Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: qyx3vF/ECZ85JUX+wVXvjJosiHfG1nRs4TdLxoHGbOA=
Subject key identifier: 27:13:3B:F8:87:95:AF:D9:BF:21:BD:F0:6E:34:DD:1F:A9:B4:CF:8F
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 019A72265522F1D475CF982E5459513649C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 1035
Signing time: Tue 11 Nov 2025 09:01:46 +0000
Manifest this update: Tue 11 Nov 2025 09:01:46 +0000
Manifest next update: Wed 12 Nov 2025 09:01:46 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: Ioik6ESZipFU9/JjZFpsdiCh1mc1x4fTRR6Yt8IcCro=)
2: f98-QGGyvPNag3NBWDooTVrQ2vI.roa (hash: HJhPbHQVg92t7q01K4xm1xNnj11AYPaciJd3bC3Ng+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:55:22:f1:d4:75:cf:98:2e:54:59:51:36:49:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: Nov 11 09:01:46 2025 GMT
Not After : Nov 12 09:01:46 2025 GMT
Subject: CN=27133bf88795afd9bf21bdf06e34dd1fa9b4cf8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a2:b7:cb:90:be:6e:e9:c8:f3:2a:24:bb:a1:
e4:c4:eb:79:f1:da:10:f4:84:48:f1:d5:cb:c0:e6:
21:0a:49:30:bd:0a:93:f8:4e:9d:e1:3e:55:d2:e1:
d5:52:ec:9d:17:c6:12:3c:dd:82:1b:3f:fc:6a:87:
5e:4d:93:d6:2b:ee:4f:5b:ff:de:fb:1e:11:e2:38:
d3:8d:ff:45:11:33:73:aa:10:be:d8:28:a8:f7:b0:
89:40:46:3e:7c:70:67:43:d7:dc:14:12:e8:ec:e0:
94:f5:3c:9b:7b:4e:24:c9:d2:e8:90:1e:10:fd:bb:
71:30:a7:06:92:64:c4:e2:c5:99:e2:51:78:de:6f:
a5:33:ba:6d:f9:d7:ad:4d:bd:30:96:bc:4c:9b:23:
be:90:70:b2:bf:b7:03:a4:f6:1c:0f:53:0f:78:16:
87:85:38:c3:12:e0:c1:89:f2:00:1c:98:ed:99:2e:
78:04:94:45:fd:c3:0a:2e:ec:fd:85:f9:4e:1e:00:
0d:fd:0f:72:0a:88:ae:c1:59:4d:06:97:ea:65:d5:
2b:01:96:e3:2b:94:b4:f7:76:64:90:8f:0e:5f:fe:
4e:b8:6c:75:db:e4:a8:b7:bf:57:56:f4:27:50:9b:
98:bc:0e:84:fc:78:c4:3a:e1:04:df:15:ad:cc:68:
7f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:13:3B:F8:87:95:AF:D9:BF:21:BD:F0:6E:34:DD:1F:A9:B4:CF:8F
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9e:b2:4f:75:d9:ab:2f:39:af:7e:5f:00:b4:1a:d6:21:13:
04:56:2b:e4:c9:de:08:1e:69:51:99:09:42:d0:8c:42:9d:17:
55:ff:a4:eb:9f:e2:1f:f1:7e:4d:9b:c9:21:6d:6b:ed:55:2a:
50:fd:5a:19:b1:45:af:1b:11:be:7c:05:db:ad:71:7b:aa:04:
a7:f1:05:0e:04:2a:07:df:c3:34:9a:1e:92:f9:57:86:10:77:
8c:98:da:ad:ba:c4:89:bf:d8:54:d2:61:42:a1:a1:41:65:22:
b6:4e:cc:02:31:8c:6b:eb:4a:99:17:19:a7:41:05:61:88:08:
82:a2:4d:36:54:41:b4:ca:1d:ce:fc:c1:cd:45:39:f8:ec:e6:
9f:f3:1a:4b:df:e6:1d:1c:48:ca:c8:ab:a0:28:86:9c:c3:9a:
42:53:cc:70:8e:24:59:70:4b:41:ce:d7:71:43:21:42:e3:1a:
52:ea:70:15:f9:cc:17:7f:c3:0c:e5:12:0d:f5:5e:29:c7:4e:
10:26:73:e2:52:14:6a:d2:a5:20:b9:6e:57:bf:1e:db:a2:96:
b5:cb:50:44:0d:63:03:d0:04:ab:9d:ca:67:ee:4f:9e:41:7e:
f4:44:e9:a8:de:9d:81:26:fd:e9:b8:cd:4e:d6:8b:97:b1:5e:
6a:88:f7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:23 2025 by rpki-client