk=
Subject key identifier: 90:64:66:2C:10:16:85:F8:3B:CA:5C:04:68:14:84:38:4B:47:3D:70
Authority key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
Certificate issuer: /CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Certificate serial: 019A71B7EC7A9177EE44D02BDCDF0B32A6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
Manifest number: 1367
Signing time: Tue 11 Nov 2025 07:01:10 +0000
Manifest this update: Tue 11 Nov 2025 07:01:10 +0000
Manifest next update: Wed 12 Nov 2025 07:01:10 +0000
Files and hashes: 1: 3mxgNQQsxTJRbrwZaPQb__S4U34.crl (hash: 8rcP+VvUzuw4efhzO1i/0Lu6OGpJi3XJfMKlG7gpzPE=)
2: qlMHdAg_ZeG5jpZEikZxyiq5rOM.roa (hash: r9NbCVDLWns0v6U+hfflkmDI70L6VCrJW0Q5+div1jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ec:7a:91:77:ee:44:d0:2b:dc:df:0b:32:a6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Validity
Not Before: Nov 11 07:01:10 2025 GMT
Not After : Nov 12 07:01:10 2025 GMT
Subject: CN=9064662c101685f83bca5c04681484384b473d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:90:92:97:0a:44:5b:de:02:e5:31:4a:b6:
56:3a:a7:18:a2:1b:6e:75:f5:0d:1a:db:44:2a:d8:
8b:10:47:c9:15:30:5d:a6:b5:b3:ba:78:8c:b9:4a:
0b:4d:fe:35:55:73:d3:16:83:e2:35:01:d6:1a:a1:
b1:92:64:6d:d7:00:b9:11:3c:02:d9:7b:3c:c7:9e:
88:e1:06:2b:e1:7e:0d:a2:36:1d:ac:5f:db:f7:89:
18:ee:a9:4a:6a:7f:6f:b3:38:12:a0:91:91:2f:e7:
f3:49:f4:94:65:74:e2:85:63:46:2f:67:cb:a7:ea:
a8:e4:ea:47:a5:5b:95:e2:35:28:18:ab:a3:4a:b0:
98:db:17:04:05:06:7c:4b:83:50:fe:4f:9a:7c:f5:
51:2c:73:80:69:ea:6d:cd:ba:a1:7f:92:52:c7:14:
44:33:7e:a1:7a:65:4e:f6:55:a1:0d:03:d2:42:a6:
05:8b:54:4e:2c:1b:47:be:81:eb:3d:95:28:3e:d2:
4b:db:88:d8:b3:78:d2:74:a9:b3:47:f0:ac:cb:2a:
a2:cb:b2:46:09:5c:32:aa:cd:a7:e2:0d:4c:f6:9b:
7e:a6:ae:df:45:c8:3c:9b:06:6c:ac:0e:ad:6a:e7:
8b:0b:9e:71:90:30:06:77:e6:08:d7:0b:72:2f:04:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:64:66:2C:10:16:85:F8:3B:CA:5C:04:68:14:84:38:4B:47:3D:70
X509v3 Authority Key Identifier:
keyid:DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a1:0e:96:63:cf:3a:d5:f0:eb:0a:5c:84:d5:6f:d7:65:ef:
df:c5:96:89:8d:a8:ad:20:c9:bc:5b:f3:32:a9:f7:ba:db:cd:
c3:c3:ed:b9:5b:78:8b:5b:8d:7a:c3:02:e5:09:ec:b1:9d:b3:
54:73:cb:86:e9:89:26:01:ce:74:c0:95:bb:7e:2d:0a:6b:0e:
f3:5e:0c:79:ce:d3:09:68:ad:52:7b:bd:e3:dd:6a:2d:f8:28:
b6:f5:02:a3:f1:e6:2c:fd:f2:2c:ba:4b:a5:b6:f8:f6:ce:fa:
9a:54:b8:7a:89:61:6d:54:03:cc:26:1e:1e:fd:cb:43:46:56:
49:86:da:33:f6:67:aa:83:3e:ac:d8:e6:d4:f3:0c:93:da:75:
2e:95:78:0f:6d:38:91:62:5d:30:80:be:b2:91:f8:69:79:ee:
d9:76:6c:d0:2a:6a:32:d3:20:37:aa:70:06:69:8e:40:04:b6:
ac:87:67:62:53:86:72:c4:e3:cf:69:2b:bd:3e:1d:f8:50:7e:
47:f9:ea:6e:db:35:14:c6:37:72:2c:cd:f2:a6:87:59:c4:20:
1b:ab:76:9a:3f:ea:0d:bf:b1:9b:4e:0b:63:04:eb:7e:7d:76:
7a:76:9d:b0:d0:7e:e8:8b:d6:52:ff:7a:33:a2:cb:aa:84:3d:
3f:d1:06:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:02 2025 by rpki-client