Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
File: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft (raw, json)
Hash identifier: GpTf7q7iYEINC1Tv98ImvgePaLsDUhvNWFKP0uSoCSk=
Subject key identifier: 29:BE:EF:87:BC:24:B7:AF:40:CC:05:F3:46:AE:35:E1:50:5E:83:EA
Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Certificate serial: 019A50076CBE1EB2533DA6F513E2ADD1F631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
Manifest number: 1251
Signing time: Tue 04 Nov 2025 18:00:54 +0000
Manifest this update: Tue 04 Nov 2025 18:00:54 +0000
Manifest next update: Wed 05 Nov 2025 18:00:54 +0000
Files and hashes: 1: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl (hash: pdLe7FeLSp7SkfKTYS7qKu3vernPuKmDidbEVuLe8UU=)
2: _Kt_ylx952g7HZhxMZibU4U_S9U.roa (hash: BRXKGTpDPGrVqoVy2fXV55G1/RGVRY4TQXSqB3YxXnw=)
3: bJ6OkDBz35azmUeGZSSY8SRMI4Y.roa (hash: y21BnaoaGpgbQvC0jOtfGrk+wq3H1xWVUYMR7XJq8OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:6c:be:1e:b2:53:3d:a6:f5:13:e2:ad:d1:f6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Validity
Not Before: Nov 4 18:00:54 2025 GMT
Not After : Nov 5 18:00:54 2025 GMT
Subject: CN=29beef87bc24b7af40cc05f346ae35e1505e83ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:3b:c4:47:02:98:40:1b:e4:02:6a:58:74:
b4:8b:17:9a:2c:04:52:53:ed:87:29:af:7d:52:91:
30:f8:79:21:4f:bc:98:2a:0f:e8:02:a0:13:e6:95:
d5:a9:29:6a:0e:3d:a0:96:ee:6e:72:28:47:c4:bd:
8d:7a:96:de:81:f2:88:77:b2:9e:01:ba:73:82:2e:
fb:65:b3:ef:5c:df:ff:f3:fc:b7:3e:57:ec:c6:32:
6c:63:a7:7b:d2:9e:c2:b0:d4:c7:de:55:18:6f:8b:
b9:e8:c3:45:aa:d5:58:0d:e7:be:d4:aa:1b:c8:5e:
2d:79:53:b0:96:24:c6:e2:70:97:6f:00:2e:01:7f:
92:98:c0:b9:e6:2b:b4:82:a0:06:75:1b:f5:40:c9:
2b:15:49:80:1a:38:fa:a8:54:a5:9a:36:8d:fe:4e:
6a:e7:70:a5:ca:25:8f:97:e5:ed:92:e2:ed:8b:1e:
33:c0:d7:00:c6:bf:70:c2:12:06:89:c6:98:60:a8:
04:a9:05:e6:38:cd:a6:9d:73:e6:0c:24:6d:6a:d9:
07:62:c1:48:d9:d7:82:3c:7f:f1:5e:a8:59:98:fb:
c8:49:a9:36:1d:f1:15:f0:d8:75:3f:1f:49:fe:5c:
3c:e5:5f:43:ac:24:10:ef:a9:6f:2a:76:f2:34:ae:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BE:EF:87:BC:24:B7:AF:40:CC:05:F3:46:AE:35:E1:50:5E:83:EA
X509v3 Authority Key Identifier:
keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:05:9f:48:83:1c:e4:49:4f:ce:92:e7:cb:92:36:c8:a4:a6:
bb:b2:58:d0:e4:b1:b6:43:9e:41:c1:6b:44:8e:16:ed:9c:e3:
61:3a:19:ec:b2:fe:8a:67:1d:06:ef:d2:e9:7e:cc:b2:76:41:
03:78:b4:ba:ea:82:a5:05:64:cb:58:35:2a:a0:b5:18:0b:a9:
60:d3:c2:67:d4:2a:e4:a5:5f:e6:b2:b0:a4:48:0e:95:e9:b9:
28:2e:3c:10:3c:e8:11:d3:98:db:b0:09:e0:61:98:77:24:d0:
9c:ff:56:99:ee:f0:91:df:d5:04:79:c0:1b:fd:1e:c6:56:b6:
84:5c:59:43:80:8a:0f:4f:34:84:96:f7:d3:bf:1d:2c:2f:4d:
8b:84:33:7a:0d:d3:37:75:9f:42:8c:0c:51:10:9e:ca:21:c9:
58:57:03:22:db:9d:91:63:7b:6a:32:eb:6b:19:82:ca:34:2c:
ce:b2:2f:f4:fc:8f:9e:db:5c:2f:15:57:ed:64:7e:66:98:3f:
7b:b8:45:87:39:bf:9e:ae:df:68:33:e4:a8:a8:6f:f5:ea:f5:
f5:f6:90:4c:08:ea:fa:e5:2b:29:ee:e8:78:3f:9e:f3:4c:29:
7e:d2:bb:17:cb:bc:70:ba:7d:2a:c0:35:ab:ae:f4:0f:ba:78:
db:ca:c1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:32 2025 by rpki-client