Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
File: 3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json)
Hash identifier: Rn8zUucfHJ7yud21o+2H2N5fUMD9YQH7hPWElF/eYzY=
Subject key identifier: 63:AA:FC:31:C6:4C:5F:24:B2:AC:10:FB:66:DF:88:E2:06:54:35:77
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Certificate issuer: /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial: 019A4EF41567318249582A0F2541E2F16418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
Manifest number: 171E
Signing time: Tue 04 Nov 2025 13:00:10 +0000
Manifest this update: Tue 04 Nov 2025 13:00:10 +0000
Manifest next update: Wed 05 Nov 2025 13:00:10 +0000
Files and hashes: 1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: EwQeF0wIY3qHhyTjV/SOeEmR7T5Dtk5jDJYmidB+vC8=)
2: I3GFCz8gt6Rki8DJxRT45IEltuo.roa (hash: uBBouPhKhyaXIv9GSGFn2zrE6uv7a/jKMDEUQeG9Dfo=)
3: RoNUSsRbSgnW76cSNeAr425YYHY.roa (hash: ty/WAAmbUm3G9276dnnVRYAsJCuw7HHC84siWPb6a6o=)
4: j06EmkksF4YrV0BvXtZ5BQd7X_0.roa (hash: W1w1cQpGhDndwAuyI1OFa9FFiGMVh7oMpQVYkrYTonk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:15:67:31:82:49:58:2a:0f:25:41:e2:f1:64:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Validity
Not Before: Nov 4 13:00:10 2025 GMT
Not After : Nov 5 13:00:10 2025 GMT
Subject: CN=63aafc31c64c5f24b2ac10fb66df88e206543577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:c8:5a:53:cc:7f:b9:6c:8e:71:40:35:37:
2b:f7:8c:c2:20:e5:f8:29:c9:74:ac:e1:13:c2:bb:
d0:64:c4:d2:54:f4:72:8b:bb:b3:2f:7d:fd:21:5f:
d7:2a:60:cc:67:88:3b:34:5b:58:8b:68:ae:f0:0f:
97:08:18:1b:3a:d2:2d:7e:0b:b0:c4:2e:ac:4d:8f:
92:7d:a2:f9:ef:24:e1:ce:e1:7e:49:fe:ba:01:d0:
0b:91:8d:17:2a:ec:89:bc:1c:20:76:12:bc:76:a5:
65:f3:02:34:e2:b3:ec:9e:19:fd:e9:d4:9a:38:23:
20:20:7f:47:7e:b1:07:8d:49:9b:3b:5d:c4:4f:9f:
92:c3:ee:2b:26:c3:da:65:31:b6:fc:fd:9c:d9:ec:
23:50:6b:72:8e:fe:95:a1:a9:1e:e0:07:9e:35:ca:
51:35:d7:f5:12:24:bb:5b:5d:b6:02:f3:55:84:c0:
62:68:a3:13:39:cd:88:9e:00:6c:87:9c:94:f4:49:
6a:e7:9d:cc:be:24:a2:11:20:b3:2e:af:f1:e9:c9:
f2:43:f8:77:d2:5f:b6:33:0f:d0:1d:05:28:a9:52:
90:87:00:d1:83:3e:55:0b:2c:bd:69:3f:28:b8:22:
8c:3d:9a:69:82:63:9a:00:75:71:63:00:e7:45:13:
bd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AA:FC:31:C6:4C:5F:24:B2:AC:10:FB:66:DF:88:E2:06:54:35:77
X509v3 Authority Key Identifier:
keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9c:46:1a:60:9c:72:0a:e8:08:d9:8a:57:cd:0e:49:87:dc:
a1:25:a0:7f:f8:b9:c3:22:a1:6b:65:d3:42:05:39:e3:ae:45:
e8:0b:f6:b1:d8:77:d4:26:3b:58:c6:70:bf:c7:17:b5:57:88:
c3:33:bc:7a:64:2d:b7:2e:ae:34:f0:d2:1a:68:30:45:e8:82:
dc:90:81:b1:0c:05:38:37:82:d8:7e:fd:a3:32:7e:e8:0a:1c:
e0:7c:25:3d:14:a6:d5:e7:40:ec:f2:05:24:d6:c9:79:d1:5c:
27:b5:3b:3d:a9:dd:66:57:6d:fd:9d:ee:3d:d5:2c:d0:06:d8:
a1:91:bb:71:e7:19:1c:d5:a1:98:7d:cd:b9:1e:f7:21:fc:85:
c8:0e:cb:87:16:91:3b:59:a9:ec:e7:8a:54:ce:dd:d6:80:d7:
c9:d3:4d:1b:2e:62:4d:a2:ff:0a:6c:07:0e:c8:f1:b9:cf:5a:
c1:9d:af:a2:12:c9:30:76:a8:8f:59:9d:b0:d3:89:45:3b:e2:
d7:f9:41:ce:9a:a7:d2:7e:87:55:77:50:02:75:c4:dc:c9:f2:
88:d3:77:c3:a3:14:74:06:ff:30:8d:b0:a2:29:85:b7:8b:ff:
1f:c6:da:66:09:16:12:77:83:a4:7f:02:c4:b1:f7:1e:40:26:
06:4d:99:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:53 2025 by rpki-client