Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier: dynMaAqjeZQOpjQ/o0zQuDpW6k/nauOSyZd9gG/yA+Y=
Subject key identifier: F4:A4:72:41:C7:1B:B0:ED:1E:8D:30:E1:24:61:76:9F:01:A0:5D:FF
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer: /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial: 019A725C5B7343BA39A31ACCEC9500021285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 10:00:46 +0000
Manifest this update: Tue 11 Nov 2025 10:00:46 +0000
Manifest next update: Wed 12 Nov 2025 10:00:46 +0000
Files and hashes: 1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: NOX8/ltYWpLX9cSOhaRErvgIvIgZTvB73SYparPIGiM=)
2: IXT2ShwYMDTPNqnR-lmJPCt_hM0.roa (hash: YktH9Y4fzOrvY5vhhRnBY1iI8LZ09iZ8zTmc5w1S0Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:5b:73:43:ba:39:a3:1a:cc:ec:95:00:02:12:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Validity
Not Before: Nov 11 10:00:46 2025 GMT
Not After : Nov 12 10:00:46 2025 GMT
Subject: CN=f4a47241c71bb0ed1e8d30e12461769f01a05dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:e2:b4:8b:17:03:f7:7c:54:10:47:43:04:
90:a0:80:22:61:70:ce:08:79:0c:c8:a1:e3:80:f9:
4b:d3:85:00:1c:69:9e:a6:9c:d5:0d:07:bb:66:5f:
fa:50:e1:96:fe:37:bd:b8:ba:c3:87:49:40:1f:20:
a3:0a:b5:42:48:aa:ff:1c:55:0a:79:94:8f:03:9b:
ca:8e:49:26:7b:43:ee:54:be:ab:a2:89:12:19:5d:
b3:b8:43:0a:fc:f1:71:b2:f4:b8:d1:65:2f:1e:8e:
7d:b8:b7:4b:62:7c:9a:b3:e2:aa:2c:f4:a7:cb:72:
71:18:6c:50:fe:dd:b9:fa:1c:bd:00:6f:a7:76:bb:
30:aa:94:3b:5f:d2:3c:cf:d6:44:c7:92:4c:56:16:
0e:4b:dd:bf:83:23:11:59:ab:a2:29:56:89:ca:b6:
78:4d:ce:71:b8:99:7f:2f:e1:b6:39:11:89:9e:a1:
8d:8a:72:09:88:7b:82:44:39:46:38:0d:46:18:76:
25:ba:e2:ea:c0:dc:7e:ea:4d:10:34:ba:cf:46:31:
94:96:61:d2:28:1c:0a:06:31:71:19:07:1d:19:e2:
bb:ce:6a:46:fc:e4:bd:8b:cd:37:05:2e:b7:c7:4c:
50:da:da:7f:ee:c8:4e:7a:ba:99:e2:69:3d:b4:19:
05:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A4:72:41:C7:1B:B0:ED:1E:8D:30:E1:24:61:76:9F:01:A0:5D:FF
X509v3 Authority Key Identifier:
keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:24:73:17:f5:f7:07:a1:a6:79:7d:15:30:8f:05:16:06:b4:
9d:0b:b2:c9:7a:5a:b0:4e:c6:44:40:37:eb:cd:2b:14:c9:6a:
73:b9:7d:a7:d0:d1:c1:da:e8:d2:4b:7c:ad:62:4e:d0:3f:de:
26:85:46:7a:0a:fd:55:ac:8a:0d:fb:f2:13:17:23:c5:c9:2e:
f3:f1:33:89:b0:67:68:8a:66:84:d8:38:9c:2a:4c:55:85:5b:
b8:2d:6e:ff:30:35:16:fc:59:30:ad:ed:68:ea:3d:12:57:c9:
59:86:ac:bc:3b:b6:65:c5:ed:17:66:b0:ec:51:73:05:6b:ae:
89:d6:15:b2:ab:20:a3:e2:a4:61:42:f4:90:46:71:2b:50:58:
94:e3:dc:6a:95:08:09:b0:54:82:bf:99:6f:55:37:1a:13:c1:
ce:42:9a:7a:23:e8:c0:d7:74:6b:ea:d1:30:33:d3:d1:0e:29:
a4:e3:43:59:6d:a3:8e:d2:cf:7e:5f:13:69:cd:2f:81:b5:5e:
eb:ad:0a:6f:da:3e:73:f9:af:a7:52:ec:eb:d1:7b:8a:60:07:
8c:52:2d:8b:2d:fa:99:07:e7:8f:c4:dc:e0:03:da:b6:d5:50:
de:d5:9b:da:ed:82:16:9d:31:17:df:ed:75:83:41:ad:61:d9:
78:9d:c5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:21 2025 by rpki-client