Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: pIZPW25Exil6RHdTMTCfVpK083GfjDhd+7k+zaF8h2s=
Subject key identifier: F9:C0:93:5B:28:82:B6:FA:63:2B:6F:50:C4:98:CD:8B:F0:71:37:AD
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 019A4BF3C46A7092B8616AAF436438BF499C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 104E
Signing time: Mon 03 Nov 2025 23:00:57 +0000
Manifest this update: Mon 03 Nov 2025 23:00:57 +0000
Manifest next update: Tue 04 Nov 2025 23:00:57 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: j9adFn3DCkq7aPKrCG8g+ofYMmvjsa3rD8pPGW6kh7Y=)
2: GJgS7xgFqg_T1Brv5T3Z3VSHSQs.roa (hash: qcKfQ/V3fbXzE7gbTkc10cKeggN9uhLupcmee0zeuj8=)
3: gDn1RHCMxQyNW_pGfUDeAoFsteY.roa (hash: aOveJJ3ah1WLjPcvfI87OOrTavXERjpgS9XWi0GEgq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:f3:c4:6a:70:92:b8:61:6a:af:43:64:38:bf:49:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Nov 3 23:00:57 2025 GMT
Not After : Nov 4 23:00:57 2025 GMT
Subject: CN=f9c0935b2882b6fa632b6f50c498cd8bf07137ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a4:77:ed:b3:7c:cc:1e:ad:80:27:c8:f6:fd:
01:7f:91:fd:0e:0a:51:24:98:33:69:a8:08:c3:ac:
67:d6:58:d7:9e:d1:fa:ad:66:52:7e:dd:c9:e6:e3:
d0:97:e2:c6:4e:9e:bb:f5:de:81:04:78:00:78:81:
18:9f:0c:a9:d2:a8:1d:e8:0e:9c:39:db:12:e8:da:
77:49:28:5a:d9:ce:0e:84:d1:b4:bd:84:3a:94:d7:
49:99:87:a7:f8:23:9e:81:7c:df:bf:8d:87:57:b5:
df:0c:4b:75:23:44:c4:9d:11:93:78:13:e0:d8:5a:
ac:78:e3:ca:b9:ab:03:77:06:6a:e7:c8:ea:c3:f5:
8a:b9:85:ed:e5:63:05:8d:aa:86:e3:fb:de:02:05:
d2:ea:c8:54:6b:65:68:44:59:fe:a3:9b:74:97:79:
e7:ed:d1:bc:a4:61:aa:3c:54:1e:ee:aa:5b:07:c0:
bb:fd:8a:d6:64:20:9c:dd:70:04:4d:d1:77:96:72:
c1:68:be:5e:67:03:37:2f:ce:9a:c9:54:b8:56:67:
78:9f:8f:25:ff:7b:cb:33:56:5e:75:8f:c6:74:ec:
ca:c9:96:a6:fb:aa:96:ca:d8:58:ed:60:df:35:3f:
41:0d:82:9f:5b:d9:aa:66:47:22:f0:d0:50:60:98:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C0:93:5B:28:82:B6:FA:63:2B:6F:50:C4:98:CD:8B:F0:71:37:AD
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c6:64:7b:01:73:0e:00:7c:60:e0:9d:23:24:17:c2:b7:87:
50:b9:08:0b:36:d9:c8:34:11:0e:3a:d3:87:87:21:78:12:9f:
ae:3b:72:66:a0:84:df:0c:42:4e:95:dd:c1:94:fe:d5:ad:b4:
0e:a0:5a:d8:84:ba:76:bd:b3:ee:58:73:a0:c1:63:4d:95:bc:
b7:a4:c3:43:64:44:33:3d:c9:4b:e4:f7:24:8b:21:58:fa:f8:
a5:e3:1f:bc:3b:02:4c:de:eb:98:49:8d:72:7e:d8:e4:51:0c:
2a:4e:b7:5a:78:55:3e:7f:dd:58:f3:07:fd:a5:dd:5b:52:ff:
15:93:8b:55:61:38:50:6e:99:45:95:e3:7e:83:3e:ab:4b:7b:
b4:78:40:b3:54:1a:96:12:51:c2:53:ab:ed:6e:d9:c9:c2:89:
24:d3:68:cd:58:9b:cf:0f:5f:4e:6b:80:74:66:82:00:64:61:
a4:55:0a:4d:87:40:5a:25:de:e6:0f:ac:b4:01:85:ed:b5:02:
0c:b1:be:05:d3:55:f5:cd:c7:ba:d6:ab:2d:b2:0e:5f:11:eb:
4c:6b:f0:83:c3:24:83:25:49:82:d6:b6:cc:0e:e4:5c:b0:b7:
28:1c:15:d4:f6:bc:15:00:51:03:80:c7:24:66:94:d4:ea:b7:
71:d5:2c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 03:59:05 2025 by rpki-client