Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: cjs/jEUhw4SuUSNqmplH5nhCGyyrohm6DUvq3rZgEj0=
Subject key identifier: 49:2E:72:49:EE:63:21:E0:41:93:C8:0C:66:AE:1B:42:D9:F5:7D:AF
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 019A7149D693C84F372EDE9670B70479DAA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:00:55 +0000
Manifest this update: Tue 11 Nov 2025 05:00:55 +0000
Manifest next update: Wed 12 Nov 2025 05:00:55 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: yb7udeRK0YWnFV9sNT+LEY32VEG/4TpmyQh4mRY/Uuk=)
2: TWCQBg2-t-jrjyzWp02-IpHykDE.roa (hash: OzxPmG/iv0ZxRaIlS2kwO8RCX9n3cTZki/wmozkxxLc=)
3: w-Jga3ncDiQpUhbU2MQ6dRKRInQ.roa (hash: 5XUytb4Y6hE0gSnX9zthe9SyxMsKZ/nIOoxPG8EDHcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d6:93:c8:4f:37:2e:de:96:70:b7:04:79:da:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Nov 11 05:00:55 2025 GMT
Not After : Nov 12 05:00:55 2025 GMT
Subject: CN=492e7249ee6321e04193c80c66ae1b42d9f57daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a1:07:da:3a:04:49:db:1f:9c:c2:93:5e:97:
dd:9a:61:2f:ec:f2:d2:bc:2a:c3:e1:63:f7:90:3f:
a9:8f:54:53:b7:18:34:1b:89:73:10:29:f0:ca:89:
f6:13:cc:de:7b:ea:96:98:1c:18:d0:29:64:95:c7:
a2:fc:1d:ca:76:69:c2:84:2f:91:4d:98:36:2a:c6:
86:c1:c8:c4:07:68:6b:5f:2c:66:2f:d5:58:a0:7d:
a0:7b:c6:59:c3:72:b7:b0:8a:fc:c0:74:18:55:65:
59:f1:06:be:a4:b0:6d:7d:0e:06:b2:64:85:07:de:
9c:c5:da:46:c3:f0:d0:3f:95:ea:91:ac:b8:9d:02:
ea:34:77:5e:60:41:27:05:10:db:a8:fe:5a:e4:a7:
83:f4:f6:f0:d3:f6:c1:a8:79:34:ed:1c:1d:a3:25:
15:f0:14:b8:89:15:51:5f:9b:65:6b:33:ba:2e:f4:
be:30:98:2b:a7:3d:46:c5:13:bb:b6:90:7e:04:6f:
ae:77:51:6f:93:7a:b6:4c:c3:0f:3c:37:af:6e:25:
e2:78:54:49:74:56:e6:55:7d:48:70:29:04:ab:57:
6f:7c:8a:ac:f9:a7:bb:25:f3:df:e3:f1:eb:d0:d8:
ce:bb:7d:bd:c6:4c:08:94:99:18:c7:c5:8f:2d:18:
74:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2E:72:49:EE:63:21:E0:41:93:C8:0C:66:AE:1B:42:D9:F5:7D:AF
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ca:af:b8:3e:9a:3b:1f:33:f7:44:53:21:6c:8a:fd:92:cc:
c5:e8:7e:82:78:07:7d:ac:da:a2:fe:4b:57:24:e4:55:ac:70:
9c:72:12:47:52:ef:5d:c8:ec:59:6e:8c:10:2e:a6:89:ff:03:
98:49:d4:e3:b4:ae:6a:85:66:a6:8c:9d:90:32:31:5a:18:8b:
c3:d7:ae:c3:fa:b7:1f:6e:9c:f0:c2:51:2c:17:fb:eb:4e:76:
ed:6b:a5:81:5f:a3:d8:6e:ff:a5:05:80:8a:d4:da:44:7e:6f:
e9:f6:e3:65:10:6d:38:d3:c6:9f:50:77:5d:68:ad:bb:73:15:
ff:1e:54:43:a6:8d:2d:62:00:a4:77:dc:a8:7f:b7:3a:08:ba:
d9:16:91:92:35:22:a7:71:a2:3e:b0:03:59:a0:0a:c0:0b:ee:
e9:10:8d:50:a0:2d:1d:8c:25:55:cf:66:4b:27:21:0b:b9:c6:
5d:12:5e:68:d8:ae:43:81:84:d5:bd:5a:b0:68:79:c6:4e:6e:
0c:9a:66:18:57:43:a5:ed:a4:e2:31:dc:9d:65:69:09:c9:f7:
39:b6:5c:a0:25:63:88:bf:b3:b8:39:b8:f8:54:62:60:97:45:
d0:88:8a:c2:41:39:6f:fd:f4:5b:24:ca:9d:b0:5e:0d:93:bd:
97:59:f0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:52 2025 by rpki-client