Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
File: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft (raw, json)
Hash identifier: fb8TOfG/GJDzBJSacZyl6fbirO10jOuJDEJRb3zW5BA=
Subject key identifier: AE:FB:6E:EF:F3:C5:CA:3C:D4:AC:94:1C:E3:D7:BA:8E:A5:B2:50:16
Authority key identifier: DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
Certificate issuer: /CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Certificate serial: 019A725CB91DC5D52FBA2E4E9BC2AB04F256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:01:10 +0000
Manifest this update: Tue 11 Nov 2025 10:01:10 +0000
Manifest next update: Wed 12 Nov 2025 10:01:10 +0000
Files and hashes: 1: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl (hash: cK7rh1gEdi+9Era1CH39iVvpUk+dApmx8pInEF0fm5w=)
2: aKn5wX9zpC6koraTjDd3gqhXdek.roa (hash: UCw+VdmiwuxVJRZ+XJIJQKAozSvDmGpk4Pb8r0Al3WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b9:1d:c5:d5:2f:ba:2e:4e:9b:c2:ab:04:f2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Validity
Not Before: Nov 11 10:01:10 2025 GMT
Not After : Nov 12 10:01:10 2025 GMT
Subject: CN=aefb6eeff3c5ca3cd4ac941ce3d7ba8ea5b25016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:33:2b:a0:8e:48:02:d1:d0:e5:83:a8:d5:47:
e5:58:ec:f8:d5:8f:38:6e:31:fb:d1:e4:58:0a:e4:
48:37:ed:19:7b:ee:69:cc:ce:b5:23:64:9b:34:ae:
25:81:da:ec:e7:a2:05:dd:38:22:c4:e7:e5:f0:7f:
bd:a3:77:e6:0a:c6:f9:80:4b:ca:a2:bb:71:66:1d:
cb:43:bc:62:46:69:13:f5:da:6a:8b:63:08:43:ae:
5e:5a:dc:88:e3:a0:18:a6:c0:cf:e7:75:6b:d8:7b:
b8:18:53:2a:f4:5a:c8:74:e4:48:11:45:16:81:93:
0b:28:09:4f:57:13:4d:f8:22:51:99:0b:89:cd:fa:
86:5b:45:fa:e1:af:70:65:40:cd:7c:95:8d:17:41:
b6:00:0b:1f:72:e5:6f:f6:be:43:a3:c7:5d:70:b7:
77:6b:34:6a:a8:e6:be:98:25:b6:27:75:21:dc:12:
5c:93:7d:2d:86:45:78:b3:d3:b6:cf:02:d1:83:17:
94:52:23:ec:e4:40:fa:ce:cf:93:61:c5:c3:62:17:
45:0d:3e:39:3f:0b:65:3c:50:96:ec:34:64:14:73:
3b:54:98:f4:28:99:d4:59:1c:99:0b:ac:a5:7a:d3:
7d:7d:96:8e:81:94:00:a4:2e:1f:81:ac:0e:4b:dd:
4c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FB:6E:EF:F3:C5:CA:3C:D4:AC:94:1C:E3:D7:BA:8E:A5:B2:50:16
X509v3 Authority Key Identifier:
keyid:DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:82:56:75:6f:04:f8:bf:09:58:9d:0b:ad:91:ac:e3:20:2e:
cc:a9:20:c2:00:c6:b5:c6:92:20:67:17:12:65:95:b0:f3:b3:
73:e6:a9:ac:7e:6a:28:f7:58:23:04:4d:65:6d:f0:00:60:fc:
4f:39:72:42:3c:a2:48:af:ef:70:a7:77:65:a6:34:f7:53:f7:
79:63:20:89:2a:29:0f:83:d8:54:65:35:72:be:f9:8c:3f:3c:
31:2b:e2:c8:54:ba:bc:81:e0:00:36:15:66:0a:1e:f6:40:f5:
97:9e:89:c2:2d:1a:05:26:fb:54:42:25:d5:e9:25:25:46:34:
97:3d:fd:bf:7c:08:ce:c6:59:d1:8c:0a:d5:83:a9:22:04:08:
97:60:fd:d6:12:cc:30:87:3e:a4:b4:0e:f0:e2:f0:48:18:85:
19:d5:28:a9:b5:9b:9f:8d:cb:0b:9c:3d:ce:e5:60:19:f6:ba:
3f:13:82:2d:1f:dd:06:de:d9:18:6d:a7:45:d3:c5:54:56:3a:
74:f7:5a:6d:f3:00:c3:37:54:f5:1c:84:b8:ef:a7:4b:44:0a:
ee:54:31:cf:da:22:c3:a4:20:fe:21:32:11:05:e7:9b:2a:7f:
e9:93:0d:a4:e4:85:7c:36:f1:50:60:98:46:f5:49:e4:92:67:
c3:17:4b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:04 2025 by rpki-client