Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
File: 3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json)
Hash identifier: P9o/IVJ5MGxgETDXj5B5wWYG8PVbAnB+rGsXl0HNdr0=
Subject key identifier: 15:A5:C7:FE:5E:C3:93:7F:C5:C2:F8:78:BF:32:62:07:EC:24:09:BE
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial: 019A71B91C34F2AF28FC9EC497FD2F9C861C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
Manifest number: 0E55
Signing time: Tue 11 Nov 2025 07:02:27 +0000
Manifest this update: Tue 11 Nov 2025 07:02:27 +0000
Manifest next update: Wed 12 Nov 2025 07:02:27 +0000
Files and hashes: 1: 3f1U8HcG3gg1d7c-AMV0OeLqnk4.roa (hash: 6g/YiGFM7SXH1avma+AWhdPQYeSM8xFquer6wIrnMrw=)
2: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: s26/T2eeI+Txwo0P4sCSGLaRXmDpJR9qibBeG8uW3B8=)
3: LKSIMzg2qS8EWL02SO5YPjrz_I0.roa (hash: ZtwqDuK6zfdHnP5iApdAnlCr/naZTEL8mOtuOOiHgUY=)
4: uKO3HquanWKUmJ90M8YK1DIe1PA.roa (hash: XUrZ548wn+DveWLDDAs++NbjxnozKfTkNs4dRtLEX4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1c:34:f2:af:28:fc:9e:c4:97:fd:2f:9c:86:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
Validity
Not Before: Nov 11 07:02:27 2025 GMT
Not After : Nov 12 07:02:27 2025 GMT
Subject: CN=15a5c7fe5ec3937fc5c2f878bf326207ec2409be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:90:98:ef:1e:42:b9:bf:1b:f2:ab:aa:df:
3d:64:84:80:f1:a5:a9:0c:e4:8f:2a:f6:c9:4d:ce:
2d:96:68:59:eb:f5:93:11:ca:2c:9d:cb:6a:5c:af:
8b:35:10:c7:2a:a9:57:55:ed:c4:6f:22:92:ec:a1:
2e:9b:88:e6:87:f8:b6:6c:a5:de:84:9d:56:de:53:
bd:fc:fc:77:a1:c7:c8:96:4c:2e:33:63:fc:27:16:
94:6f:19:22:f6:28:54:88:ab:21:76:81:e0:b7:21:
46:64:57:78:8a:f0:95:60:84:2b:26:c8:59:66:d2:
ca:ed:28:25:f8:99:19:3c:10:7a:e8:2f:40:b3:b0:
82:48:d1:1f:93:82:9d:e3:f7:fa:41:eb:e4:f1:74:
75:89:66:2c:a9:35:c9:17:ca:0a:38:ef:d6:ee:30:
a6:c4:a6:50:50:ec:23:92:e5:23:54:78:ba:25:f6:
a2:57:ae:9a:4a:62:6c:1b:5e:a6:5e:14:0f:17:44:
c9:13:c7:01:2c:e7:da:f7:fa:a7:77:70:00:ef:d7:
b1:ff:aa:e5:26:16:96:27:24:bf:ec:ce:8c:d6:02:
cc:ad:73:20:53:37:9c:65:88:e6:11:9f:fd:47:46:
43:82:59:9f:85:64:5b:48:32:c1:3e:90:96:b4:98:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A5:C7:FE:5E:C3:93:7F:C5:C2:F8:78:BF:32:62:07:EC:24:09:BE
X509v3 Authority Key Identifier:
keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d3:c4:ec:75:0a:e6:b7:d2:4d:8c:b2:81:28:40:da:35:c2:
5e:e7:8b:11:76:05:76:de:9b:11:07:4f:d5:28:89:4b:13:ac:
95:08:3c:e6:30:3c:48:81:b9:ba:62:cd:a5:9b:1e:be:2a:34:
2b:37:02:34:c5:aa:15:a8:11:57:e2:31:56:3f:10:a1:fc:98:
43:11:9b:f7:9a:e0:67:f2:aa:46:60:81:a4:1b:4b:9e:06:8b:
cb:15:4e:a0:8b:d8:0e:18:15:06:f2:48:88:9f:08:64:c8:b6:
5c:89:10:e4:47:18:25:c6:1c:15:67:3e:41:1c:1f:f4:50:ed:
98:1c:56:2a:27:68:17:c0:0f:32:25:b3:0f:ee:8a:ea:11:9d:
c6:b7:86:65:4e:d8:e1:6b:c3:7e:c4:b4:8c:1c:88:67:74:45:
86:ac:e4:65:13:5b:6e:4e:0b:44:c1:fb:24:24:27:9f:77:ed:
50:30:4a:35:8c:3a:a2:52:bc:1b:8a:27:4a:c4:59:ca:aa:55:
8f:06:b0:c6:eb:71:af:26:97:f6:55:32:d4:27:0d:95:a4:fa:
58:c3:95:b8:90:09:1a:f2:a2:cb:0c:1c:18:b9:4b:83:a0:54:
97:6b:b8:6a:3d:40:ec:c2:bf:00:ad:37:df:98:e1:a2:bd:21:
35:5e:e7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:44 2025 by rpki-client