Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
File: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft (raw, json)
Hash identifier: lKsWEajHJn8u4ZIui2uTxVg9vd0ky7BQVtisuPVWHxk=
Subject key identifier: CF:D1:6A:C2:D7:02:AC:BB:86:10:A6:28:1B:B2:39:68:6B:E2:42:EF
Authority key identifier: DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
Certificate issuer: /CN=de23f18c576d6fa609133533c0d0e38d7732c652
Certificate serial: 019A71EE5F2138FF76D536681E60AA6229D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
Manifest number: 03C7
Signing time: Tue 11 Nov 2025 08:00:38 +0000
Manifest this update: Tue 11 Nov 2025 08:00:38 +0000
Manifest next update: Wed 12 Nov 2025 08:00:38 +0000
Files and hashes: 1: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl (hash: 6FF7amDZHkNrKxs2im4xajhuwzR8dLPvdTZyPXGVaOA=)
2: _uzKcHUnRqCblBfJ7LQOWwPDs9E.roa (hash: QtEg8CgvNKFjK8sDnq+KQm/gvMScP6wDUlBc5heZNlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:5f:21:38:ff:76:d5:36:68:1e:60:aa:62:29:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de23f18c576d6fa609133533c0d0e38d7732c652
Validity
Not Before: Nov 11 08:00:38 2025 GMT
Not After : Nov 12 08:00:38 2025 GMT
Subject: CN=cfd16ac2d702acbb8610a6281bb239686be242ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:85:ea:bd:76:cc:11:4b:d4:17:c8:ac:ef:
b9:4a:c7:c5:6b:81:c1:f2:74:ab:af:cf:a2:e2:73:
1d:66:be:21:dd:68:72:8f:10:62:8e:13:6e:ca:f7:
88:d3:27:16:a6:3d:56:be:f0:b1:44:0d:48:2b:fd:
67:6d:40:d7:25:75:3a:be:39:1d:d0:d4:7b:bd:d2:
f0:1d:70:d7:a9:6e:a4:e7:25:cb:e5:fb:cf:de:ff:
20:64:49:3f:41:2b:71:0f:23:25:e5:8a:9f:21:95:
e8:f6:9b:2f:77:f2:3e:91:b6:dc:78:93:cc:7f:6a:
6d:12:d2:a9:d6:ab:50:73:7a:f4:0b:c4:74:a5:d7:
fc:4c:95:40:00:ac:21:b7:68:5c:bb:1f:04:3c:94:
3b:19:fa:22:3f:6e:57:6f:80:cf:30:9a:5b:de:51:
76:ba:a6:57:33:58:2b:b5:bf:44:96:ea:1d:4c:49:
e6:dc:9c:4f:94:14:ea:ae:15:b7:8b:99:31:27:1d:
e1:57:e5:40:05:63:8c:38:88:2d:3f:a4:fe:e3:f2:
ec:7e:c8:31:74:8c:e3:e3:b8:ef:bb:fa:bc:ae:13:
4a:2c:22:e6:f2:d6:48:b1:84:b9:cf:fa:8b:86:34:
e1:38:94:fa:2d:5e:97:38:ac:39:eb:0a:d5:48:b3:
1e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D1:6A:C2:D7:02:AC:BB:86:10:A6:28:1B:B2:39:68:6B:E2:42:EF
X509v3 Authority Key Identifier:
keyid:DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:20:65:e4:bf:8b:0d:e2:e3:9b:9e:d6:68:ad:52:d6:c2:5d:
2e:c4:b2:71:7e:97:48:5f:11:57:97:d0:9d:82:f0:35:f0:04:
c4:17:ca:ff:d0:9a:9e:ed:d8:3e:fb:6b:f5:2f:61:e2:bc:ce:
3c:d5:90:02:e7:31:1d:59:b1:09:61:56:84:d0:d8:74:b8:b7:
89:b7:50:08:bb:93:26:56:7f:7a:be:a6:0e:25:fe:1d:18:1f:
20:08:2d:74:7d:59:63:09:f9:35:ec:95:57:4e:d5:a1:fa:ab:
88:9d:5e:d9:8d:ba:7f:bc:e3:6b:c1:fe:e1:b3:70:e1:45:1d:
dc:79:0b:09:c7:1b:84:14:0a:3d:e6:4e:79:63:59:24:bb:1a:
a4:66:0f:26:88:95:44:8a:d5:33:24:5c:7f:2a:4b:91:3c:3c:
90:ef:cf:86:76:0a:ed:ac:0f:db:84:8d:02:28:65:2f:a8:a6:
83:11:38:08:b1:a3:58:22:9e:9a:2e:25:c3:2e:97:2c:51:89:
5a:37:9b:ed:af:83:47:25:a5:9d:fa:75:c5:b7:f6:9f:ed:dd:
98:93:55:3f:f8:3e:d5:56:39:8e:f0:fc:f6:eb:5f:11:f7:9b:
70:77:3c:4b:55:70:9f:4e:b0:c0:8b:37:12:99:44:c8:ef:b4:
8e:73:9c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:42 2025 by rpki-client