Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
File: 3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json)
Hash identifier: HiFeGdSc07BeLw6Q6mwSadFB5QRXNEazjz+AJ5nTYfQ=
Subject key identifier: 03:9E:1C:7B:A5:94:2D:14:89:30:F5:76:90:31:8D:1F:99:CC:8A:58
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial: 019A72CAB30390DAD1FDA07C540C6B868114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 12:01:17 +0000
Manifest this update: Tue 11 Nov 2025 12:01:17 +0000
Manifest next update: Wed 12 Nov 2025 12:01:17 +0000
Files and hashes: 1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: 1vDmrBex5n38hkUWvKuJ4q2mS6qzu3u8oLWmAvnuZ0s=)
2: Q6UDfcr6-wjzrSR02hz91bMMgCQ.roa (hash: Ri+ho1nwscaoaR+lGA/lmNvU5bMAzGg4wnbtbjS6IAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:b3:03:90:da:d1:fd:a0:7c:54:0c:6b:86:81:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Validity
Not Before: Nov 11 12:01:17 2025 GMT
Not After : Nov 12 12:01:17 2025 GMT
Subject: CN=039e1c7ba5942d148930f57690318d1f99cc8a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:43:77:e7:0c:13:91:ef:25:57:0a:be:b1:1d:
2f:85:8b:d6:f0:5d:d3:53:77:f2:45:59:a3:82:f5:
f9:68:cb:b1:e3:92:56:a8:1d:14:d1:4f:f8:c1:c4:
4e:51:2c:ba:9c:93:8d:fe:b8:a0:1e:d5:c1:d7:f5:
21:37:99:25:62:ed:d4:ef:c3:8c:88:eb:89:08:f7:
88:8f:a8:37:8b:3b:19:41:b8:26:6a:b8:09:42:8d:
a9:0c:ba:8a:17:ca:70:ef:8b:30:d1:6d:77:b5:b1:
ea:f6:bc:07:56:95:75:05:0f:21:01:7e:9a:2a:11:
83:35:64:ee:8b:60:09:31:9e:bf:b5:7e:30:e1:c4:
4e:76:84:e2:4e:ff:2f:a4:c6:68:74:b5:00:ee:01:
57:e7:da:02:e0:22:85:af:35:ed:d2:0a:0d:29:a5:
c3:7d:b3:8c:75:74:35:ac:db:df:84:44:67:75:c8:
86:66:12:bb:41:45:9f:1e:d4:4e:50:34:80:ff:90:
d0:15:be:29:c7:78:17:72:a1:8a:40:e9:4a:a1:08:
60:5d:a7:49:c3:30:60:2b:17:98:e4:47:a7:c3:2a:
88:a5:04:e5:dd:ce:a9:63:d6:83:0c:f9:22:0f:83:
21:00:39:41:38:4b:1b:b9:0e:22:6f:c5:cd:e9:bc:
4e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9E:1C:7B:A5:94:2D:14:89:30:F5:76:90:31:8D:1F:99:CC:8A:58
X509v3 Authority Key Identifier:
keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0c:1a:fa:c4:78:f0:58:bd:26:d4:fd:b5:09:46:d5:93:fc:
f0:1c:4e:c0:5f:7d:ba:1e:b6:db:97:f7:ab:1f:6d:0b:e1:7c:
1c:e4:eb:93:c8:28:f7:70:5c:25:08:4a:58:00:94:e4:87:09:
ab:47:9f:f9:cb:33:09:b4:38:ce:03:c6:60:5b:ee:03:6b:88:
85:44:3c:87:52:f2:42:6d:44:f9:e0:a9:75:b2:56:92:10:a0:
6c:03:2a:bb:0a:6b:c8:5b:b6:b7:51:c4:d3:e3:d7:48:e3:0e:
78:3c:57:1d:76:7a:c1:ca:16:cb:f4:05:d4:94:ef:1a:b6:27:
cc:3b:58:30:24:0c:db:3d:3f:e3:1d:a5:2a:d9:c9:b7:ab:d6:
fb:1b:df:73:3f:4b:5f:7c:20:51:65:b3:0e:6a:30:04:d4:77:
81:c8:81:6c:16:f6:ca:d3:e2:0f:42:90:0c:4e:cf:a4:c6:46:
dd:af:4b:bf:65:21:44:28:5d:63:05:96:0b:e9:a6:08:dd:61:
5c:3a:29:da:3b:62:9e:c0:b6:db:29:09:91:50:0c:75:0d:76:
08:b0:9c:11:e0:ac:34:ad:bd:df:69:85:fe:7b:b9:81:0f:29:
34:82:7d:13:9f:ca:01:24:2a:48:36:37:5b:52:90:8b:49:7a:
a2:a6:fa:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:39 2025 by rpki-client