Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier: TUwUSS3q67XtSPdWlJ0ia8xG3EzszNRDTN4MZ/rAHxg=
Subject key identifier: 2A:14:33:61:6D:8B:9A:35:BA:C1:BB:4B:CD:F4:6A:7D:DB:45:18:5B
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 019A7149D52C97D4E658BCBAFBC1E6A4DE2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 05:00:55 +0000
Manifest this update: Tue 11 Nov 2025 05:00:55 +0000
Manifest next update: Wed 12 Nov 2025 05:00:55 +0000
Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: 75ZOUho/tuG6P6afFEFlnqTMU1PidtnURVqsbU4xByc=)
2: ZJCu1yU9m3Cq5WWLkeWOotibU-k.roa (hash: km1a7hNobV+/Bq/2l3UQLOxoqTuuQQAxWKpbP+WCwQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d5:2c:97:d4:e6:58:bc:ba:fb:c1:e6:a4:de:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Nov 11 05:00:55 2025 GMT
Not After : Nov 12 05:00:55 2025 GMT
Subject: CN=2a1433616d8b9a35bac1bb4bcdf46a7ddb45185b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:e4:80:44:c3:6d:7f:b5:28:0e:27:2c:23:
b6:ab:c2:37:e9:c4:0e:36:dc:6c:ae:7b:bc:c3:40:
d2:8e:d1:e6:e8:bb:be:55:37:5a:03:6e:a9:55:c8:
74:4e:a6:8d:fe:55:ea:26:6c:58:6f:5c:dd:27:e3:
6f:08:94:7e:1b:93:20:3f:6f:4a:30:05:49:e7:18:
4c:0e:c3:69:f8:dd:4e:95:9d:46:f5:1d:a4:11:55:
68:8c:3c:1c:90:66:c7:0d:52:e8:ed:c8:e3:7a:10:
6c:41:dc:6d:f5:a6:a8:06:b4:2b:b7:9a:99:df:da:
8a:51:1e:00:18:90:08:23:d4:f4:ea:6d:5a:35:b2:
6f:d9:08:1d:8a:54:21:31:3d:e2:b8:37:72:c2:87:
a6:d1:b2:da:99:7a:e6:3f:aa:af:f2:f0:1a:ea:0e:
fb:00:07:40:ba:bb:7f:10:01:4c:0a:70:fc:a8:f1:
21:d0:2c:0a:43:27:24:07:ed:49:44:9a:eb:5b:ab:
20:33:dc:c0:e2:ff:98:90:e7:c3:e9:8f:18:bd:1a:
37:34:5f:08:19:c2:1b:97:61:e8:a5:0c:9e:a3:41:
be:9a:ed:af:71:1f:ca:fe:44:c3:77:4d:4d:6f:af:
64:bc:e3:59:7c:cf:96:8c:08:7f:32:9f:1c:9e:98:
f4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:14:33:61:6D:8B:9A:35:BA:C1:BB:4B:CD:F4:6A:7D:DB:45:18:5B
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5f:f0:f2:b5:49:8d:80:49:7f:e8:19:45:d8:2d:f0:b9:85:
73:38:9f:75:b2:48:1a:26:85:f0:e2:22:52:e7:5c:cd:63:8c:
d1:26:d9:2a:9f:01:3a:58:40:c3:08:29:a1:6b:37:af:a1:e8:
eb:67:a2:32:72:6a:1d:ea:1e:df:df:d1:d9:9e:45:52:7f:fa:
7a:50:35:44:0a:30:8b:9c:36:85:a2:41:8a:9c:70:5d:5b:3e:
1c:9c:27:1d:eb:2d:91:f3:63:ce:fd:53:00:27:73:17:6d:27:
94:48:94:4e:26:68:d0:5e:49:de:43:6e:96:de:cf:76:4f:72:
46:2f:94:e2:4e:6c:22:b9:49:51:d3:bf:91:f6:ac:f8:7c:80:
f9:6b:66:d4:27:44:b3:3e:b5:6c:ea:86:de:93:d9:e0:f6:27:
0b:95:4e:7e:76:d9:47:10:97:06:0f:a5:6b:26:d4:27:73:b8:
2d:c9:f0:bf:b7:7b:8d:3b:ac:4a:47:21:79:35:3d:49:38:57:
28:6d:ae:ba:e7:0f:3d:2f:0e:ae:1e:c8:c9:31:8d:21:64:a8:
f2:2f:ab:88:b2:56:de:10:62:70:1d:b9:3b:be:53:28:14:e1:
58:78:8a:5c:4c:16:ac:0a:3f:87:68:10:a7:a3:6b:45:56:83:
a0:57:50:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:07 2025 by rpki-client