Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json)
Hash identifier: jkukzMwaSFTtbtL0wzaEU2Swo+GfFAiG9mj6aIgUNtY=
Subject key identifier: 57:4E:9A:3A:60:0E:67:25:14:85:9C:46:00:E5:37:CF:2F:27:38:EC
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial: 019A70A4E824416D68FD95ECF33C7040E05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
Manifest number: 0636
Signing time: Tue 11 Nov 2025 02:00:46 +0000
Manifest this update: Tue 11 Nov 2025 02:00:46 +0000
Manifest next update: Wed 12 Nov 2025 02:00:46 +0000
Files and hashes: 1: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: 9jE3t3RTjQ5QTaizvHnkp4vXZjT9ccTpI8M08bg20RQ=)
2: r0UegqSm-Osf5dt7xIToVoSc8i8.roa (hash: iiKp30ve0a7AciqqMBvmQPAjij1PEXVHVGDlOgok+18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:e8:24:41:6d:68:fd:95:ec:f3:3c:70:40:e0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Validity
Not Before: Nov 11 02:00:46 2025 GMT
Not After : Nov 12 02:00:46 2025 GMT
Subject: CN=574e9a3a600e672514859c4600e537cf2f2738ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:6d:93:73:4a:68:02:c9:d8:b4:bc:7f:53:
9a:5b:b8:39:16:fd:9f:2a:b8:de:e2:17:58:5b:7b:
44:df:64:dd:03:4e:06:ad:78:46:69:e1:68:0a:fe:
b2:e5:25:07:93:dc:f8:fd:ba:08:4c:f8:23:20:1b:
cd:81:18:8c:b6:37:23:96:d7:99:a9:75:c7:9f:41:
0d:5a:aa:d5:d1:45:ea:f5:b5:f5:fd:bd:5d:97:9a:
c0:e3:81:59:0a:a4:2a:67:e5:ab:08:31:62:ba:fd:
38:28:7f:31:b9:22:e0:85:53:37:36:f4:51:32:d6:
96:53:17:dc:73:63:39:36:8d:3e:44:87:e3:6b:98:
e2:a8:5c:f7:3d:5f:6b:d4:f4:06:c1:49:5d:a3:8d:
2a:65:8a:1f:bd:07:0c:3c:b8:94:15:10:d7:8f:23:
bf:57:99:3a:2c:c2:a0:8a:9b:c7:27:45:c4:8f:af:
86:29:8c:da:f7:ed:cf:a1:7e:de:76:43:55:bd:ae:
1c:ef:98:a4:b8:fe:20:b9:6d:50:a7:3c:82:c1:7e:
d0:98:d1:fc:8c:43:9f:86:1a:2a:b6:2c:dc:9a:ed:
c9:70:86:99:40:de:09:e3:8a:5f:0a:df:35:fc:89:
b3:e8:3d:96:7f:aa:0e:25:8b:bc:3b:f6:a0:4e:10:
a5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4E:9A:3A:60:0E:67:25:14:85:9C:46:00:E5:37:CF:2F:27:38:EC
X509v3 Authority Key Identifier:
keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ec:91:e0:76:95:a0:d9:6a:7a:1d:60:78:4a:b5:34:21:a3:
ae:86:f0:a5:88:4f:63:e4:0c:cb:6f:6a:fc:fb:6e:7b:f1:c2:
59:99:eb:c8:8c:12:8a:d2:c8:d8:5f:34:08:eb:52:ce:5f:c4:
a5:f0:2c:46:97:22:63:69:bc:6b:bf:c3:75:b4:64:a7:df:72:
07:79:d8:f8:98:49:1b:e1:5d:bc:b3:2c:bc:aa:f2:0c:c3:b7:
e1:a7:cb:ae:5a:1c:0a:97:9a:48:cb:d1:31:41:a5:13:46:2d:
35:09:b7:c5:4e:83:ca:04:4c:bc:17:f9:e1:c1:ae:e5:11:54:
c4:04:cf:44:60:83:f3:30:27:76:7f:6c:3d:1b:d4:8f:c4:2e:
a4:0b:2f:14:15:58:82:94:21:90:fb:00:10:62:a0:af:ae:59:
42:c6:d6:61:ca:fe:ac:b4:d7:26:21:cb:0f:c2:2f:d3:b0:e7:
01:20:c3:fe:05:f8:01:c6:bf:22:7c:fb:99:55:bd:a1:3a:59:
78:a6:b0:18:a3:5f:ac:d2:98:2d:f2:fe:bc:00:0a:28:6b:25:
3a:d4:d5:d7:0f:da:a8:2a:29:c4:fd:0e:89:d6:a1:5c:cf:67:
00:2b:77:50:28:c9:de:9e:60:62:75:9d:90:76:f0:bc:6e:eb:
d7:a0:dd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:15 2025 by rpki-client