Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
File: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json)
Hash identifier: C8FaGhSga1HxhedFcJnSJV0VC0mQ7CCtJdfXm5bSpb4=
Subject key identifier: C9:79:D4:F4:33:D2:18:51:55:34:CE:FA:E9:4D:65:D2:C6:F6:B5:44
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Certificate issuer: /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial: 019A71B851D32D4DE19666EDE202B833DB0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
Manifest number: 13F5
Signing time: Tue 11 Nov 2025 07:01:36 +0000
Manifest this update: Tue 11 Nov 2025 07:01:36 +0000
Manifest next update: Wed 12 Nov 2025 07:01:36 +0000
Files and hashes: 1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: 6Jd+0pr+ZwSXjijjED4LfiyO+xKZrQGJGj9a37xSTec=)
2: K668RnN8R9Zt_BhcvITxrQRhBNs.roa (hash: 8wo0Wz+L+phQUblwdU8c4kneYF4uQyTcefZ7CpD7SsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:51:d3:2d:4d:e1:96:66:ed:e2:02:b8:33:db:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
Validity
Not Before: Nov 11 07:01:36 2025 GMT
Not After : Nov 12 07:01:36 2025 GMT
Subject: CN=c979d4f433d218515534cefae94d65d2c6f6b544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:f4:9d:e8:d7:58:2d:50:ac:5f:0e:c0:4e:
68:a0:4c:7d:9c:94:cd:75:3b:a5:30:bf:42:f3:1e:
64:5a:ec:a0:ff:f5:11:2a:b2:28:4c:43:25:51:9f:
6a:d4:cf:36:07:82:7d:5e:63:cf:27:5f:30:68:68:
e9:00:1d:20:b9:be:07:fa:8a:c9:f0:6d:18:75:6f:
d9:78:7c:4e:df:0a:21:8a:f6:1e:96:ba:95:66:a2:
10:94:78:4b:62:7c:8d:a9:ac:d4:bd:f0:0d:4f:6b:
ce:29:6f:1d:04:1b:c6:35:5d:86:60:81:7f:0f:58:
ab:bd:6f:69:8f:35:51:10:d6:4e:fb:42:6c:79:53:
3b:6d:15:62:97:79:9b:34:5f:54:73:83:8a:9e:b5:
bf:4f:f6:e1:a2:c6:67:31:0b:fe:eb:b5:84:3f:60:
ce:24:33:9a:d4:5b:5a:29:48:41:78:35:42:cb:16:
73:ef:a9:c0:63:a2:9b:73:c6:de:31:62:9f:2e:7e:
2b:f6:0b:c4:9a:6e:64:12:6a:cd:e6:8f:2f:53:a2:
d3:b1:50:01:f5:42:88:ee:1a:ca:99:c1:ff:08:4a:
26:68:55:46:4b:f9:15:1e:b9:88:47:99:41:e2:7e:
d8:1e:4f:b7:12:dd:10:91:33:3a:8f:a1:2e:57:df:
80:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:79:D4:F4:33:D2:18:51:55:34:CE:FA:E9:4D:65:D2:C6:F6:B5:44
X509v3 Authority Key Identifier:
keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ad:bb:ab:a7:ea:38:a6:85:7e:c7:98:89:52:9c:bf:ba:b1:
99:b2:f0:4c:a2:f1:a2:33:e1:79:6d:f9:82:16:59:ae:86:2d:
6b:fa:d2:a9:c1:c0:50:68:6c:ef:60:a7:74:0d:f3:9c:89:f8:
ad:8d:33:6e:08:c4:65:3b:e2:80:28:f1:7a:b2:ba:07:f1:e5:
a3:25:d2:00:fc:4d:e4:80:67:1d:28:e0:77:00:96:55:f2:08:
c0:d1:4a:20:02:e2:90:34:48:2c:ac:9a:98:1e:8e:6e:bf:1e:
c3:95:eb:b5:43:e4:a9:a1:8e:33:2a:a9:f0:83:b5:42:8e:cd:
9a:5e:5b:ec:17:f7:81:49:e2:d2:46:7a:cc:ca:db:96:f8:9a:
fd:d7:8d:09:3d:7f:d5:1e:15:47:a8:0b:9f:ba:89:98:f1:92:
92:bf:f7:f6:09:bd:15:c9:92:fd:0f:7b:5d:99:3a:e2:12:91:
ff:04:b1:b6:3c:1e:db:75:1a:53:73:94:5d:83:71:1e:72:6f:
63:89:ab:23:f8:ec:60:84:4a:11:8e:50:b1:30:ec:c5:e0:42:
b5:68:44:f8:b6:9b:6e:a8:89:f3:fa:e1:7e:23:df:4f:17:aa:
7d:43:04:e2:00:98:2a:c2:52:88:9a:93:e3:78:c9:4a:23:62:
f1:2a:87:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:27 2025 by rpki-client