Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
File: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft (raw, json)
Hash identifier: 8Fcau3ATxsPMDdyeBk++uze4fbeKCF7TX1pqhQPN8TY=
Subject key identifier: 52:70:D3:5A:03:F0:5D:B6:2B:96:BE:C1:26:51:90:A1:AC:22:18:CB
Authority key identifier: DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
Certificate issuer: /CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Certificate serial: 019A72CA1D61EABC24562B08CED81BFF294C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
Manifest number: 0D7B
Signing time: Tue 11 Nov 2025 12:00:39 +0000
Manifest this update: Tue 11 Nov 2025 12:00:39 +0000
Manifest next update: Wed 12 Nov 2025 12:00:39 +0000
Files and hashes: 1: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl (hash: jnNfphpt9wpRhQ8WlLjQcaj6yo4v9HqvxHetr1wJd74=)
2: bJQvsBvbQPoYZP2_LHbwvNkWsqI.roa (hash: 6bSavq+Amxtx/G0AW8vYM/flHBEJUHj3DU6R3v4xOug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:1d:61:ea:bc:24:56:2b:08:ce:d8:1b:ff:29:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Validity
Not Before: Nov 11 12:00:39 2025 GMT
Not After : Nov 12 12:00:39 2025 GMT
Subject: CN=5270d35a03f05db62b96bec1265190a1ac2218cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:99:8c:1b:7c:51:c5:5d:1f:44:4f:c9:e9:
1e:3b:3d:61:4b:72:57:b8:15:51:63:70:e6:43:1c:
1c:ba:05:c3:95:7e:b6:ee:9a:7a:bf:40:b4:b4:3e:
aa:4b:e2:9c:04:3f:78:4e:dc:37:63:5d:7a:10:30:
e8:85:dc:50:45:4f:2d:88:76:2d:b9:89:19:41:aa:
c9:35:2c:b2:cc:aa:21:13:bc:0f:24:10:e6:13:12:
2e:4d:14:61:cb:ff:27:d3:75:64:77:41:32:f8:9d:
72:1d:90:ac:bc:29:10:c9:f5:29:d9:13:29:24:5b:
50:6d:ca:9a:40:22:b6:b5:41:99:79:e7:52:e1:d9:
a0:c6:88:fa:c5:1f:b8:ed:93:69:5b:67:24:0f:dc:
4b:9f:a5:4d:8e:a5:ef:fc:b8:a8:a2:24:79:10:49:
65:3e:55:9c:aa:c4:95:02:d3:14:65:0c:0f:11:71:
ce:ac:9e:73:ad:28:09:74:fd:37:0b:59:e3:91:f5:
39:77:56:b7:30:78:6c:79:0c:30:8f:81:da:de:18:
f9:27:16:83:b0:db:7b:ce:c7:80:f2:31:5a:01:a6:
34:ed:cf:90:a0:00:b4:99:66:56:c4:2c:d4:d6:b4:
d9:62:f2:c4:83:df:77:02:a3:43:e8:2a:26:55:28:
c9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:70:D3:5A:03:F0:5D:B6:2B:96:BE:C1:26:51:90:A1:AC:22:18:CB
X509v3 Authority Key Identifier:
keyid:DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c3:1d:b6:b1:4a:54:c1:eb:66:e4:04:d3:9c:da:10:0f:e2:
4e:5f:f0:91:fd:47:61:4f:1e:46:ba:66:45:c9:69:bf:16:10:
79:6d:5a:37:21:70:48:19:c1:64:f4:7d:32:e5:43:4d:d6:b2:
01:3b:6c:a6:a7:66:10:69:10:08:bc:9f:52:b4:3f:18:a9:a1:
ad:ba:a6:45:83:01:16:9f:9b:48:8a:99:9d:77:41:08:e7:bd:
27:90:b3:9f:a6:63:80:6d:02:be:7c:7a:c3:4a:e8:0d:e4:6c:
50:f4:31:7b:60:41:f2:91:61:1c:bf:c9:cd:12:c0:bb:45:2c:
dc:ce:0c:bf:04:02:ed:fe:46:fa:4f:b0:e9:bb:a8:d8:8e:97:
3a:6c:e9:19:23:f1:90:cb:43:7e:41:b5:20:ab:21:b8:d1:74:
ca:c0:fd:73:94:b0:d0:56:dc:ae:2a:53:8a:57:c9:23:f5:6b:
30:8b:3a:1b:47:1a:06:cf:8a:fe:7b:79:b8:a8:83:11:98:9b:
4b:5a:01:17:fa:38:8a:4a:75:c2:30:ae:2b:70:e9:75:8b:6a:
bc:a5:c5:2d:6d:39:49:64:55:cc:79:f0:e2:28:00:9c:cf:7f:
f5:78:6a:15:b4:c3:c5:91:95:df:69:4d:80:ca:71:7b:43:bb:
91:c3:12:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:55:11 2025 by rpki-client