Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
File: 0x3RpRTTp-Pf24v7ddfSTtmNR58.mft (raw, json)
Hash identifier: rXaajf6IJPrlJ4cGrrI/UXItdd0czwyNS22Wl01rso4=
Subject key identifier: 16:5D:43:40:38:6E:C9:86:B8:5A:27:02:1E:60:BB:E9:CC:45:22:ED
Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
Certificate issuer: /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Certificate serial: 019A725C8BE93EAA245E68E782F549D964C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
Manifest number: 172F
Signing time: Tue 11 Nov 2025 10:00:58 +0000
Manifest this update: Tue 11 Nov 2025 10:00:58 +0000
Manifest next update: Wed 12 Nov 2025 10:00:58 +0000
Files and hashes: 1: 0x3RpRTTp-Pf24v7ddfSTtmNR58.crl (hash: JVlESJaHULPOM5aXPrlFiqltkqRx9paGlW8W9FK3OBA=)
2: JOdkDpvp0vkWhvJ9lV0dWUTL_74.roa (hash: Yn5hV+sSL6Zg2EJjKD6GZsY1cY5bsq3d8VKm7ARDueo=)
3: Mx0tomllVsmkxbnh1iU8_2PCyj0.roa (hash: 7kB7d7CTYtow392lbDCXYANcYe1E5mU3cWH2302D1Ck=)
4: TiEyxKmyiS65-0wzRPZF8VUxgEI.roa (hash: O61YlumzohkeBoQeKX9n1/69jzfPg7pNTilEHThyZVQ=)
5: UZGcM2ffX81NtAhfATE7LMKcmU0.roa (hash: IHojeJZnyEKNZzsFj36mgVJwIZkRWe7Nk65gWxDYXn0=)
6: gWauuati_t4mDyHK5P6-vGRw5tI.roa (hash: 8Gg051rcVEVxLbKS4zWCYakDmEwjk+i+o+ush3e3CSQ=)
7: rtkk5gT-jAJhBoaE_BQPXocOEfU.roa (hash: v/MP7pEa6ZGIvq0Wu6Fpus/nOHl8IEXjbt8QwhltqFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:8b:e9:3e:aa:24:5e:68:e7:82:f5:49:d9:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Validity
Not Before: Nov 11 10:00:58 2025 GMT
Not After : Nov 12 10:00:58 2025 GMT
Subject: CN=165d4340386ec986b85a27021e60bbe9cc4522ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:73:32:1b:ad:bb:e5:6a:66:d7:30:a0:4b:
5d:14:85:41:2f:f8:89:42:ad:3d:69:67:b7:d2:81:
0d:36:c1:a9:50:33:44:17:69:b1:9d:81:a1:92:e9:
74:1e:32:c8:d5:98:95:43:02:b6:49:c4:dc:e7:67:
53:fc:c1:f5:b3:79:87:25:f9:40:95:68:c8:23:8d:
a7:4d:37:96:fc:b9:61:99:04:19:1e:3c:24:0f:08:
61:8c:90:49:36:2e:ba:26:23:ea:80:c3:d5:ca:47:
2e:bd:d8:0c:ac:da:06:6a:a1:f0:36:4a:41:9c:42:
27:36:61:57:d2:4f:7b:df:8c:fb:2d:ed:ce:77:06:
3b:55:68:e2:e1:c2:f1:e7:b9:d2:62:c7:78:fc:49:
38:e2:8c:a8:b3:a5:8e:c5:c7:e8:b6:a1:38:14:73:
89:f2:69:0d:8d:dd:38:80:ec:90:e7:ad:14:97:e0:
63:28:b1:60:f7:df:16:b7:e4:65:1b:39:d8:bb:24:
ab:31:af:ae:0e:4e:26:06:89:04:e8:ff:f4:e4:62:
89:8e:3f:77:c9:9e:2c:c4:fc:2e:9c:bf:4a:49:a3:
68:73:0e:1a:ac:0c:e8:9c:37:4e:82:da:cd:da:31:
7d:5e:37:16:76:ad:16:08:50:11:87:0f:3c:6c:66:
2b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5D:43:40:38:6E:C9:86:B8:5A:27:02:1E:60:BB:E9:CC:45:22:ED
X509v3 Authority Key Identifier:
keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c0:6b:b6:47:0e:bb:9e:46:c8:30:42:22:e6:7e:89:54:a8:
13:28:34:ea:40:61:c2:2e:e3:c4:6c:12:fb:38:ca:5d:e4:37:
26:cf:d1:0a:02:0a:8d:a9:f8:12:61:32:fc:7f:0a:17:3f:b6:
f2:52:f2:96:3c:48:e0:64:a9:23:55:f6:3d:a4:bc:31:70:96:
19:56:01:de:0a:f4:8d:64:a2:8c:8a:6b:a1:98:35:db:ef:9b:
f8:0e:9f:2a:87:a9:e7:ee:b6:e3:80:03:58:4b:48:78:f5:1d:
2b:be:69:eb:0e:ee:c0:d6:be:e1:03:84:75:9d:61:80:60:bf:
9f:7b:ee:e8:7b:3f:cc:5a:a3:57:d2:8c:f7:0e:d1:3e:e0:1d:
59:a7:aa:d1:a2:31:21:ae:f0:97:f2:e1:65:07:64:fc:47:91:
d9:3c:ef:9e:c1:3a:88:b4:73:d5:35:ab:11:63:cd:81:c6:ab:
97:f4:ff:5f:2f:0b:c5:9c:91:86:08:d5:66:8c:e8:2f:27:20:
11:19:58:f0:5a:22:81:de:fe:07:68:c2:ce:57:c3:24:d0:c2:
33:93:0a:2d:69:f0:c9:33:12:17:8b:8a:22:7b:60:1e:b2:6d:
34:a2:07:30:dc:65:d0:3c:68:89:d9:45:27:db:d5:7c:67:b0:
a8:b5:12:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:11:30 2025 by rpki-client