Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: WS9F1Zt+qeH/1PiO24F4UO2BGuy9mDY3nKbAl7zv2NE=
Subject key identifier: 01:47:1D:E6:F4:AD:2C:32:69:09:86:BD:40:C7:12:C6:C6:62:1E:14
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 019A70DC28BC95701B0C048077920DE33B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 125F
Signing time: Tue 11 Nov 2025 03:01:07 +0000
Manifest this update: Tue 11 Nov 2025 03:01:07 +0000
Manifest next update: Wed 12 Nov 2025 03:01:07 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: 6NGsBMkaI6flNCt7X36r3YsUiWWuZlAZZKFwsh2fHkE=)
2: _Sn3RhfY--fiVliyrSpcw_Dpx8U.roa (hash: 0DlsX3tbgemelzimR5EC4gu2Xnu0fF/hzb1n4QMYZI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:28:bc:95:70:1b:0c:04:80:77:92:0d:e3:3b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Nov 11 03:01:07 2025 GMT
Not After : Nov 12 03:01:07 2025 GMT
Subject: CN=01471de6f4ad2c32690986bd40c712c6c6621e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:22:7e:37:d5:c6:99:94:10:83:ac:69:ce:
c9:c0:62:e6:79:64:9c:78:5e:25:49:aa:b3:6d:25:
75:bc:76:6e:4c:f1:40:33:a3:7c:8b:a4:dc:c9:d8:
dc:0c:b2:d3:be:ff:5a:66:0f:71:30:42:89:18:b6:
79:3c:4f:ce:19:ae:a4:19:b4:a8:28:3e:91:35:6d:
4b:2b:7d:ce:4a:77:1a:e3:6f:98:f8:97:1a:9a:3d:
86:aa:aa:dc:e7:d0:65:67:45:6d:26:b1:54:c9:17:
28:bb:80:20:bb:1d:b2:b6:22:e3:ab:ec:e5:5d:b3:
62:1b:da:64:26:37:28:f7:22:38:e4:6e:40:0a:06:
d5:a5:72:22:4f:20:df:bd:bd:f2:12:ca:d5:3e:c3:
72:bf:02:14:2d:b9:95:01:cc:38:19:dc:31:7a:d3:
ab:5b:15:3b:ad:00:87:42:b6:5b:33:22:b4:c5:68:
f0:a6:4a:d3:23:d3:2e:b5:ab:51:87:c2:3a:05:fd:
55:f4:cb:8b:88:ae:d2:19:65:c5:97:de:ee:a8:7a:
e3:fe:94:0e:78:a8:7e:6a:05:a2:7c:9d:e9:4e:2e:
0a:4b:b4:52:69:26:a6:03:80:76:50:02:de:d4:a6:
55:55:07:0d:34:c9:92:ac:ab:a9:d7:85:41:bf:b9:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:47:1D:E6:F4:AD:2C:32:69:09:86:BD:40:C7:12:C6:C6:62:1E:14
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:a8:3e:b5:6f:46:e4:13:1a:e8:1b:57:2b:d7:73:dc:b8:6b:
ca:32:dc:ff:93:09:e9:bc:62:4b:a0:3b:da:00:82:4d:3a:91:
a5:38:1c:e4:b6:72:93:f6:31:3a:72:99:ca:cc:98:4c:29:2d:
02:a8:94:8a:ac:ea:71:1b:12:08:ba:bf:d7:fd:35:34:d5:a5:
83:35:1a:aa:fe:f0:6c:ae:e1:d7:ab:dc:ef:6d:9d:e7:fe:ca:
85:4d:45:f8:f3:66:d2:31:55:81:9e:4d:c8:2d:57:70:72:99:
3a:56:aa:cc:9b:d2:40:86:cb:a2:c6:9a:f6:a6:ab:23:37:b9:
58:29:14:14:02:fb:85:52:5b:42:48:2d:f8:85:0a:96:17:3a:
8d:a5:53:1e:df:e2:4c:ea:22:9a:35:da:ff:39:1d:0a:10:de:
df:fd:0b:60:63:30:46:ae:d5:77:11:38:18:1d:74:30:cc:08:
75:91:09:ac:df:4e:2a:86:d6:b9:28:e6:47:2f:58:c1:18:ba:
43:f5:fb:2d:e9:c6:c4:af:94:aa:f5:ea:a6:d4:08:49:74:4a:
c9:d4:0d:37:24:bc:f6:84:a7:ee:b2:d0:41:af:e0:8b:cb:ec:
a2:4d:aa:4b:ac:ce:d7:a9:00:82:81:ef:74:b1:da:74:e2:25:
2d:67:4c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:20 2025 by rpki-client