Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
File: 3Zgvl5otJeuy2rJlS4wnySjPWsc.mft (raw, json)
Hash identifier: t6lMB2TZbPckSBBDy04IdpLH9/5SRfc+d2an/FDa4OU=
Subject key identifier: 1B:11:16:98:F7:5A:72:6F:74:6C:C8:36:68:1C:02:7A:38:81:42:D1
Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
Certificate issuer: /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Certificate serial: 019A714A2AEC27454116AC831B8CAC4D11F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
Manifest number: 16CB
Signing time: Tue 11 Nov 2025 05:01:17 +0000
Manifest this update: Tue 11 Nov 2025 05:01:17 +0000
Manifest next update: Wed 12 Nov 2025 05:01:17 +0000
Files and hashes: 1: 3Zgvl5otJeuy2rJlS4wnySjPWsc.crl (hash: N5sBaTlvIlIbSL78nv92vFynZeI/GtqiULRFgajy5Uk=)
2: 6BKOzeR_jkv8Td7naSCpGwK2cbo.roa (hash: NdsdWgq7FNtTGsjv+sGoOHpLX3rHnRlY3SsmvrWzKc4=)
3: gTmhFIzM7If-kzl01cWeEzcqqns.roa (hash: lUpkvjKsmC5D6MNw62q7fvgUR6asOsGbY3c+E0HzKW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:2a:ec:27:45:41:16:ac:83:1b:8c:ac:4d:11:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Validity
Not Before: Nov 11 05:01:17 2025 GMT
Not After : Nov 12 05:01:17 2025 GMT
Subject: CN=1b111698f75a726f746cc836681c027a388142d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6a:f7:07:03:03:c3:b9:50:11:08:9d:3a:15:
f5:42:21:3a:0e:69:54:fa:07:44:1b:a5:0e:79:25:
97:cb:61:83:40:33:d5:b8:e8:5d:97:39:d9:a5:d6:
49:85:72:55:b0:7c:3c:8f:37:9f:2a:cd:23:1c:d4:
d0:31:db:c8:ca:5f:b6:85:91:e0:28:61:c8:3e:f1:
01:29:ab:5d:4f:67:13:84:18:8d:f5:6f:54:8e:a5:
9d:2a:7e:4c:90:b0:e0:62:94:ba:00:54:90:d3:4c:
56:d1:51:f5:a3:3f:08:56:8f:1a:ea:5e:a4:f7:6f:
db:41:86:f9:87:7c:45:b6:7a:8c:ba:ab:e2:71:11:
1f:a9:c2:c9:f1:e8:dc:e6:9e:a9:b3:71:43:f1:3a:
c0:86:19:c5:46:a4:2a:67:84:cb:ff:b5:a0:70:a8:
b9:89:6e:04:a0:40:76:cb:b5:b3:00:0b:91:20:e1:
1d:04:6c:8b:77:30:da:21:c8:e3:6a:bb:f9:9c:45:
4c:7c:3b:f9:ef:df:a9:16:8d:9c:66:c0:ae:b1:c5:
51:38:9e:85:71:00:fb:ab:c6:7e:4f:19:ac:92:ba:
72:85:6d:e5:ee:8b:58:fb:a6:7f:f5:57:04:f5:19:
81:97:6e:c1:44:bc:bb:20:9f:84:8d:19:d5:be:7d:
07:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:11:16:98:F7:5A:72:6F:74:6C:C8:36:68:1C:02:7A:38:81:42:D1
X509v3 Authority Key Identifier:
keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:61:92:14:53:26:0a:8f:68:f0:62:c9:0f:8f:60:1b:53:09:
eb:0c:b7:12:3b:5c:1a:b9:0a:1e:63:df:8c:59:e2:4a:bd:94:
ef:3b:23:b9:4a:b4:e6:e9:04:6f:b8:91:56:23:19:d7:8d:55:
dc:9f:ee:a1:48:ee:d8:a5:61:96:db:bd:4b:32:d3:cd:4a:4a:
50:a1:cc:10:e4:1e:46:9a:2b:7f:bd:41:8f:65:84:44:ca:90:
da:75:b0:57:f4:e3:1f:d3:fd:3c:e0:60:15:24:48:a6:56:7b:
71:2e:7d:9d:04:40:2b:12:d3:f8:ff:79:d9:0c:4b:25:3f:03:
1e:10:00:38:b9:a7:55:62:3b:c0:16:f0:ec:8e:8f:fc:72:0a:
d2:c3:e0:45:b1:05:e6:85:9a:7d:5a:65:8f:fa:27:1d:88:82:
cb:6c:58:22:13:0d:77:ba:ee:cb:1d:fc:7c:e0:2c:59:8c:6d:
42:96:d2:f1:a9:5c:90:fe:32:3e:ff:fc:1c:46:ba:54:07:0f:
40:ee:fc:9d:a8:b4:ce:e2:ae:1b:c7:c8:42:0f:4b:95:83:e8:
59:5b:2d:bb:b2:00:cf:f7:1d:67:5e:59:12:9a:e8:66:22:37:
20:58:6d:de:61:0c:83:2c:94:90:31:80:60:46:32:6b:06:c1:
01:c6:0c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:01:48 2025 by rpki-client