Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File: 3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier: UYTbfkS3+UefZR7XYfT04kxmo0uqb6s0odCZj0Ukh2A=
Subject key identifier: C1:FE:79:47:D4:3A:D3:F7:37:84:68:1D:6E:4E:2C:65:0C:5F:5A:1E
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial: 019A725CB3E809F27A559119A5FD4B6E44E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number: 12D3
Signing time: Tue 11 Nov 2025 10:01:09 +0000
Manifest this update: Tue 11 Nov 2025 10:01:09 +0000
Manifest next update: Wed 12 Nov 2025 10:01:09 +0000
Files and hashes: 1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: P4Yy9FdYoIvI1zluUTyAu49TaAHtU6RicL/UEn3F/Sg=)
2: jrzKo-lt5J6MsHDsEMxREvgxfZ8.roa (hash: NadiGgxjhYXuzdbS81cV9tBbpe6k6vvKuOl8KjAS3hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b3:e8:09:f2:7a:55:91:19:a5:fd:4b:6e:44:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Validity
Not Before: Nov 11 10:01:09 2025 GMT
Not After : Nov 12 10:01:09 2025 GMT
Subject: CN=c1fe7947d43ad3f73784681d6e4e2c650c5f5a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:04:d0:a2:8c:13:3d:b5:7f:63:66:52:f0:
91:be:6e:b5:6e:c0:d1:a0:cc:88:38:65:49:13:b9:
3b:8e:07:d6:ca:96:24:ce:f7:95:04:9d:7c:b2:b3:
e2:09:83:fb:e2:c2:a8:9b:e7:76:f9:6a:cf:97:f2:
1b:e3:2f:38:ca:91:6d:5f:6d:ba:d8:32:06:8e:cd:
85:be:31:33:59:18:8f:aa:31:6c:b3:d5:76:b4:e1:
c9:9f:7e:8f:32:76:f5:9d:9b:27:fd:36:52:e3:7b:
83:09:ef:ef:9f:c3:a5:10:6c:22:f1:c0:9d:46:44:
2c:1c:d1:2f:81:35:29:cc:01:bb:73:20:5c:6e:bc:
35:68:97:43:da:2c:95:30:a4:d5:c6:0a:88:12:64:
9d:23:3c:2e:27:e3:32:41:54:b0:ba:e6:58:6d:ab:
1e:0c:74:36:d7:1f:da:03:24:a7:b6:3c:36:69:2b:
e2:86:86:80:9a:0b:49:5c:32:76:43:9f:73:51:0d:
be:19:7d:26:77:ca:e5:31:13:55:bb:60:1d:57:4e:
14:2e:82:3c:76:9b:17:75:6a:44:d4:39:9c:82:36:
2e:34:ce:ac:b1:64:50:16:23:38:21:55:3a:bb:b9:
94:23:d1:46:3e:c0:d2:30:72:75:24:39:bc:cf:a1:
f4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FE:79:47:D4:3A:D3:F7:37:84:68:1D:6E:4E:2C:65:0C:5F:5A:1E
X509v3 Authority Key Identifier:
keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:18:14:c1:ee:01:a2:9a:df:53:df:b8:71:aa:df:d9:a9:04:
b7:87:09:c2:13:4c:70:a8:31:50:1e:67:b6:83:0b:8f:3d:e9:
10:47:e1:a6:f0:c5:34:f1:69:52:bc:bc:ad:15:d4:fc:78:98:
da:ee:18:fa:97:88:ab:65:47:c7:c8:6d:87:c8:5e:97:76:65:
8d:d6:03:c4:d9:6b:2c:5a:82:13:40:6e:3f:71:c9:86:99:af:
4e:04:1e:ad:77:ab:03:c9:d4:5d:7c:c7:b1:a5:9f:de:e7:5a:
2e:7f:a0:a6:9a:6a:2b:5e:89:02:e4:47:f9:57:47:18:be:db:
cf:cf:c0:c4:4b:0d:37:2b:6f:ac:4e:52:0b:29:4c:f0:a2:24:
0c:8d:30:cb:0a:d7:3b:87:5b:6b:93:1b:3e:51:d9:71:94:b9:
7c:47:69:37:6e:3e:d6:ae:78:09:10:7f:8f:d3:39:98:b1:23:
47:94:07:0c:7f:ff:8c:27:47:13:57:7e:f6:16:63:04:51:78:
40:1c:ac:68:a9:f4:07:32:1c:80:67:4c:d1:e6:bc:db:78:f6:
b0:61:16:d8:7e:82:53:79:00:89:1c:f4:bf:80:0a:88:c7:24:
6c:0e:a2:88:01:09:59:1a:c3:18:4a:61:8b:98:e0:e7:cc:05:
57:19:64:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:59 2025 by rpki-client