Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
File: 3BsrDhzng-t6Ljk__dEoxqnAIjk.mft (raw, json)
Hash identifier: P3/IHGuFAdKw1XOD4JB+dCUJ0R+QpSuDu8shJAv+EbQ=
Subject key identifier: E3:51:8C:00:3D:27:CE:02:B3:26:CC:72:81:C5:E7:D2:8E:F1:42:3C
Authority key identifier: DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
Certificate issuer: /CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Certificate serial: 019A72CA4438FE819043B4783A81F9B67E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
Manifest number: 0478
Signing time: Tue 11 Nov 2025 12:00:49 +0000
Manifest this update: Tue 11 Nov 2025 12:00:49 +0000
Manifest next update: Wed 12 Nov 2025 12:00:49 +0000
Files and hashes: 1: 3BsrDhzng-t6Ljk__dEoxqnAIjk.crl (hash: Drw8uYmsD1T4sj8WnvNUpeLYFuDOJFzcAHn8f6++Q4Q=)
2: b4tFKCMFhyngaw1LlIGrAjikYiE.roa (hash: zlYQxGhdtm2zm501rwjVL8YUyfYWJBRUvSyMolHaDtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:44:38:fe:81:90:43:b4:78:3a:81:f9:b6:7e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Validity
Not Before: Nov 11 12:00:49 2025 GMT
Not After : Nov 12 12:00:49 2025 GMT
Subject: CN=e3518c003d27ce02b326cc7281c5e7d28ef1423c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:fe:d7:9e:a9:c2:c8:03:2b:0e:1d:9b:42:
4f:b2:ad:f0:ff:c4:95:ac:21:4b:78:da:e0:31:63:
30:ef:9f:99:f8:d8:4e:25:57:dc:5c:d1:31:09:fd:
da:24:9d:e7:ba:48:fa:85:12:ed:cf:9f:34:29:e8:
11:e8:48:11:25:0e:e5:98:98:33:86:cc:df:88:63:
ab:95:b1:42:c4:54:fa:72:68:ba:37:f0:87:f9:70:
e0:49:d1:70:0a:c3:77:76:14:47:f8:f3:7a:1f:12:
65:32:d9:02:b9:c0:0f:13:a9:2d:08:df:52:b1:4b:
5a:fe:ea:eb:b3:40:08:40:2d:71:51:ce:60:c5:c2:
34:81:3f:cd:37:3e:d2:f6:5c:43:72:27:f5:e7:f8:
0b:44:94:de:0f:75:cc:d0:21:a6:b4:f8:8a:c1:56:
0e:2b:be:64:a2:7d:60:76:04:aa:31:32:24:b0:16:
90:63:52:21:08:19:6a:40:07:a6:89:f6:62:ad:e3:
61:bd:cf:82:4a:27:2f:38:15:67:2e:75:cc:85:70:
e6:8e:6f:65:52:1f:4c:9a:1d:c5:5b:ed:e9:c9:fe:
34:de:e1:35:c8:11:0c:42:50:d5:bf:f2:70:11:bf:
22:32:78:28:8b:1e:e3:9f:ed:b9:d8:31:53:ab:b2:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:51:8C:00:3D:27:CE:02:B3:26:CC:72:81:C5:E7:D2:8E:F1:42:3C
X509v3 Authority Key Identifier:
keyid:DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:02:e8:54:fa:bc:1c:e8:06:47:ed:90:f9:44:ca:f5:5d:29:
2c:12:00:11:38:60:fb:ac:a3:b0:d7:a8:fe:67:9c:71:fe:2a:
d1:8b:a9:bf:51:4e:0b:2d:21:67:9c:93:a7:3a:a3:6d:38:7b:
ca:77:61:57:9a:90:a5:0b:b4:81:87:85:d5:eb:1c:21:90:aa:
84:f8:3e:0a:42:8e:8e:8b:d9:18:8f:e9:b3:d0:27:30:ac:36:
73:fe:ec:ca:81:7e:d6:20:ad:2d:30:f3:a8:16:e3:b0:1d:bc:
96:44:95:6c:35:4b:3c:9b:58:3c:eb:36:f7:4d:7e:bd:d9:d4:
44:6a:c9:ea:00:0b:bd:6b:69:a0:71:fd:3a:31:b1:87:e4:95:
ce:74:55:39:64:f7:42:13:eb:d9:fb:6a:88:dd:34:17:c2:03:
e4:ac:f6:e1:7a:51:4f:cd:a8:14:34:7f:b7:93:3e:1b:c2:41:
68:6a:14:1b:36:04:84:e6:fe:ba:24:3f:15:7b:ae:18:06:04:
b7:98:f9:d6:0b:57:d8:4c:02:fe:28:7a:55:f2:ee:e9:bc:51:
ee:33:1d:d6:2f:d5:e8:16:29:97:82:27:db:74:85:74:81:83:
80:0a:38:84:34:f9:e0:58:34:9a:f9:f5:8f:07:f4:da:a0:18:
6c:45:73:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:03 2025 by rpki-client