Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
File: 3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json)
Hash identifier: 3DIckaT8es0MDV4dCKuSQNe/DMmF4Uq3Px/IpedO28M=
Subject key identifier: 74:80:CC:A4:6C:36:7C:8F:B8:24:A5:64:ED:1A:C2:98:D9:01:66:01
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Certificate issuer: /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial: 019A71134A42B0954C0B3AE6B78BC6FD74D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
Manifest number: 11BA
Signing time: Tue 11 Nov 2025 04:01:20 +0000
Manifest this update: Tue 11 Nov 2025 04:01:20 +0000
Manifest next update: Wed 12 Nov 2025 04:01:20 +0000
Files and hashes: 1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: m7A+2o45Q44uS51brs+rF1sQzcp42jxJO3cupfmLJRQ=)
2: wfCvw7M0UWwwmqgY4ndwt7Ezdvc.roa (hash: nadXDZSO5g66NQALk/0GLGlBJpZj5fLYUofWKpN1pZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:4a:42:b0:95:4c:0b:3a:e6:b7:8b:c6:fd:74:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Validity
Not Before: Nov 11 04:01:20 2025 GMT
Not After : Nov 12 04:01:20 2025 GMT
Subject: CN=7480cca46c367c8fb824a564ed1ac298d9016601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:47:7f:de:06:88:84:79:5b:0e:e8:99:fc:59:
56:c6:11:ff:94:49:fd:66:30:6d:20:1d:77:29:f5:
48:8e:71:b4:84:72:63:92:56:76:8a:18:ec:42:3a:
5b:ab:56:05:da:56:bd:c8:6c:a8:43:23:91:f6:63:
fd:9a:5a:9a:dc:9c:b7:fd:a6:70:3b:e1:2e:d3:9f:
d2:b6:39:39:bf:fb:9c:23:f7:ae:7c:b7:bd:78:ac:
d4:4d:eb:14:f3:c4:92:46:09:12:b0:e3:ee:d3:a4:
ca:a1:5b:77:51:17:09:b7:91:2c:f2:12:cf:3c:d8:
25:8f:5f:c2:de:d6:04:f3:29:0a:9e:65:35:7f:b0:
7c:26:77:de:93:0b:1b:d0:30:af:e9:5e:c6:be:04:
22:bb:84:ed:db:e5:91:28:07:96:9b:e9:07:8e:77:
dc:c7:c6:14:3b:aa:51:3f:de:ef:7e:10:89:15:f8:
8a:5e:31:a4:c2:8c:7c:e4:7f:05:bb:87:8b:73:1e:
22:6a:b7:27:a4:e6:4d:75:c6:cc:96:bb:92:72:28:
42:96:19:86:27:59:32:52:66:e5:cb:1f:a1:da:e3:
97:58:23:5e:36:21:18:21:d8:da:0f:33:1c:7e:31:
99:36:bb:05:60:9a:e4:7f:f5:14:b3:02:b8:e5:13:
d7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:80:CC:A4:6C:36:7C:8F:B8:24:A5:64:ED:1A:C2:98:D9:01:66:01
X509v3 Authority Key Identifier:
keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2c:b2:95:fc:6e:33:57:aa:85:03:3b:d3:be:17:08:d9:c6:
69:68:1f:e1:f6:20:c4:c4:0c:dc:1e:3b:6e:37:dd:a6:1b:6b:
f5:70:ea:7b:e3:7c:e0:5a:40:e0:be:e4:4b:20:f2:b1:91:59:
0c:d0:6c:f2:f2:09:fc:a8:c0:15:18:e4:2c:02:28:39:65:b7:
0d:39:37:de:40:14:d7:a7:8a:49:04:d7:78:f3:77:15:26:54:
e0:5f:7a:5f:b0:93:0c:66:bc:e1:84:ab:fa:23:9c:95:d5:85:
ab:2e:9e:18:e9:8c:1d:52:03:06:6d:a7:9a:61:e1:64:c4:cf:
6b:00:e1:8f:26:8e:d7:9c:c4:fe:b3:b8:e4:21:82:12:13:68:
e9:83:ca:c1:cf:b1:15:3f:ab:77:83:dc:27:82:4c:3d:ad:d8:
d7:56:36:7e:82:6b:63:61:ea:08:b7:aa:bd:40:6e:1d:af:e9:
d5:ae:84:a2:b6:49:6b:21:58:6c:c0:89:cd:df:4f:c9:4d:e6:
ad:c3:26:8d:1a:27:01:c1:6d:a0:2e:45:df:f2:24:10:61:08:
30:16:c8:f8:1e:ac:e1:92:2c:e8:3f:31:10:cd:fd:4e:05:05:
82:a3:cb:39:3c:51:3d:a0:05:fe:b0:70:be:f8:7f:ed:e6:35:
d8:72:00:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:46 2025 by rpki-client