Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
File: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft (raw, json)
Hash identifier: kQJShgZiKZ2ExCGlfmgs7MUmrrAwnOkxGolcpHP0jb0=
Subject key identifier: C5:93:94:EA:CF:93:3E:83:E8:8D:67:6F:3B:0D:B4:9B:60:86:1C:E3
Authority key identifier: DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
Certificate issuer: /CN=dcfa86863c55865700634e1135e617e4079af8b9
Certificate serial: 019A71136666B66324517C94A829BD01642B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
Manifest number: 127A
Signing time: Tue 11 Nov 2025 04:01:27 +0000
Manifest this update: Tue 11 Nov 2025 04:01:27 +0000
Manifest next update: Wed 12 Nov 2025 04:01:27 +0000
Files and hashes: 1: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl (hash: xxR5Weu7dutycMZN5Hj8bgM2VRl8ihPalW2PCTB/UmU=)
2: iVs53h_YZF7aBqVA1FOf0up1OVA.roa (hash: UW0lfLNzDTQsdkpmCT+L1fh8JEZx2jiYpIhhq1q1Nsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:66:66:b6:63:24:51:7c:94:a8:29:bd:01:64:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa86863c55865700634e1135e617e4079af8b9
Validity
Not Before: Nov 11 04:01:27 2025 GMT
Not After : Nov 12 04:01:27 2025 GMT
Subject: CN=c59394eacf933e83e88d676f3b0db49b60861ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:bb:53:9b:f8:8b:46:8b:e2:c3:a4:74:81:
f7:fb:b9:05:7e:9c:a4:a5:45:e1:4c:78:1e:d7:7f:
40:d8:4b:da:c7:0c:3a:b2:c1:bc:9c:5b:4f:c7:1e:
e5:0e:22:0a:42:e0:ba:9d:52:da:5d:14:80:3f:c7:
b7:0d:7b:73:4e:30:78:6e:22:54:4f:8a:16:4d:77:
03:73:ea:2a:94:30:74:3a:cb:cb:02:4b:9f:3d:8e:
61:1b:bf:bd:15:17:98:82:92:f2:25:71:3e:cb:ac:
7a:89:66:7c:e7:d8:7d:50:2d:1c:43:c5:d6:68:11:
1c:04:c8:18:83:78:79:3a:61:ab:fa:45:31:9c:93:
ab:aa:80:9a:27:a2:e5:8c:d6:1d:77:ce:0b:c6:d5:
33:a3:4f:e4:25:d3:93:53:28:4f:20:85:a5:48:a9:
d4:d5:52:05:a8:f1:f8:98:84:35:5a:75:2b:49:86:
c8:6f:8e:ac:a9:f2:08:0e:59:0d:3c:4e:da:9c:e6:
d6:87:34:5a:fe:69:9c:76:4d:f6:63:ce:0f:86:1b:
80:41:e3:2d:a8:b7:9a:da:46:33:fc:dd:c9:f4:13:
e8:ca:b0:95:a4:f6:e6:85:f1:57:da:30:99:3c:3f:
cb:3f:2c:1f:4b:b3:f8:fa:62:22:2c:0c:a4:a6:58:
de:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:93:94:EA:CF:93:3E:83:E8:8D:67:6F:3B:0D:B4:9B:60:86:1C:E3
X509v3 Authority Key Identifier:
keyid:DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:36:ba:77:63:b2:84:6c:c2:28:28:b8:fe:e1:ed:45:b5:5a:
78:9b:d1:30:49:4d:35:66:44:38:6f:26:32:e1:60:79:d4:c9:
5a:0e:88:7f:84:35:bf:3b:14:e4:b6:96:80:74:88:b1:66:ab:
30:51:92:3f:1a:d8:bd:42:23:ce:84:c4:02:28:e6:ae:1e:56:
c9:2c:be:a3:7d:02:a8:eb:7f:9c:8f:d0:9e:d0:ec:99:a9:3f:
27:4e:be:97:c9:92:3f:2b:e1:64:83:83:3f:09:c9:97:56:9a:
d4:e2:fe:a0:2f:4b:66:62:c6:b6:04:9f:d9:7c:a8:73:dd:25:
ec:cc:e5:68:0a:84:ec:30:95:58:78:9c:db:2f:c5:80:dd:55:
bf:91:52:3f:5e:82:3b:dc:7b:f4:e5:15:ef:32:bb:a3:24:a9:
0f:b2:be:ef:02:41:5d:aa:eb:c1:f3:57:20:39:67:98:08:f3:
14:a7:bb:f5:29:8b:22:d2:15:2d:04:55:d7:98:75:83:b6:ad:
7c:56:03:b3:f4:91:f9:21:89:d0:c4:6e:f4:cb:eb:a9:66:1b:
9d:f8:88:71:be:07:ac:87:0a:d1:84:9e:40:a0:89:bd:60:f7:
4a:fb:ec:9c:46:0c:3f:3e:61:11:08:9d:01:e9:3a:d9:37:58:
43:42:10:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:13 2025 by rpki-client