Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
File: 3vwmhsKavvGPQLMOfpUTJHpm7xM.mft (raw, json)
Hash identifier: l46X1KIko4iTM5C3lxhbOjcuKn3fhfNHHWujUuLprb8=
Subject key identifier: F7:F1:AF:43:C5:A5:DE:5A:D1:3E:F2:1A:F6:8D:62:0D:41:6E:30:AE
Authority key identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
Certificate issuer: /CN=defc2686c29abef18f40b30e7e9513247a66ef13
Certificate serial: 019A5074A9BFC213E5075D8C6211466C6DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 20:00:14 +0000
Manifest this update: Tue 04 Nov 2025 20:00:14 +0000
Manifest next update: Wed 05 Nov 2025 20:00:14 +0000
Files and hashes: 1: 2jede6KT-wWXlr-gV_HV5g4z3cE.roa (hash: mv6a2TTy4FTvxK1u9z+/AeZmzO5akrk+XnGtMMkB+UQ=)
2: 3vwmhsKavvGPQLMOfpUTJHpm7xM.crl (hash: i2/jEieYZccwkOv0FONA2gbksxu1HpmuaiUKUqhedZM=)
3: IJD_U3KWZ58BdYUivTasUkoSb14.roa (hash: QMy/+qKyMyM01JHQHllqOzvjbF1AM/QefZV5csA0T9s=)
4: NxF2Cyt5llnCNI_vXdmc9sDjjDg.roa (hash: R2BQ5eg/vIm8OWNUAn8Iiim/Pq6eL5zypKjZ8nuw8W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:a9:bf:c2:13:e5:07:5d:8c:62:11:46:6c:6d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defc2686c29abef18f40b30e7e9513247a66ef13
Validity
Not Before: Nov 4 20:00:14 2025 GMT
Not After : Nov 5 20:00:14 2025 GMT
Subject: CN=f7f1af43c5a5de5ad13ef21af68d620d416e30ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6b:48:db:3f:c3:0a:47:e3:6d:3b:37:75:90:
ca:76:3d:5a:1f:f2:3a:56:84:44:15:3e:ca:41:4e:
fb:c3:3d:ba:52:03:be:74:5e:fa:31:e9:09:e8:45:
fb:be:c2:8d:f1:29:79:94:8a:6d:2b:04:a3:bf:53:
95:e9:f1:65:09:32:6a:ac:4b:47:ed:fb:e4:3c:32:
be:eb:40:95:37:e8:27:36:47:32:94:af:00:86:e5:
33:c7:34:09:85:0b:24:26:79:15:a8:2a:3e:35:6b:
10:16:91:6f:8f:f0:17:ff:3d:66:41:5c:38:71:a4:
6d:11:fa:2f:53:23:d9:65:22:e0:df:c0:ea:45:a4:
aa:f4:e3:bc:7d:41:49:2a:72:4c:2c:53:fe:68:94:
30:9c:6f:1d:fb:b6:97:46:a1:f1:81:e0:4f:2c:86:
54:f8:e5:78:a7:57:37:ac:76:62:bd:bd:aa:0e:d8:
ba:e9:78:3d:a7:4d:5e:f6:e9:ef:c6:6f:4c:24:b9:
70:90:93:38:fa:e7:a3:83:ec:cd:a2:9b:17:7a:f5:
4d:0d:c9:5a:51:d1:c2:69:b4:90:89:e9:47:cb:14:
20:44:48:02:17:91:6b:19:68:a7:94:a1:c2:eb:56:
84:06:1e:9a:de:41:21:82:e6:1a:3c:bb:97:9a:c8:
75:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F1:AF:43:C5:A5:DE:5A:D1:3E:F2:1A:F6:8D:62:0D:41:6E:30:AE
X509v3 Authority Key Identifier:
keyid:DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fb:cf:91:4d:0d:1a:20:54:3d:d8:0c:e6:82:7e:e9:ab:a2:
42:61:23:62:c5:3f:be:c9:18:75:02:b2:09:15:98:aa:9f:13:
5c:ca:89:ae:12:bb:41:2c:c2:5f:16:91:18:25:b1:75:f7:69:
a7:0f:4c:4a:0b:3b:ef:9c:49:48:bb:fa:4a:9e:81:1a:6d:a1:
ec:81:d6:d0:18:21:f5:12:87:c5:5b:d6:32:f5:cb:6f:c8:6c:
04:a1:e3:e1:ab:b0:a5:0c:a6:08:c4:f4:2e:30:75:76:d7:ca:
bf:29:19:95:91:49:a5:d6:f8:ac:cc:30:c1:c6:b8:03:63:32:
c6:ff:8a:23:e9:92:8a:b9:b5:18:38:90:d4:c8:58:eb:e5:4a:
db:46:b9:59:99:89:27:5c:09:0a:db:d1:69:7b:ce:3d:d9:4e:
79:5a:ea:03:16:cd:c1:af:04:12:e6:10:cb:b3:2d:fa:b0:38:
7f:c4:32:35:b9:6a:0c:37:dc:1e:9e:39:53:a4:e6:4e:6a:71:
32:5e:43:1b:47:a7:c9:a1:eb:34:b5:22:9a:8c:6c:d4:64:25:
c8:3d:0f:22:a6:6a:58:70:71:64:7e:59:a3:fc:12:46:9e:0c:
59:d1:bf:20:01:e9:4e:1f:18:5e:bc:70:e4:6d:d3:7c:c3:b4:
e0:e9:67:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:18 2025 by rpki-client