Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
File: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft (raw, json)
Hash identifier: W9tWJR8Ar/ydHIKjpxIGuJblcV8yfMD2DTz46yEXC18=
Subject key identifier: 9F:81:26:BA:5C:67:3B:66:FF:69:56:33:8C:19:83:DC:88:4C:CE:E4
Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
Certificate issuer: /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Certificate serial: 019A71EECCC722F533BF724A5FE1C1BA8450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
Manifest number: 0A3D
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl (hash: EiddZRBzkwmUBhhLgTc136LNAIMhJWD1BIKSJOoVcy4=)
2: vrZbrmq-YLZHy_jTQFADJGPxi-I.roa (hash: SoRxaIEIcm9lF/KB/PtX621zexUgH5AtUpObYQIQZW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:cc:c7:22:f5:33:bf:72:4a:5f:e1:c1:ba:84:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=9f8126ba5c673b66ff6956338c1983dc884ccee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4c:ef:e2:fa:3d:fd:8f:d9:e7:f0:07:0d:44:
c9:4b:b4:ba:29:6a:1b:f8:00:a5:dc:0c:9f:87:e7:
ee:c7:d8:b2:55:4b:eb:0c:c7:a8:a2:f2:c4:b2:7b:
86:07:2b:8c:f4:77:24:93:20:38:60:52:72:1a:8a:
54:c6:c8:54:b2:7b:fd:56:f7:b8:04:17:1e:f5:c7:
4b:93:5d:f6:33:a4:5a:e0:11:88:4c:59:98:18:98:
f4:8a:15:6f:66:27:8c:b6:b3:b8:fd:bd:12:60:a6:
6f:5d:3d:64:25:0a:fa:e7:88:f0:78:9b:5a:df:54:
6e:06:20:c0:96:68:88:af:0b:00:f8:9e:6a:f5:e0:
81:66:9c:d7:c2:b8:15:21:58:3c:1d:cc:0c:3f:e9:
03:7e:42:60:7a:aa:a2:13:ea:d0:38:90:65:43:9f:
33:ba:cb:30:25:f8:08:c4:eb:17:bc:5b:de:a6:c9:
35:70:e0:1f:c7:14:0b:eb:31:08:b7:71:f9:3a:a7:
6a:da:7c:10:49:5c:ba:1b:c4:e9:a1:46:eb:a1:6b:
e9:ee:a4:bd:39:1a:ee:ee:18:a4:c0:8a:63:bb:3b:
f0:95:25:41:40:54:ee:66:8d:ed:ca:0d:7c:6d:8c:
53:8b:de:86:54:48:83:56:f9:02:54:c5:03:90:59:
20:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:81:26:BA:5C:67:3B:66:FF:69:56:33:8C:19:83:DC:88:4C:CE:E4
X509v3 Authority Key Identifier:
keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3f:5e:4b:51:7d:31:70:5d:67:b7:cd:ae:b2:24:62:d7:78:
82:7b:8a:ff:89:7c:10:6f:9b:89:0d:21:3b:b6:7b:a6:64:92:
e0:aa:17:29:ff:9c:6c:bf:1a:9b:fe:64:1d:e5:a9:63:f6:05:
10:25:af:f1:a2:ee:be:7c:f0:51:39:e1:6a:6c:0d:8a:be:15:
5b:58:ef:bf:cf:ab:d0:30:86:9d:06:6d:de:ef:8c:e6:f4:97:
c1:2a:c3:88:22:e8:64:f0:28:eb:62:b7:96:61:c8:80:8f:d3:
be:d5:68:88:5d:15:05:d2:5a:2f:93:7d:52:b2:62:4b:7c:62:
bb:61:8e:a0:3f:2c:6d:3c:d2:dd:5e:9c:83:52:d5:01:4f:3d:
9e:78:6d:cc:81:48:f2:80:6f:9d:4a:35:70:68:e6:89:9c:9a:
54:ca:5f:d1:83:2a:68:fa:c6:0b:37:57:2d:d8:67:22:99:52:
e5:c4:65:fc:84:b1:8a:96:73:68:04:71:83:fe:55:e8:11:f0:
53:a5:0f:b4:dd:9f:6b:7f:32:fc:32:56:c0:17:ff:9b:6d:f7:
f8:32:b3:25:e3:9b:84:ba:2d:0d:22:6a:81:a8:68:3e:53:c4:
cc:61:dd:29:dd:85:01:07:cb:5b:b3:c0:0d:df:98:0b:66:7d:
b2:91:bc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:10 2025 by rpki-client