Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File: 3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier: FfR1CoXBv3OybRCGCpRkZ0DlyRu3F8cTRzIlrq6kM4Q=
Subject key identifier: 7E:1D:BE:32:84:7C:A5:0B:11:88:DC:AF:52:4C:AF:89:7E:40:B4:48
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer: /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial: 019A70DC0F5B9F330844A1AD766A1566EF83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number: 08F4
Signing time: Tue 11 Nov 2025 03:01:01 +0000
Manifest this update: Tue 11 Nov 2025 03:01:01 +0000
Manifest next update: Wed 12 Nov 2025 03:01:01 +0000
Files and hashes: 1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: vt6vYaVQ5OZVKWEXn8BBEZk434CovrNG4WhsSm4VvPg=)
2: tmyLpJpJchhVaXtc4hY4-3-tLv0.roa (hash: ptDhwK/duydywl6VxB7EOOZhOpM1y3n5bCF72ET2KLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:0f:5b:9f:33:08:44:a1:ad:76:6a:15:66:ef:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Validity
Not Before: Nov 11 03:01:01 2025 GMT
Not After : Nov 12 03:01:01 2025 GMT
Subject: CN=7e1dbe32847ca50b1188dcaf524caf897e40b448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:bf:92:1a:61:40:4b:88:5d:96:96:f9:17:
47:e3:4c:35:a6:fe:10:61:14:96:0a:87:90:ba:16:
d8:24:15:02:60:a3:b3:a8:ea:30:96:b2:78:38:b5:
76:58:b9:b6:ce:96:35:7e:c7:2a:d6:e5:ae:e9:04:
91:d5:ec:6c:37:44:f5:3f:6f:e7:6b:f8:2c:27:1c:
9a:f7:93:35:6d:37:36:a5:a0:19:ca:19:7a:81:79:
d3:3c:86:7a:b7:61:f6:55:af:65:6b:ce:ec:9a:ae:
4f:e2:c6:cc:c9:5b:b2:b0:1f:5d:87:30:c6:8f:16:
60:4a:38:af:b7:99:11:76:99:a1:ca:b3:16:dc:6c:
af:ed:2c:5e:8e:9e:84:e9:40:03:3c:a0:a2:99:8b:
bd:28:d2:de:78:b4:c2:63:a4:22:d3:f6:c2:3e:64:
51:a9:67:61:fc:94:8b:fb:35:3f:3a:6c:6e:c0:04:
70:62:c8:cc:90:c1:f2:b1:a4:7d:9b:f1:1a:67:5f:
b3:be:85:a8:2a:96:38:fb:98:02:ed:48:39:0b:06:
2d:1a:a9:b9:44:ad:ab:54:cd:07:0e:51:7c:d4:fa:
55:f7:58:f9:df:fe:e1:6c:3b:76:cb:36:47:c4:0e:
fd:b1:02:fe:5c:cc:e3:31:50:e5:15:31:b9:cb:33:
2f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1D:BE:32:84:7C:A5:0B:11:88:DC:AF:52:4C:AF:89:7E:40:B4:48
X509v3 Authority Key Identifier:
keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3e:8a:c8:d3:77:cc:38:e7:a0:6c:12:be:0f:ff:4a:b9:43:
11:b7:de:e7:1f:98:83:4d:90:45:10:1c:8d:7d:00:29:e6:d5:
70:9b:af:fa:47:22:2a:23:7b:24:12:b8:4f:0a:4f:86:97:5f:
5e:04:bc:34:99:1a:50:2d:27:a7:09:26:16:8d:ef:63:03:88:
b4:1e:b4:73:a1:2a:5e:6b:63:5d:c3:3d:7d:a9:a6:07:c3:c7:
00:29:26:0a:6c:2f:cd:a0:01:e2:ae:0f:dc:14:0a:b9:6f:bb:
bf:91:ee:d8:a6:cb:82:ae:9a:76:9b:68:b0:36:5d:36:73:c6:
01:bc:c2:b4:85:56:1d:a8:02:f6:8b:59:22:e7:c8:fc:6f:14:
f2:a3:73:66:4c:70:20:7d:84:5d:18:3b:82:3d:fb:95:11:93:
e5:43:a6:fc:39:3e:03:ae:19:2a:ef:c2:eb:90:4c:d8:44:10:
d4:cb:19:57:e4:af:b4:6d:17:46:7a:f1:6a:4f:06:1b:4f:de:
ec:1a:36:ce:4b:54:a5:d5:67:00:39:ea:e5:34:d9:83:b3:f7:
6a:ac:18:94:aa:f8:5d:f9:43:24:c9:0e:4a:75:65:76:ef:0f:
c4:b6:9e:ae:e4:0e:c0:74:49:08:ea:88:86:51:c6:30:5f:18:
5d:42:89:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:18 2025 by rpki-client