Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: H+w9wfSKgFJC+MnGQFhI5BlPuE+ZN+BL3n1e9gxGC/0=
Subject key identifier: A5:D8:35:2C:7B:4F:C8:61:D7:91:18:99:FE:8F:D7:93:BA:7F:28:D6
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 019A1F1ACBAEA62A0CDCCA605CBF66F9E3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 11FB
Signing time: Sun 26 Oct 2025 06:00:40 +0000
Manifest this update: Sun 26 Oct 2025 06:00:40 +0000
Manifest next update: Mon 27 Oct 2025 06:00:40 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: QGh5uu3BxiCT6AXFbAYb9UFezrOzNuIJXzIWBFU7r00=)
2: _eQTxfZZbwefhXlLKHO7CEbeNzo.roa (hash: XwbhtEsqMzoTs493oAMc1WoC+bVurXPqsNp3fAtN59M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1a:cb:ae:a6:2a:0c:dc:ca:60:5c:bf:66:f9:e3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Oct 26 06:00:40 2025 GMT
Not After : Oct 27 06:00:40 2025 GMT
Subject: CN=a5d8352c7b4fc861d7911899fe8fd793ba7f28d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:ce:77:56:8b:99:06:c4:8b:de:e0:80:fa:
e4:3b:c0:46:5d:39:54:02:b9:4b:c1:dc:84:f7:7d:
d0:96:14:ac:ab:94:b9:96:a9:67:ed:f2:88:a6:1f:
4b:72:8a:13:46:6b:78:40:d0:7c:7d:5d:b7:63:f7:
52:1f:a4:07:48:ac:a2:b3:14:03:5c:a4:4c:2e:4d:
9e:6d:b7:e2:f6:ec:5d:27:18:0f:1d:fb:b7:41:f5:
f1:c3:6c:bc:32:56:1c:34:00:5b:9d:07:13:af:cf:
1f:aa:a8:52:71:84:13:d7:6b:d4:e2:9f:d7:c6:9b:
74:c1:04:21:b3:6b:80:bd:a2:ec:81:01:f8:02:d2:
f7:d8:28:54:25:30:b3:c9:44:dd:b5:9b:35:dd:61:
ee:a5:e3:66:0e:66:d7:81:0b:8b:5f:a2:0a:2a:d3:
98:a1:8c:d2:64:5f:e7:1e:7d:12:a9:49:aa:56:2d:
4c:cb:42:6e:70:e4:e7:da:17:0d:8e:89:b8:23:82:
7a:0e:d2:a5:67:94:34:0e:48:4b:b0:53:e7:ef:82:
4e:e9:0d:ad:37:0b:b6:bd:bb:b2:3d:51:84:de:e6:
45:84:66:7c:6b:c7:15:ac:aa:2b:07:10:31:23:47:
49:88:28:3b:3c:11:e7:4d:d3:6e:74:8e:d5:8f:46:
ad:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D8:35:2C:7B:4F:C8:61:D7:91:18:99:FE:8F:D7:93:BA:7F:28:D6
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8b:ce:a8:84:b3:c0:02:90:a6:61:98:14:09:1a:62:71:9c:
0f:2f:38:86:42:7f:36:6d:ee:68:6d:4c:30:74:52:ce:a4:f2:
9a:b9:91:15:86:03:5a:41:26:8e:6e:ac:39:c2:0b:43:62:37:
04:74:53:38:70:0b:82:c5:18:2b:8d:ed:99:8a:0e:44:80:f3:
a5:b2:4d:77:09:8f:44:fc:64:bd:54:34:a7:50:04:ff:9f:c4:
ba:e5:d8:3c:fe:bb:91:26:f0:f1:f7:4c:c0:90:02:14:53:8b:
ca:26:a2:98:47:0d:d0:c1:27:78:62:bc:ad:7c:ef:8a:73:71:
48:88:fe:85:8f:30:71:71:db:b6:d8:f6:22:8a:76:62:8e:e1:
9f:5c:66:80:30:8c:16:7f:52:29:95:cd:67:33:85:66:05:a4:
29:8e:55:6c:68:6c:5b:d4:84:6c:6a:a3:5e:0d:32:b3:28:03:
df:47:ab:41:01:45:4e:2d:ee:73:d3:9e:33:0f:70:93:bd:db:
2f:1e:02:81:b3:e0:53:53:c7:f8:7b:a6:da:1d:e1:49:60:2b:
f5:61:22:26:4f:95:e8:df:24:d3:41:25:51:89:75:96:7a:52:
68:ab:6e:d2:be:05:e5:67:f3:a2:a8:8a:1a:5d:49:31:8a:ed:
2c:e6:51:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:10:30 2025 by rpki-client