Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
File: 3xT-bNqQya_oB1kNLVA3SnaijhM.mft (raw, json)
Hash identifier: kt5v0mTif1zS+80JNkNL4iVkpYJMyACf0HGOG32aZgU=
Subject key identifier: 51:7D:7E:3F:03:66:6A:85:D8:25:26:09:C6:5A:F6:77:03:B5:FC:2F
Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Certificate serial: 019A7112CDCFEEBE85F6727AC8BE6B5E42EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
Manifest number: 1318
Signing time: Tue 11 Nov 2025 04:00:48 +0000
Manifest this update: Tue 11 Nov 2025 04:00:48 +0000
Manifest next update: Wed 12 Nov 2025 04:00:48 +0000
Files and hashes: 1: 3xT-bNqQya_oB1kNLVA3SnaijhM.crl (hash: A9uE2ZLNUslVcjnj3ccR0W5HV9g/rqZulr47/5x7XvM=)
2: Swt5oFMQEQM3RtDOFxZCp2VObOM.roa (hash: d7VQjqZCXdGvodDw1gYlaDWjc+rRxAbFcC4KKSSYHOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:cd:cf:ee:be:85:f6:72:7a:c8:be:6b:5e:42:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Validity
Not Before: Nov 11 04:00:48 2025 GMT
Not After : Nov 12 04:00:48 2025 GMT
Subject: CN=517d7e3f03666a85d8252609c65af67703b5fc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:67:5a:4d:6f:d6:d1:bc:17:76:f1:ca:e7:
b7:fe:43:ef:9a:78:17:ae:61:45:eb:d0:f3:e7:0d:
5a:6b:d4:4e:f6:42:4a:9c:49:9f:a9:66:f3:16:11:
43:62:bb:84:a1:66:e4:f9:33:75:e5:ba:c9:9f:e5:
fe:ee:32:64:a0:1b:a8:75:b9:5b:be:29:d1:86:90:
ac:a7:07:08:77:48:ee:c4:11:32:83:71:36:f1:e8:
5e:6a:70:8d:7b:1e:9b:61:88:ca:4d:c5:bc:b2:f7:
18:81:af:a4:5a:ba:cf:a1:a2:2b:fe:05:7f:88:ec:
f2:4c:36:e5:0e:4e:b4:4c:86:4f:66:4c:ff:b2:9d:
1c:9a:d4:5c:2b:8f:25:3c:5a:2a:2b:b2:8f:e6:43:
a6:b1:e7:73:9a:0a:04:39:70:a0:21:44:77:b4:74:
47:75:56:c6:16:42:1c:e4:eb:40:c8:aa:28:90:51:
02:b5:77:02:73:ff:16:5d:67:06:56:98:cf:0f:c9:
0e:17:86:ae:93:2d:df:1f:3b:dc:41:0a:d0:23:62:
0d:1a:10:9b:91:bf:86:a8:44:c9:82:88:33:9d:c0:
81:77:c1:47:a0:e7:30:9f:bc:b8:1f:31:b8:2b:7e:
b8:1a:6f:09:a3:ae:cd:0e:d3:74:3f:34:e2:8e:71:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7D:7E:3F:03:66:6A:85:D8:25:26:09:C6:5A:F6:77:03:B5:FC:2F
X509v3 Authority Key Identifier:
keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d2:6d:0d:09:63:6c:4b:dc:64:ca:02:10:0b:93:a4:87:96:
fe:cb:af:10:6e:36:62:ad:eb:1e:2c:48:a1:31:e0:d1:9d:cf:
e5:9f:a7:82:34:d0:f2:8a:e3:e0:ef:54:73:4d:86:09:4d:e1:
8f:ae:a9:25:4d:68:f9:a3:46:fa:86:32:03:fc:3b:5e:2c:be:
0a:14:33:23:4d:f1:20:68:2b:2e:7a:8c:34:e0:4e:55:33:03:
ed:a8:e0:77:83:30:fc:9f:ab:17:c0:a4:5e:17:ff:97:a8:54:
38:af:50:ea:6f:72:91:f1:ba:25:a1:fd:4c:f7:18:29:1f:81:
57:18:24:c7:55:80:24:1d:ad:35:9c:16:68:29:6e:e6:44:d3:
cb:81:d9:1d:7d:df:db:a9:37:6b:c6:29:71:d3:15:6f:f2:8a:
f5:04:98:28:c3:f6:66:3e:d6:ad:65:86:55:1f:0a:38:0d:cb:
04:3c:51:17:1a:3a:d5:f6:05:41:b6:c5:fe:d8:81:57:b0:50:
67:b4:54:f1:0e:ac:95:2f:6d:cf:f0:43:60:1f:f8:88:bf:c5:
7b:5c:06:29:d2:54:3a:8d:9e:04:09:94:ad:b5:68:54:d0:74:
d4:01:d0:93:29:92:74:2a:b9:8f:4e:c2:d2:04:57:74:07:a4:
6b:cc:a8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:31 2025 by rpki-client