Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
File: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json)
Hash identifier: WdpX89zY8TZPp7m3T9Ru/IQmpWh7AnCxeFXtckQIGok=
Subject key identifier: 93:0C:8C:DB:5A:DC:6C:A3:67:28:04:1A:BA:54:7E:16:79:A0:D4:A7
Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
Certificate issuer: /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Certificate serial: 019A71EE987B651BC08D9995AD50B50B9DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:00:53 +0000
Manifest this update: Tue 11 Nov 2025 08:00:53 +0000
Manifest next update: Wed 12 Nov 2025 08:00:53 +0000
Files and hashes: 1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: sWV+00VB/eFLVqMZAfzQbdtb9zLSfSC/FvJ6GkfJ9P4=)
2: b5tCOGfZlXjj3Rp4LI2wyRIwTZc.roa (hash: Ux81ccFaPxD7MPa+kjPcqatGWLTvR5GEGbxi2D0f0BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:98:7b:65:1b:c0:8d:99:95:ad:50:b5:0b:9d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Validity
Not Before: Nov 11 08:00:53 2025 GMT
Not After : Nov 12 08:00:53 2025 GMT
Subject: CN=930c8cdb5adc6ca36728041aba547e1679a0d4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:87:58:67:94:83:08:9d:a0:bb:07:24:c5:de:
02:b9:44:ce:8b:af:83:d9:d2:1b:46:30:67:e5:e6:
e8:ff:10:3e:30:fa:92:6a:65:8d:78:97:a1:0c:92:
09:eb:c6:8b:8a:35:50:ed:df:d9:41:32:61:f2:32:
fc:1d:f1:0a:f8:10:a1:06:7f:e1:68:ea:68:88:b3:
8f:c2:31:bf:b7:3c:50:0c:dc:ba:6f:28:e7:eb:f5:
ac:de:64:8d:50:74:5d:c2:3a:fb:d1:ba:84:0c:79:
84:ed:f2:2b:ef:28:2c:29:1b:2a:d8:9f:9f:1c:f6:
66:ef:92:39:c7:bf:da:70:e0:5d:ce:4a:c0:c9:f9:
83:fd:c3:05:55:84:6c:c7:4c:43:f0:74:38:17:45:
b1:d4:c7:f7:fa:57:70:6b:db:4f:1b:c8:37:23:70:
67:8e:9d:cb:93:39:60:e0:c5:f6:eb:6c:aa:39:e3:
7c:b7:88:7e:08:d3:50:1f:59:c9:28:11:78:3e:be:
3e:ff:61:f4:f4:45:a9:4a:08:26:c9:30:43:59:a7:
a4:ce:71:56:c3:95:02:f2:af:bb:75:e9:95:61:da:
fb:93:01:a0:50:3b:27:23:67:12:1b:ef:ca:c7:41:
36:3b:8b:b7:87:d2:a2:39:a2:d4:ab:7c:96:40:4d:
95:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0C:8C:DB:5A:DC:6C:A3:67:28:04:1A:BA:54:7E:16:79:A0:D4:A7
X509v3 Authority Key Identifier:
keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:96:b6:c6:0d:67:88:69:a6:13:98:93:07:af:63:07:62:b9:
53:4a:d6:ff:f1:15:5b:32:3f:26:52:19:d6:27:b5:f8:7c:60:
de:e5:71:49:b0:ad:62:86:a7:b7:4f:25:c0:a9:39:33:bc:1b:
44:3e:45:3c:d0:fb:eb:fc:27:e5:bc:9c:b2:35:9f:a3:b3:0a:
2d:ad:9d:6d:42:ff:b4:95:a6:b2:e7:c1:3a:45:0f:85:88:3c:
df:dd:38:15:c8:7e:83:7f:61:5a:6a:3d:45:72:8b:c8:ad:38:
83:7b:e0:7c:2b:36:eb:93:71:b9:10:ae:66:aa:f8:b2:f3:49:
7b:06:a0:ff:0f:52:cc:75:9a:78:e1:a8:dd:48:99:c9:bd:78:
61:3d:aa:c4:3a:85:b9:f4:5c:dd:fa:db:c7:ee:8c:e9:87:2f:
ea:25:b9:df:07:84:e4:fc:e4:c9:c1:e0:7a:9c:2f:69:89:b1:
1e:fd:1e:2d:b1:8c:5b:24:32:8f:41:41:08:d4:cd:db:d5:32:
48:7b:32:bd:cb:0e:95:dd:b7:01:9e:12:52:19:54:69:c6:12:
2d:0c:a9:4f:93:4a:95:57:f9:27:f8:c7:64:54:bf:a9:9b:2c:
e3:7a:56:ce:5d:26:21:cb:40:7d:2b:e2:ad:ba:ad:a8:e1:47:
b8:86:82:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:25 2025 by rpki-client