Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier: UNCOvLQJO4ICZO43P9qfPwDhscnLckBCmFyRHtfi3oQ=
Subject key identifier: CB:FC:D9:0F:A4:C4:CB:42:51:BF:9A:00:08:FE:CE:9F:EE:88:A5:F5
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 019A54F623DABA3D454F1207E907D77A7EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number: 10F6
Signing time: Wed 05 Nov 2025 17:00:08 +0000
Manifest this update: Wed 05 Nov 2025 17:00:08 +0000
Manifest next update: Thu 06 Nov 2025 17:00:08 +0000
Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: jptveHNS4eK6dWcLCmtg/esJGpzMP4Kph9MSrNkEoEA=)
2: HbrG3H8i4MVchy7ux-rBNewfgN4.roa (hash: ZEnkqludW6ORRLo4vaUnR4azLQNvPJWfXdiBq5telHQ=)
3: eqT6wyPQANegQWczS_E8NsRIGH0.roa (hash: uVTDWyi87OupvvigMLyo7l17Ar6OD8Dv20/y/RB28lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:23:da:ba:3d:45:4f:12:07:e9:07:d7:7a:7e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: Nov 5 17:00:08 2025 GMT
Not After : Nov 6 17:00:08 2025 GMT
Subject: CN=cbfcd90fa4c4cb4251bf9a0008fece9fee88a5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:b7:63:33:d0:c3:9d:36:f9:d2:a3:eb:e8:
64:6b:19:1d:a8:1b:c0:3e:1f:7a:6d:bc:dc:28:e3:
89:25:73:eb:a1:52:3a:70:bd:d0:44:17:53:2d:49:
ab:24:6a:76:31:56:22:bd:25:f4:8e:c5:86:fc:b4:
f2:a7:63:71:52:af:95:0f:d4:0e:7b:6b:60:7a:ce:
af:89:d1:e9:13:fd:50:fd:18:86:7a:c4:76:54:c2:
ee:a8:0c:88:6b:66:e6:4e:19:67:0a:96:53:3f:f4:
7b:4d:3d:dd:41:81:f0:ad:bd:5e:30:0b:d2:88:4e:
8e:5e:9c:d3:88:32:53:8b:81:72:0e:8f:36:af:9d:
bd:3f:f6:2e:30:d1:44:9b:42:8c:a0:17:27:61:7f:
a8:1f:05:a0:92:46:de:85:80:96:7e:92:e1:50:af:
d7:62:5b:c5:62:99:fd:c3:20:94:df:a0:35:b6:7c:
25:29:f4:7b:95:1e:ae:86:41:8a:3b:90:21:a1:d5:
fe:97:3b:89:e8:b8:0b:80:8c:2e:67:7c:9a:fb:43:
ef:97:4a:94:06:98:52:68:71:46:0b:f2:aa:1f:26:
0f:40:ad:bb:29:20:bb:29:7e:7f:e2:70:ed:33:14:
7a:e8:76:cf:de:9c:8c:ad:ec:b7:a7:c9:f2:80:05:
09:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FC:D9:0F:A4:C4:CB:42:51:BF:9A:00:08:FE:CE:9F:EE:88:A5:F5
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d3:f5:26:f4:47:a0:d2:f2:29:d3:1c:95:82:8c:47:92:dc:
f5:74:cd:4a:47:d6:dc:fc:e2:93:f3:65:98:50:84:3e:23:bb:
a9:e1:c8:92:09:f3:64:bc:ef:24:69:ed:23:39:c8:4f:d5:df:
64:d4:79:9d:c3:12:d6:33:31:ce:88:7c:70:1a:44:63:33:22:
8b:ad:9f:c6:d1:7c:00:9a:f1:e3:62:c7:14:0b:af:6b:bb:41:
71:19:50:9f:bf:2f:f6:1c:f9:8d:e5:6c:e3:1c:89:7c:20:31:
51:cb:96:3c:3f:a5:b9:b7:27:ca:44:94:9b:47:5c:b2:a2:a8:
6e:58:cf:a3:63:75:02:62:03:61:fe:4b:a0:e4:ec:ce:74:d9:
b7:b1:12:b3:2c:ab:bf:bd:e5:bd:bc:c1:ea:25:7b:cc:be:28:
ba:38:a9:eb:2a:53:8a:ae:bb:f8:7a:1f:15:12:fc:ff:d6:07:
25:77:8f:c6:d2:45:08:70:ba:d8:1d:5b:a7:71:6c:e0:e4:7d:
39:b1:10:2a:23:24:a9:81:53:84:b2:33:82:1e:eb:9b:9d:2a:
8f:37:ba:17:df:17:6b:99:60:06:10:02:a2:44:62:ff:57:21:
d0:b2:44:b4:d0:6c:c1:ef:e2:50:cc:a1:54:48:c5:93:b1:9f:
5e:2f:17:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:40:35 2025 by rpki-client