Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
File: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json)
Hash identifier: hoE90MO9ejxVt7erlog5sxWayl0QZ/stfXTNsLFAgbg=
Subject key identifier: 34:7A:4E:BE:CF:DB:8D:17:20:54:B0:A4:1E:5F:96:4E:9B:81:20:42
Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
Certificate issuer: /CN=dceb548762c7d4caccb616d819ce95cf627b2021
Certificate serial: 019A70DC30DA2C3AFFBF2AA497F1E0B8C595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
Manifest number: 1361
Signing time: Tue 11 Nov 2025 03:01:09 +0000
Manifest this update: Tue 11 Nov 2025 03:01:09 +0000
Manifest next update: Wed 12 Nov 2025 03:01:09 +0000
Files and hashes: 1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: vEz/e7o59BQwj4uEoHrstm+R8Hh+1PHk90yODEemVLc=)
2: yvHmtz-vd__QGyK6PoEkr_n-Dok.roa (hash: K4rgADfkHdT22x5s6vfWG3HXGINmJUAubhmd+BDk2vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:30:da:2c:3a:ff:bf:2a:a4:97:f1:e0:b8:c5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021
Validity
Not Before: Nov 11 03:01:09 2025 GMT
Not After : Nov 12 03:01:09 2025 GMT
Subject: CN=347a4ebecfdb8d172054b0a41e5f964e9b812042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:b4:52:1a:c7:c7:6e:12:09:77:10:a3:fc:
9d:55:57:df:65:82:f0:93:83:25:a5:a1:2a:b2:d1:
32:89:69:11:00:70:15:b1:8c:97:72:a8:18:1b:dc:
76:d1:97:48:5d:50:3f:bb:89:bd:0b:6e:d0:06:f7:
c1:7b:19:7a:3d:81:9b:b7:32:50:f7:af:f1:a2:e5:
3e:54:cb:e7:15:3b:97:f4:fb:5b:9c:be:b7:32:13:
4d:6d:74:62:64:30:6f:8e:7f:28:2f:e4:9a:d7:af:
df:af:20:71:cc:3e:f5:c8:45:0e:bc:65:e8:55:02:
e4:0b:07:10:05:58:25:06:54:b8:87:43:37:44:55:
aa:aa:1f:f0:7b:5f:dc:49:c3:0e:c1:57:dd:c1:9f:
80:40:d1:70:6d:7b:fa:d9:e3:34:9a:6f:54:8f:d4:
3c:11:16:d1:ef:b1:09:52:a8:ec:5d:c2:d3:a0:45:
90:11:3e:5f:1b:9d:a2:fc:f8:ef:61:97:f8:f1:c8:
31:60:e8:50:38:26:94:db:5d:51:ce:76:95:b8:a1:
05:09:00:82:db:b0:8d:3a:02:00:e0:86:51:ab:55:
da:b1:ee:e8:f4:2c:1a:7f:75:e1:6c:9a:7e:3b:52:
99:70:b1:19:dc:42:1f:9c:84:69:9d:17:ef:dd:58:
b8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7A:4E:BE:CF:DB:8D:17:20:54:B0:A4:1E:5F:96:4E:9B:81:20:42
X509v3 Authority Key Identifier:
keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:73:11:34:cb:97:36:9d:16:ad:36:f6:15:23:c1:05:69:be:
ac:da:97:0c:74:18:06:66:19:ef:0d:57:09:ec:8d:7f:10:71:
01:33:37:e4:5a:ad:00:35:5e:47:eb:f2:64:9a:55:80:c0:76:
31:64:80:f8:8d:7c:82:bd:9a:ae:ef:72:d3:cc:87:5c:ba:52:
23:27:54:ba:93:c6:87:24:9b:5a:ed:73:ef:9b:86:3a:3b:ea:
fd:22:12:22:16:ce:0a:f7:00:93:a3:e2:37:0b:69:3b:0c:9a:
cc:7b:86:05:5a:3a:d8:89:f5:96:26:d7:bb:f4:ca:80:bb:97:
81:dd:87:fd:4a:61:4e:2f:13:b2:72:5e:14:75:71:a5:02:f9:
67:02:7e:3d:c0:06:91:e9:4d:47:30:02:26:a1:c5:86:2b:2f:
d3:08:d4:e5:aa:70:f9:73:4c:63:09:34:81:25:a7:09:c0:9f:
4d:2f:05:1f:80:eb:d3:2b:4b:97:48:87:24:73:cb:22:c3:50:
b8:ba:83:32:23:0d:08:59:43:de:d8:e2:b6:e2:b1:1f:be:57:
e6:f7:81:bc:49:31:f1:0c:d5:40:41:e7:f7:93:84:21:34:6f:
32:63:dd:ad:94:06:4c:54:87:7a:bf:42:9b:39:e2:f4:53:f7:
15:0b:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:10 2025 by rpki-client