Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: hpbySTTdZ0s4EfpFEgd853a7kNkix5DZTEra6Q5Ly+I=
Subject key identifier: F7:67:7D:27:2A:35:A7:BB:E3:B9:4F:A5:4E:B4:1B:85:D6:66:F8:D3
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 019A7226424FB65BC3AF426512F7D75A7EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 10D3
Signing time: Tue 11 Nov 2025 09:01:41 +0000
Manifest this update: Tue 11 Nov 2025 09:01:41 +0000
Manifest next update: Wed 12 Nov 2025 09:01:41 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: /X4XXT15dXGrMcNBgeiNTANkYuozCtzPS08thu3Agr8=)
2: c9o5omZ6L0iy-4hOihQzK8OPns4.roa (hash: 1kJZAp6d0yNMzeCujPn+gVtlVbLTFpBiKQFw2wsKEIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:42:4f:b6:5b:c3:af:42:65:12:f7:d7:5a:7e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Nov 11 09:01:41 2025 GMT
Not After : Nov 12 09:01:41 2025 GMT
Subject: CN=f7677d272a35a7bbe3b94fa54eb41b85d666f8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:b9:03:12:e2:35:fb:e4:46:d8:04:f4:08:
9d:d0:5a:bf:7b:7e:7f:41:94:2b:f9:de:2c:fd:1d:
91:7c:bf:49:97:82:4d:f8:89:44:c6:b5:5d:18:71:
9b:1e:43:ab:b6:7e:53:45:1f:d3:df:8d:81:e2:7d:
21:b3:ee:c7:15:d7:cd:3e:81:e5:33:4e:78:60:a6:
af:d5:35:8a:de:8f:94:2a:40:de:96:18:d7:4a:df:
a5:d3:78:26:3a:fa:07:b8:01:08:3d:b6:5a:fb:61:
a3:4e:ac:c1:cd:a8:cd:c0:96:e9:07:8b:36:b5:80:
63:0a:0f:8f:b3:4a:b6:f2:cb:1a:8e:04:1f:cb:c8:
c3:45:fc:b3:d0:14:1a:3a:e0:ac:8f:35:fc:1c:1e:
0a:43:84:d5:9d:27:e9:1e:bc:49:48:96:74:3c:b0:
dd:09:1d:f5:33:ac:d7:74:b0:a1:70:08:21:8e:3e:
bc:db:07:85:b9:1f:ac:08:86:a7:ad:87:ad:d7:8d:
b3:e7:f9:21:9d:72:17:1e:00:12:8e:5c:0b:dc:9e:
77:25:82:c6:40:3b:6f:37:02:89:ba:0c:01:d6:72:
31:c3:05:be:e9:6f:b0:12:bc:f5:86:62:25:e1:2e:
e1:35:31:86:3a:a8:2d:98:68:43:06:6d:8c:14:5c:
40:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:67:7D:27:2A:35:A7:BB:E3:B9:4F:A5:4E:B4:1B:85:D6:66:F8:D3
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:13:96:8f:60:00:9a:7b:b8:99:ce:1d:31:c9:b3:67:c1:a5:
56:60:19:f9:5b:c1:22:95:af:71:7a:a4:47:d5:53:a7:c5:d3:
9d:26:11:14:4e:b8:62:1e:b3:c4:1a:97:94:5f:7f:90:85:a1:
e4:53:23:ed:01:31:5e:cd:28:06:bc:0f:88:e7:73:2d:db:0e:
64:39:7e:ba:a6:5f:5c:7f:f7:95:2f:52:81:ef:fb:39:ae:2f:
95:b8:b3:1a:95:6b:62:62:c2:7d:d7:55:07:d6:cb:0e:da:89:
13:33:34:7c:44:55:c7:a6:7a:83:bb:65:a1:e5:00:c0:f1:98:
52:83:da:03:ef:91:b6:0b:86:62:0c:8b:94:3d:86:4a:3c:c1:
6d:11:2f:ec:ac:9d:4a:c2:11:96:49:a0:4e:9d:8a:89:fa:1d:
ee:09:eb:de:4a:30:17:2a:06:4a:ea:df:c6:4e:88:1e:b8:f3:
49:6b:91:e2:31:73:27:55:59:db:b8:35:57:d5:73:63:6a:b8:
02:cc:7c:18:df:dc:41:85:e4:be:c0:d9:e4:ea:e8:1c:a6:36:
01:a1:9a:06:13:9b:07:66:69:31:66:71:09:0b:46:c3:00:5d:
60:87:92:8b:ef:97:ba:60:a0:12:e1:fc:ed:ba:6b:2c:b1:96:
61:f2:5f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:38:26 2025 by rpki-client