Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
File: s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft (raw, json)
Hash identifier: hcpLgiIbLnxVkQpw2zrgtH2lp6lElSxvd6eggo5tGvs=
Subject key identifier: 68:D8:EE:EB:AA:13:D0:0A:A9:5F:81:EC:30:9E:17:54:72:84:0A:00
Authority key identifier: B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
Certificate issuer: /CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Certificate serial: 019A71EEBB2D20C1FCCF2B7963229D1C705B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 08:01:02 +0000
Manifest this update: Tue 11 Nov 2025 08:01:02 +0000
Manifest next update: Wed 12 Nov 2025 08:01:02 +0000
Files and hashes: 1: 1Z0qsk9StCFAQktZcYQaKAQv6Eo.roa (hash: 7ZoC6UA8RmSyn6UoUQLfpDC2951iCi7ws/lgZfO/s3U=)
2: s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl (hash: NcyE4YcDFEHrUlB4B7QFw8NgV+xqLNIS47/gUBGG0KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:bb:2d:20:c1:fc:cf:2b:79:63:22:9d:1c:70:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Validity
Not Before: Nov 11 08:01:02 2025 GMT
Not After : Nov 12 08:01:02 2025 GMT
Subject: CN=68d8eeebaa13d00aa95f81ec309e175472840a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:c7:20:8c:7b:69:bc:9f:3d:c8:d7:c4:f7:
3f:7d:32:1a:31:43:43:05:3a:c9:31:d1:34:d7:cd:
50:8a:77:f5:0c:be:cc:5c:f9:7b:9f:7a:af:1a:86:
8b:78:ac:01:6a:85:ec:58:1c:fe:10:43:4d:97:a5:
f6:fc:85:e4:97:aa:49:33:67:fd:da:c1:77:74:13:
b1:b7:db:d1:47:11:8b:b2:27:38:2c:4d:bf:94:36:
c9:ba:bf:c4:58:e4:ae:d2:e2:46:14:c4:d5:84:c1:
db:c1:3d:d2:71:ea:31:29:51:5d:89:4a:42:5b:1e:
1b:95:7b:17:90:30:81:4d:ee:bc:88:45:cc:32:db:
9e:4a:3a:f0:4a:c5:2c:79:2b:0e:36:01:fd:ae:1a:
cd:2b:7f:a5:73:53:d6:a7:d2:a9:36:dd:b1:19:1c:
ef:51:58:5c:80:6a:68:9a:90:6e:56:4d:67:a6:c3:
82:46:20:f9:22:1f:8c:e8:39:01:81:2f:da:b1:79:
17:76:11:f9:43:8e:04:f5:f3:97:58:2b:04:aa:e0:
30:be:29:64:ac:37:3b:f3:81:e9:af:43:f0:80:49:
13:ea:44:dd:1b:c9:89:5a:bd:a1:dd:8f:e2:f3:fd:
f3:26:4d:a2:81:5a:bf:51:5b:42:92:ac:c6:2d:1e:
19:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D8:EE:EB:AA:13:D0:0A:A9:5F:81:EC:30:9E:17:54:72:84:0A:00
X509v3 Authority Key Identifier:
keyid:B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:41:df:d7:f0:96:be:f9:aa:8e:af:36:7a:a1:dd:ba:0b:ff:
b3:03:15:d6:b3:51:be:49:0b:ed:4e:73:ef:e3:98:96:df:8b:
5d:29:09:02:3b:80:b5:8b:50:04:7e:6a:3f:db:c6:32:1b:66:
3f:5b:cb:f1:92:7e:6c:f9:6a:71:87:f0:f5:36:13:bc:8c:fe:
16:5e:4d:21:ca:ac:ee:e4:f1:a0:20:68:55:71:2a:fb:a4:3a:
a3:40:67:e3:c2:2e:4f:33:d7:55:a5:0b:12:25:f7:bf:53:3e:
5e:74:4d:59:57:47:52:dc:fd:4e:4a:80:10:88:4e:2c:81:79:
52:03:7b:cc:48:82:47:0a:96:a3:fa:b4:01:3f:52:6a:ea:60:
9c:85:70:91:b2:e1:61:06:a0:6c:df:7b:12:cd:05:fb:da:fc:
cf:1e:81:e1:7b:fb:15:9e:9d:8d:97:e0:ab:e2:c8:f2:aa:72:
3b:4a:f6:ce:1d:c9:6a:ff:f8:ca:eb:3e:66:1c:bb:7d:39:dc:
6e:db:48:4e:f8:14:98:d7:02:60:b6:4c:6b:53:f0:f0:98:80:
bf:80:e2:f1:a4:17:6c:a2:0d:57:a9:f4:14:ee:7b:60:e0:2a:
43:32:61:0b:c6:dc:da:bc:1f:5a:ff:ba:c4:bc:54:fb:19:5d:
cb:df:5d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:55 2025 by rpki-client