Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
File: 3fCc-W5fyHTuk5CXxWUci9hC5q0.mft (raw, json)
Hash identifier: i8LpcCoFo+TaRQX8aNmiaqy9SDEzuX0TWrHKzHcZna4=
Subject key identifier: 68:D1:72:7C:89:F9:63:79:6F:8E:2B:06:F1:63:FC:81:15:57:33:4F
Authority key identifier: DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
Certificate issuer: /CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Certificate serial: 019A4D745D006C582DACBC2D4461A2375F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
Manifest number: 043F
Signing time: Tue 04 Nov 2025 06:01:02 +0000
Manifest this update: Tue 04 Nov 2025 06:01:02 +0000
Manifest next update: Wed 05 Nov 2025 06:01:02 +0000
Files and hashes: 1: 3fCc-W5fyHTuk5CXxWUci9hC5q0.crl (hash: LOpGL794C40S2dqCC6/Kf3RxW4fc8MdJ3ueetZpWBIg=)
2: 4QrqTeH17AXNTy8pbTdrujVUbQI.roa (hash: FZeq9SJr8r+vs6lCOy39Gvb+wDR+3HmqIg9DlvmdZfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:5d:00:6c:58:2d:ac:bc:2d:44:61:a2:37:5f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Validity
Not Before: Nov 4 06:01:02 2025 GMT
Not After : Nov 5 06:01:02 2025 GMT
Subject: CN=68d1727c89f963796f8e2b06f163fc811557334f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:27:05:f6:43:c7:6a:cf:e1:93:26:a1:61:
b5:b2:1f:d8:c6:1a:5b:eb:ab:1e:0b:e8:eb:da:2b:
de:f5:bc:68:a2:a1:35:bb:f9:0d:82:c7:7b:cf:97:
54:93:1c:46:45:8f:4d:df:ea:6c:5e:a3:76:c5:78:
ed:5a:63:d9:d6:d1:4c:ac:dc:14:9c:6f:df:ff:44:
f2:a2:08:c7:e3:0b:a6:e4:52:66:42:d5:fa:7e:9e:
b3:e7:1b:c2:5e:3c:04:94:cd:83:e4:9b:14:76:87:
4b:69:1c:1e:79:8f:ff:97:b5:ed:c3:e8:fb:51:a2:
16:00:ed:e4:fa:c3:4c:4c:2b:5b:54:5b:74:ea:05:
d8:47:ad:7b:f1:59:08:3c:3b:9e:c7:23:99:84:9c:
1a:eb:14:e5:8c:b3:fb:47:dc:57:52:ab:b3:56:bd:
24:e5:cb:5a:5a:e6:70:2e:bd:77:90:89:40:f6:80:
cd:b5:82:d9:a4:5f:d0:1d:d6:64:04:65:9c:c7:a9:
61:5c:23:fe:12:09:27:5a:9f:ca:a9:08:2d:7b:50:
03:16:7e:fc:cc:19:23:95:6a:d6:44:40:6d:cd:ab:
54:96:1d:d3:b3:18:fe:6e:d9:c8:2d:03:89:55:c3:
40:4e:0d:cd:92:a3:29:d3:69:83:9c:a3:b3:3e:77:
7b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D1:72:7C:89:F9:63:79:6F:8E:2B:06:F1:63:FC:81:15:57:33:4F
X509v3 Authority Key Identifier:
keyid:DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:12:71:6f:93:28:ca:e0:96:cc:e0:be:db:9a:c9:e6:16:e0:
4e:f3:0a:ef:3b:54:a9:fe:7b:b5:19:c1:c6:6e:3a:21:d1:45:
f5:f6:81:5b:5a:7f:b5:3f:9e:9e:0e:f3:6a:45:be:ad:c5:9b:
55:1a:ab:a8:6e:a7:6f:c2:dd:e3:19:bd:be:fa:54:e0:88:26:
12:f9:e8:1a:e1:74:4c:33:ba:0f:0f:d9:c3:95:7f:f7:17:56:
c6:21:b3:60:7c:14:22:5b:d0:b9:75:47:5c:b6:e0:c8:67:08:
28:be:ca:9b:b1:ab:98:90:c1:7d:8e:9e:07:9c:63:1c:9a:40:
19:b4:d1:c1:f0:7c:48:8a:b1:5b:67:90:37:54:1e:27:a7:51:
93:df:11:1c:90:d6:a8:bc:03:52:28:2d:8e:fa:a1:50:c9:c1:
3e:4f:f5:ea:23:e7:9a:1b:c7:63:e9:f3:08:47:a6:9a:c7:47:
55:f2:58:6c:99:2d:71:a8:5d:41:3f:19:68:b3:a8:9f:9c:76:
57:6e:4b:45:c8:49:a7:7a:24:ab:e7:94:d0:c3:56:9b:60:b0:
bf:c3:4e:0d:79:dc:40:f3:9d:cd:f1:bf:91:2b:1b:d9:2c:3b:
12:48:3d:be:b9:b0:95:30:56:84:1c:cc:bd:91:3e:75:0e:28:
76:f9:ff:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:10 2025 by rpki-client