Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
File: 3t-aZxvPF4nBtaw2MMdBvlYNraA.mft (raw, json)
Hash identifier: iHrV5DRvYiyRWrBIpBngM1AlAZjGn+Z4N/gUs2yo72Q=
Subject key identifier: 89:1A:86:E9:74:6B:5D:A0:69:CD:D2:17:97:84:89:EF:A2:38:15:C5
Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Certificate issuer: /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Certificate serial: 019A1BAC2819EE77FF013CC49DC345F67FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
Manifest number: 1269
Signing time: Sat 25 Oct 2025 14:00:58 +0000
Manifest this update: Sat 25 Oct 2025 14:00:58 +0000
Manifest next update: Sun 26 Oct 2025 14:00:58 +0000
Files and hashes: 1: 3t-aZxvPF4nBtaw2MMdBvlYNraA.crl (hash: PfYwwDBcZIPLF62kRxfl8lSo3AvimvzUZM719lDmCUE=)
2: RNkRhX3yK-TkHlh9YWWsykby_Dc.roa (hash: vp+4Wych+XwTPbr9Bjf9hawO/Jnhv86eVFw3KntPsww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:ac:28:19:ee:77:ff:01:3c:c4:9d:c3:45:f6:7f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Validity
Not Before: Oct 25 14:00:58 2025 GMT
Not After : Oct 26 14:00:58 2025 GMT
Subject: CN=891a86e9746b5da069cdd217978489efa23815c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:17:97:eb:e0:2f:7f:bf:2b:04:a8:37:f5:7c:
9f:81:57:2c:22:91:d1:5d:d2:5b:ff:76:7f:93:1c:
2d:56:83:12:a6:e2:82:4a:d5:3d:e1:b3:7c:1f:10:
65:63:86:08:23:ca:fc:3a:3e:57:65:36:22:c9:2b:
af:6e:16:40:65:2f:33:f8:98:db:93:3b:8c:1b:51:
1d:48:85:2e:e5:4a:39:2d:fb:5a:28:3a:bd:25:2d:
55:5b:36:62:d7:d1:57:ec:7c:83:6c:73:19:44:5e:
f0:ef:08:4e:ea:e7:4f:3d:3c:b7:db:c9:b9:74:87:
a9:f7:56:73:2a:50:4d:bd:27:a7:b0:b5:e6:7c:a7:
c2:31:e0:78:0e:0a:40:76:a5:63:51:98:15:f7:9d:
7f:45:4f:4b:27:34:e6:d3:ac:63:ce:ee:a3:6f:5f:
91:32:9d:c4:ff:c9:4a:58:55:79:46:ff:31:b8:0e:
dd:45:f2:e5:71:dc:b4:f1:41:4e:0a:e9:50:e2:86:
86:74:68:4f:a8:b6:a2:30:81:af:48:ce:e0:ee:76:
5f:f1:7f:69:d6:11:25:ac:72:e1:e5:4d:0d:db:c9:
7f:6d:4a:8d:54:09:6b:dd:1e:f6:52:33:f9:ce:30:
3f:fc:3f:8a:19:a8:37:a8:5e:40:48:31:b4:a9:83:
f9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1A:86:E9:74:6B:5D:A0:69:CD:D2:17:97:84:89:EF:A2:38:15:C5
X509v3 Authority Key Identifier:
keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:07:05:2f:2c:93:b3:8c:12:b1:f2:29:6c:3d:6f:79:b8:b9:
29:d4:c7:9d:b2:26:fa:47:39:e9:f7:f5:8c:3c:e8:4a:b1:70:
19:dc:5f:91:37:d5:c2:28:a6:6a:4c:ef:ae:6c:1d:97:89:3b:
31:5f:4b:7b:ef:5c:cb:f7:b9:ec:cb:8d:ad:d9:bd:f3:2b:3b:
33:92:ab:7b:6e:4b:db:07:fd:c0:cb:e3:7c:c5:df:20:4d:1b:
07:c8:3e:87:32:b2:f9:6a:04:b9:4f:df:42:f7:38:50:5d:19:
d5:cc:3c:49:b7:b6:1c:78:a7:70:00:24:27:48:70:54:8e:c1:
d1:8e:aa:67:f4:12:96:4d:3d:40:73:16:7a:95:46:92:0f:3b:
0a:06:76:0f:cd:60:dd:ee:30:8c:a0:5c:b9:0b:ac:36:dc:78:
24:89:f0:c2:d8:47:fe:f5:8f:42:a8:42:28:92:bd:f7:5f:f1:
62:ac:3b:cb:7e:6d:26:30:1a:c7:c3:5b:09:54:a8:eb:ad:06:
6a:b1:46:bb:89:8c:f4:ba:5a:e7:2a:ef:bd:c9:8c:24:0a:86:
2f:8b:ce:8f:57:54:18:97:ea:a3:1c:1c:12:87:76:ec:de:2e:
1f:36:01:a0:69:37:e9:8e:45:e3:22:2e:02:0f:d1:68:e8:4d:
19:e6:1e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:00:33 2025 by rpki-client