Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: hg/9Ogq52dAbYUGjDu6lOv8uVOBSKB9mN6pd2kwZXys=
Subject key identifier: 61:FC:05:81:E9:A8:09:23:DC:A2:87:99:BD:30:A8:88:D4:56:AC:99
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 019A4EF4E145C6DB4A9FAA2AC0CACFEF1264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:02 +0000
Manifest this update: Tue 04 Nov 2025 13:01:02 +0000
Manifest next update: Wed 05 Nov 2025 13:01:02 +0000
Files and hashes: 1: 2MtCsLRfRRVkmWmmR_RgvP_iiYM.roa (hash: HuLQbolqCGZmiUhvPO/wiFvtWi3Okwmgccu/aBpptuc=)
2: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: Ew+Bhmq56id841A9Wt8pDJjKy+stszOXn1xZ5lbnklk=)
3: S87qjShx0Cde64tPkPpF-gZYMZE.roa (hash: KfR58Ep5CQd0S3bEgqtjtqAMWmdjTVJqVmZhBaCwNRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:e1:45:c6:db:4a:9f:aa:2a:c0:ca:cf:ef:12:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Nov 4 13:01:02 2025 GMT
Not After : Nov 5 13:01:02 2025 GMT
Subject: CN=61fc0581e9a80923dca28799bd30a888d456ac99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:96:40:4a:2b:ed:15:46:2f:7e:71:a3:81:a9:
be:d9:28:56:37:b0:5d:b2:16:c3:1c:c2:62:40:49:
20:52:e8:7b:d2:61:a9:89:ba:57:bf:ef:47:18:21:
02:f0:35:56:a7:f4:aa:02:16:5f:ab:4d:72:99:ae:
91:bb:ec:d7:d3:11:91:75:bd:e5:52:ad:7a:15:d0:
38:75:f6:72:5d:ec:3c:f1:c8:bd:c7:19:cb:be:f3:
a1:79:69:40:9d:f3:29:4a:ae:c7:0a:61:2d:d9:25:
54:97:e1:14:53:2f:3a:b7:ee:0c:f0:ef:6a:4c:f4:
47:64:10:98:aa:67:25:8d:35:3b:61:bf:2b:7d:4b:
47:42:c7:cb:35:55:bc:90:5a:08:12:30:5a:f4:5f:
7d:e0:67:dc:35:f4:ba:d3:0d:73:c0:49:6e:74:5f:
32:da:bd:9a:95:80:46:e2:24:c6:0e:c5:d6:03:ec:
2e:4c:3c:25:b7:8e:76:34:11:21:f9:79:de:bf:ba:
45:72:b8:09:ff:5e:14:1c:98:28:ea:d9:46:d4:19:
78:17:b8:77:df:7e:49:3c:07:ee:ec:5b:62:df:8a:
d1:cc:7e:72:76:f6:db:f6:c9:aa:8b:a8:99:fd:00:
bb:59:eb:2f:84:b3:90:0e:bc:c3:7b:7f:a3:55:70:
76:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FC:05:81:E9:A8:09:23:DC:A2:87:99:BD:30:A8:88:D4:56:AC:99
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:21:88:66:f8:99:33:a6:b2:a5:18:4c:91:ff:64:db:51:0a:
60:fa:b8:e9:19:39:32:07:b5:ef:12:77:b3:42:e4:2f:cc:42:
7f:b1:94:ee:09:b2:3e:57:40:9d:8c:6c:c4:47:44:7c:57:1a:
8b:58:14:97:52:3c:d9:c7:5d:bb:7d:f3:2e:57:54:d9:3a:ad:
2e:76:e7:1c:e9:7a:49:9c:0b:dc:1a:f5:9f:ba:59:b1:c0:42:
26:af:7b:2d:8c:af:64:9d:6f:73:70:1f:14:0b:0c:f8:36:41:
15:0d:d8:f2:4d:c5:aa:95:2c:67:d4:08:04:b4:04:8b:1f:21:
f2:54:cb:59:72:0c:e1:17:cb:e2:c4:e8:a3:c2:97:46:7f:65:
4c:f4:00:78:a9:00:4a:7f:7b:d6:c0:68:9b:e6:9d:58:dd:b6:
76:6b:d3:3c:56:4a:9d:7c:16:da:cb:e1:b3:78:cb:15:89:21:
52:1e:52:85:5a:01:e8:13:eb:d3:a7:a6:b5:8a:89:ad:2e:5e:
e3:a7:3b:94:e7:3b:76:97:1b:c2:23:30:d0:29:ac:5c:57:3e:
27:4b:00:95:62:3b:6c:aa:51:74:e2:7b:96:71:5d:6a:71:b8:
98:8d:fe:69:da:9a:59:50:bf:0a:19:e7:c4:e2:86:b0:58:5d:
79:ee:c5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:20:27 2025 by rpki-client