Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
File: 3RWKDaAyZt8UTImntuNadhxJmPc.mft (raw, json)
Hash identifier: 49gXIzCvI+05SRKvRtY1a2O/kTrOPGS6Arq//Ce30Mc=
Subject key identifier: 97:BA:06:3E:67:D0:7D:5C:7B:3B:45:22:6D:0E:7F:30:60:F6:DF:2F
Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
Certificate issuer: /CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Certificate serial: 019A240A449D1CF154AD0A7143E6CEC3BCE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
Manifest number: 03F0
Signing time: Mon 27 Oct 2025 05:00:43 +0000
Manifest this update: Mon 27 Oct 2025 05:00:43 +0000
Manifest next update: Tue 28 Oct 2025 05:00:43 +0000
Files and hashes: 1: 3RWKDaAyZt8UTImntuNadhxJmPc.crl (hash: CqGwLix0qkRsjbCrHGusRxCnQZrva6Af19nT0pfeWeM=)
2: hjp9r4jkfdcWh8tb4IbJ8JLqvhg.roa (hash: rpnDBu2YggoyGIw/C4Ub9AMkAXEhq0st1VH7UXhjugk=)
3: oyehTC9fC3RxVNTxQ-3Nace4xCo.roa (hash: 6amsBM8Jkzid3Hbf3NCrvWV5lgaxarQNmZ7omOl4H1Y=)
4: tWWoO6Q9xW9qzxs1LTkk9o7qkwc.roa (hash: dIS2lAatvIYTUHXvxYqBBEq9rurmrnQiuE0cglSeBdY=)
5: zdvIB-MX7mBXxPXY9Gvkyg4DaIA.roa (hash: JzeLYwYOJtUYF4eEhrs8y3e0iaiCpHB7RqKZXjFT6qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:44:9d:1c:f1:54:ad:0a:71:43:e6:ce:c3:bc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Validity
Not Before: Oct 27 05:00:43 2025 GMT
Not After : Oct 28 05:00:43 2025 GMT
Subject: CN=97ba063e67d07d5c7b3b45226d0e7f3060f6df2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:5b:80:ff:00:2c:a0:13:6d:48:ad:a4:8e:
f9:00:3b:b8:0e:7d:b6:34:0b:8f:03:41:52:65:3b:
d8:e0:0b:62:6f:90:52:8e:85:d9:74:b6:ff:c8:47:
db:b7:d1:d3:96:59:e3:d2:e5:fc:8d:bf:1c:24:ef:
9f:92:8c:bf:cf:38:60:d4:23:4d:59:86:cd:ef:37:
b3:a2:b5:f3:d2:8f:ac:a6:47:8c:65:91:ee:3e:7e:
fe:e9:fd:ef:e5:54:65:71:f1:0b:25:51:9d:25:b7:
94:30:60:0f:45:43:89:de:62:5d:5f:af:b2:7c:58:
f6:dc:c8:14:c8:7e:53:75:6a:3e:94:83:cf:e4:81:
d2:e8:64:51:ca:94:ac:e5:b2:23:3d:20:f8:aa:73:
5d:60:d6:f2:09:17:e7:bc:5a:3e:0b:85:8e:e7:34:
b0:d0:64:9f:de:d2:01:6f:ec:82:6d:ca:50:df:ef:
1e:88:b9:18:7b:cb:33:3c:f3:fa:15:ed:e3:2c:64:
56:0d:db:48:93:ba:94:39:e0:e1:eb:59:3e:ba:8f:
c2:5d:40:31:68:8e:8c:df:0a:12:fc:de:a1:e1:cb:
5c:02:65:f0:0f:3e:bb:98:dd:56:09:25:c6:62:f9:
09:92:b7:69:50:1a:79:4a:a4:16:e6:29:42:b1:e9:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BA:06:3E:67:D0:7D:5C:7B:3B:45:22:6D:0E:7F:30:60:F6:DF:2F
X509v3 Authority Key Identifier:
keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:7a:2d:66:0a:3a:07:cf:7f:86:5a:61:be:0f:cd:45:8f:56:
29:89:85:54:ae:e7:86:6b:2e:5a:0d:6e:a0:b4:b3:c6:a0:99:
3b:b4:83:d6:61:3c:a8:a8:39:9b:dc:ad:25:39:fc:32:92:da:
ee:1b:b2:ff:3a:c9:15:3e:d6:d1:ef:3a:2f:95:35:c5:de:ce:
33:09:82:50:0c:a7:50:f9:df:e6:a5:97:7a:61:63:36:4a:1a:
b1:1f:7a:cb:09:a4:ae:ea:53:8a:ec:66:8a:da:08:4f:7c:7f:
1e:33:bf:38:5c:58:2e:94:f3:6a:e2:f9:23:41:6c:99:23:06:
81:19:78:99:7c:41:d2:52:bd:d2:6e:9d:cd:7c:4b:d1:c0:88:
07:87:8f:69:38:3a:cf:d4:3a:b0:eb:16:72:1a:10:45:a7:0d:
49:7f:8d:56:73:d5:db:27:40:5a:7d:0a:19:df:0d:67:42:5e:
71:cd:18:63:fd:6f:c6:37:98:6e:4a:72:54:3a:c2:5e:d4:46:
7e:bd:9b:d3:b8:6f:05:72:59:4f:13:db:4f:25:2c:f4:75:e1:
45:55:45:0f:6f:78:e3:84:73:c9:46:a0:ae:81:e5:fd:63:23:
4f:80:e1:69:83:69:d5:56:db:f2:bb:cd:b2:05:b5:7a:9c:cd:
cc:d7:38:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 10:54:21 2025 by rpki-client