Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
File: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft (raw, json)
Hash identifier: cVcCS5c41j9j21dwyqTay94ZP15k4hdClXbUL7ORH+A=
Subject key identifier: C1:85:D1:52:8F:39:DE:4C:2D:64:6D:6C:73:58:63:24:09:7E:F5:E1
Authority key identifier: DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
Certificate issuer: /CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Certificate serial: 019A71B843A5ECC515B38F9CC83D902012B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
Manifest number: 0B2B
Signing time: Tue 11 Nov 2025 07:01:32 +0000
Manifest this update: Tue 11 Nov 2025 07:01:32 +0000
Manifest next update: Wed 12 Nov 2025 07:01:32 +0000
Files and hashes: 1: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl (hash: yKT7yflz/Yu9DC7ReLhBIkRJe5dNXbmE8yBoV3NVlGE=)
2: b98tIeNuwYS2XlZhqO3_1p2iGyM.roa (hash: KEycjnHhvF/hQmL5nDtRKOEAJMQLEc4nzVMPySVKhnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:43:a5:ec:c5:15:b3:8f:9c:c8:3d:90:20:12:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Validity
Not Before: Nov 11 07:01:32 2025 GMT
Not After : Nov 12 07:01:32 2025 GMT
Subject: CN=c185d1528f39de4c2d646d6c73586324097ef5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:c6:66:67:89:3c:1a:f7:a7:69:f2:f5:23:
77:9d:07:d8:e2:0d:aa:d8:bd:a3:d9:bf:26:ef:b9:
f4:6c:c8:8d:ad:62:9a:c6:98:f8:43:df:67:af:c6:
8a:cb:17:7f:ee:d5:fd:35:1c:79:2c:31:8b:eb:4e:
48:25:14:5e:cf:a6:69:3d:dd:65:5b:da:c7:83:e3:
82:64:bc:d8:df:94:d1:c6:31:78:6f:41:50:e5:6f:
96:5a:3a:96:52:a2:9f:a6:81:2c:c9:28:11:84:8b:
b1:60:9e:50:96:fc:c5:73:9e:c6:73:d1:a1:2a:1e:
01:2d:02:7a:a9:b1:e3:cb:8f:bd:90:ce:36:7d:8b:
61:b8:0c:f2:d1:0e:2c:b5:87:a3:f7:45:b1:7c:bd:
09:cb:2c:8c:28:de:2e:f1:67:0a:08:0b:44:ac:b0:
f4:27:ae:14:33:32:a7:0a:18:13:78:a2:a9:48:27:
c8:01:15:3c:dc:3e:8a:c6:25:99:88:9c:de:62:36:
13:48:e8:70:2e:3d:13:1a:91:e4:85:7a:39:81:ff:
9e:e4:f2:e8:a4:9c:7b:e0:55:5b:84:ab:31:16:7c:
8b:90:3d:a6:d1:b5:dd:cb:93:36:8e:17:e7:8c:a0:
bc:62:fe:67:54:15:ee:07:0a:f2:f4:04:b2:59:e3:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:85:D1:52:8F:39:DE:4C:2D:64:6D:6C:73:58:63:24:09:7E:F5:E1
X509v3 Authority Key Identifier:
keyid:DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:20:c7:14:7c:55:a1:3d:a2:21:3f:b4:3a:b6:40:f0:62:35:
13:d5:3d:9d:a0:46:15:ca:6f:cc:67:f8:a4:bd:5d:39:7e:d3:
c1:19:cd:21:8c:3c:6c:79:1a:f6:af:c8:6c:ca:bb:1d:0e:13:
4b:f5:aa:d4:f6:72:5f:a6:3c:4d:47:70:32:ee:68:bd:53:ed:
c1:3d:4a:fb:4f:85:7a:1b:6c:31:22:ed:1d:bb:e2:27:7d:42:
dc:ed:4f:b6:b8:c5:ba:14:58:38:45:8e:1b:ee:7a:42:0a:60:
12:b0:f0:9c:ed:5b:fb:27:77:8c:ee:ef:6f:97:2b:5a:7f:cf:
e6:2c:b4:78:91:b0:dc:0c:07:9b:33:13:5b:d8:c5:d1:8c:42:
0d:a6:df:e0:47:54:d8:23:fa:96:7e:2e:4a:8e:42:2e:c9:18:
ef:42:9c:67:86:4b:f9:18:17:2b:21:d8:11:80:11:b5:d3:7d:
47:06:43:ad:46:62:36:8b:a4:1f:d1:aa:2b:35:a1:3e:cd:c8:
fc:40:a9:98:46:de:54:96:ac:50:e5:2d:95:84:0d:c9:b4:18:
8c:2b:d1:69:9d:d9:b0:55:6a:58:a9:e9:ad:4e:98:7c:d9:d1:
fe:82:86:23:e7:b5:74:fb:30:da:2b:30:83:c4:07:8c:69:af:
6e:4a:40:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:50 2025 by rpki-client