Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
File: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft (raw, json)
Hash identifier: USJNb1R0ZGsfwPzJYe1sNKjsMPsUeqIdkD1OMDjpQ9E=
Subject key identifier: 01:25:31:14:46:AB:21:EC:36:0B:29:F0:AC:D7:ED:84:8C:F6:E6:FB
Authority key identifier: DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
Certificate issuer: /CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Certificate serial: 019A73A681758B82753237AD3524930FFF44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 16:01:23 +0000
Manifest this update: Tue 11 Nov 2025 16:01:23 +0000
Manifest next update: Wed 12 Nov 2025 16:01:23 +0000
Files and hashes: 1: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl (hash: 27A7oJUDV7knR81L8m80d0+TEHjSU/kBlsaz9T1Toqo=)
2: XQd1c0isqEth9h07f_gdrmhW6kM.roa (hash: WoVAodjsDqf5sS0K6LPcCANkMFHDsRKs5Hf+/9kb228=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:81:75:8b:82:75:32:37:ad:35:24:93:0f:ff:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Validity
Not Before: Nov 11 16:01:23 2025 GMT
Not After : Nov 12 16:01:23 2025 GMT
Subject: CN=0125311446ab21ec360b29f0acd7ed848cf6e6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:f2:c6:a9:4c:8c:72:b6:0a:f7:0e:bf:89:
e3:5c:3b:16:63:0d:32:1d:5b:e1:09:e7:d5:fb:b9:
ca:64:df:cb:9c:4b:05:f5:6a:df:91:32:fe:0b:19:
1e:8c:83:86:9d:90:67:60:91:cf:4f:fa:be:e8:fe:
02:14:50:b2:ac:d4:56:b6:68:68:05:3f:fc:53:e0:
d1:88:0b:7a:ef:07:16:5c:ec:0d:bc:ff:70:2c:d2:
68:26:05:e1:87:44:25:5c:5f:89:de:14:79:d2:c6:
cd:e2:aa:4a:3e:44:49:74:10:19:74:46:2d:13:d6:
bb:a1:5e:f6:4b:6e:8c:bf:72:e9:ea:58:99:be:33:
88:b6:f4:3d:a2:f8:ff:53:b3:fa:b1:f1:2f:3d:bd:
ea:a7:d5:83:00:be:f7:bd:03:90:41:74:33:8c:dd:
c2:55:65:db:e7:45:c8:bf:8d:8c:73:5b:4f:6e:8e:
77:b2:d5:87:21:21:04:1f:ef:59:80:84:b8:1c:77:
61:9c:38:fc:d4:03:ce:83:d9:30:11:21:ed:64:01:
d9:ee:27:6f:74:b8:23:9e:cb:ec:6b:29:5f:6d:31:
2d:ce:bc:f5:b4:bc:2f:ea:87:5a:90:c0:32:2d:cb:
83:06:8b:cd:d3:ab:a3:63:7b:bc:b2:78:b5:a4:16:
c3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:25:31:14:46:AB:21:EC:36:0B:29:F0:AC:D7:ED:84:8C:F6:E6:FB
X509v3 Authority Key Identifier:
keyid:DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4d:18:b4:40:ee:7c:dd:5e:ae:b5:56:14:31:d0:62:4d:cb:
cc:ae:a8:8d:53:9d:34:0a:cf:fe:4c:53:59:41:e2:a6:e2:ee:
01:c0:20:c5:3b:3e:cc:2b:fd:1a:05:96:91:cd:b0:f8:cb:58:
a9:fa:7a:fc:99:d6:55:59:b1:76:97:42:19:56:a4:2c:6f:8c:
51:ab:46:d7:40:76:72:7c:9b:66:05:12:42:d6:a4:8c:41:2e:
8b:95:f0:d5:ab:34:1c:ec:b6:ae:33:11:43:c5:00:49:96:bf:
12:09:11:b5:79:12:48:28:22:08:43:47:ae:0c:ad:51:9e:57:
35:11:ab:76:0f:1e:7f:a1:fb:a9:73:13:8a:9a:9f:dc:ff:ca:
38:16:6d:80:71:9e:2f:94:6b:3c:96:87:87:d1:39:fb:7f:52:
d4:1b:63:f9:4e:52:4f:ab:0a:e7:e5:f8:49:fe:97:37:7f:64:
9a:1b:3a:19:d0:57:85:e6:58:8e:73:92:ec:82:17:c7:98:39:
fd:b6:b6:7e:39:f7:d0:7f:ab:11:a7:2b:2a:d0:30:9f:53:8f:
49:42:c2:63:84:12:60:01:2c:1b:d1:a4:50:c8:10:3a:98:ed:
53:a5:3b:60:ab:03:52:6f:44:71:a2:a2:56:3a:7c:93:ad:9f:
46:a7:96:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:34:56 2025 by rpki-client