Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
File: 3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft (raw, json)
Hash identifier: CnsLb3yZNGHduzqt3Bk9CuepKqZz8gbxer4MeWLz2R0=
Subject key identifier: 47:9D:98:CC:EE:F1:74:17:7C:70:9B:16:52:A6:06:4C:20:04:7E:C9
Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
Certificate issuer: /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Certificate serial: 019A7149B085152C6C3315FBEDE3CBBC6DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 05:00:45 +0000
Manifest this update: Tue 11 Nov 2025 05:00:45 +0000
Manifest next update: Wed 12 Nov 2025 05:00:45 +0000
Files and hashes: 1: 3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl (hash: P/nW28oRaQJ7tyCBkBAUpNKn5QG+hdmrqG488RoQvgo=)
2: BgyYhjdlX54FNLBOgRi8uw75ivU.roa (hash: zzLTHJ8bOyhzXoEVwavpxvrPBboJmkVXfTzNirwZrsg=)
3: Hpy8N_-5qbg4r5UvdSXzVzdiWx4.roa (hash: 2QUmH1Q4U8nkWLgbGItfFRsuYPfdbrlhi1xdBt64+Zw=)
4: ImxZW674_5fXdmlZfvGnuAIzuOY.roa (hash: 9/kVoJM9dkwpP3u46CBs9jfgtCbtD6Yrvc+TFbbmgkw=)
5: h81MQCGUH4YWhsU7_noNE9t-6Ag.roa (hash: B55fQoBAEqhRk0fmuOYVFDE0A21yTHmBQBoOyLnBQrM=)
6: zOCoutq8Gy1Lt87HTs8qxIiEU1c.roa (hash: ArwgLJQHWcGLaYYEnlnuKPp35zrbwjR5bDSmhIZ/pcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b0:85:15:2c:6c:33:15:fb:ed:e3:cb:bc:6d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Validity
Not Before: Nov 11 05:00:45 2025 GMT
Not After : Nov 12 05:00:45 2025 GMT
Subject: CN=479d98cceef174177c709b1652a6064c20047ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:4d:e5:af:e9:04:5c:14:0a:81:53:9d:a3:
0a:12:2d:f7:01:34:80:15:75:df:5c:e8:0f:45:c6:
0d:1b:4a:09:c1:87:52:80:e6:44:f0:f2:93:31:21:
49:01:2b:6e:6d:19:55:4a:da:14:1c:20:31:28:18:
91:37:52:df:52:72:fb:2d:bf:b1:7d:d7:99:e1:01:
a8:52:d1:6b:53:19:68:75:a8:5a:5a:78:b5:6e:13:
f7:19:cf:14:6e:34:8b:ea:fb:12:fe:a6:de:93:2c:
dd:88:54:ac:e3:00:cf:07:ce:26:2b:e8:c1:33:d6:
ee:c5:f9:8d:ff:04:33:51:0f:19:78:6e:72:23:92:
cf:b2:43:4f:dd:65:98:8f:14:81:50:16:b7:18:cb:
65:3b:ac:0f:ac:bb:92:03:ab:ea:28:e9:58:8d:b4:
4e:d1:82:7e:76:6d:a3:07:ca:c1:fb:cd:87:30:02:
ba:88:01:24:08:fa:22:94:aa:5f:a2:73:57:80:c9:
de:66:fa:01:0c:48:cb:3a:aa:ba:d1:d8:e9:65:55:
d7:c3:a7:94:ce:6c:2e:9e:71:0f:65:c5:08:ba:81:
b8:ab:8c:56:ee:68:df:24:87:f9:a1:45:10:10:2b:
01:d7:c4:bb:09:78:26:29:8f:1c:ec:07:f8:38:5b:
ab:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9D:98:CC:EE:F1:74:17:7C:70:9B:16:52:A6:06:4C:20:04:7E:C9
X509v3 Authority Key Identifier:
keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:45:4e:9f:bd:1a:a0:b3:2d:3b:25:f6:12:45:e9:da:b7:33:
dc:4a:f1:bf:62:91:1a:98:59:a0:e2:dd:b1:ec:d7:74:d0:ab:
dd:46:15:60:0d:29:ac:7e:08:3c:89:e1:8b:55:94:fa:cf:bc:
bd:4b:3c:e7:a3:cd:1a:bc:5a:e6:fd:70:27:bd:4b:3e:60:99:
d8:c6:3b:24:ee:ea:bc:e5:ce:d6:8a:86:85:89:ff:91:31:cb:
33:db:b5:62:82:ae:37:80:d4:7f:d9:42:0b:f6:01:95:8d:cc:
c5:30:35:00:0a:01:fd:fe:a6:d4:05:1e:53:49:08:05:03:13:
d1:b7:ac:10:8e:0a:b4:24:fc:68:df:89:f2:6d:b0:20:61:05:
d3:86:ef:a0:d9:d2:42:d7:c1:5f:82:86:ae:a1:bc:d0:47:21:
64:a0:af:eb:f5:6f:7b:ca:bb:92:c5:d9:4b:35:92:c3:62:91:
c4:5a:8f:a0:35:f0:99:70:eb:2b:28:6d:08:4e:ad:e9:78:4e:
9e:dd:6e:95:68:e1:c5:33:20:e3:9d:2f:7a:a1:07:9a:36:5e:
9c:46:ed:63:16:71:1c:c8:7b:66:58:2a:1a:2e:4c:06:fb:87:
82:9f:ab:91:14:95:9c:c2:75:2b:87:83:78:a3:fa:84:15:64:
cb:39:4c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:45 2025 by rpki-client