Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
File: 3MstX7JThS8YI8ZUNOjydtBOTgw.mft (raw, json)
Hash identifier: hQgzZub6ZKziPEw5/0y8g3Q2kBUCJMn7xGrx7rvqwoo=
Subject key identifier: 46:57:C4:C5:FA:54:9C:DC:93:DD:54:BA:98:B1:90:4F:EC:62:2A:64
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial: 019A503E2609C67EC0EE233FB96FD323A887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
Manifest number: 1717
Signing time: Tue 04 Nov 2025 19:00:41 +0000
Manifest this update: Tue 04 Nov 2025 19:00:41 +0000
Manifest next update: Wed 05 Nov 2025 19:00:41 +0000
Files and hashes: 1: 3MstX7JThS8YI8ZUNOjydtBOTgw.crl (hash: YmMSFTkQhxwuF8Dfri0CvOwk5sAfcR83hsNt/hEUvYo=)
2: 4iSMhBF2xZj26lycKx2j1fhAtX8.roa (hash: 5NzSosDSsdztn+kQLtfES98hJSpuF/nYSnJEW3vMqlE=)
3: MCaozM05EgQpOj9KWtfk_EMYWf0.roa (hash: I6Y0DISsiTz+oGPxMCPt4OQoH1zQxzx22/aiFTgMNtU=)
4: qMfArzwkX8G0WDNHJN4uX2h7ong.roa (hash: J4HIUTvl0CZ/07KSIMq+Jwo8Hxn+rCK5OIiJhW9OzqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:26:09:c6:7e:c0:ee:23:3f:b9:6f:d3:23:a8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Validity
Not Before: Nov 4 19:00:41 2025 GMT
Not After : Nov 5 19:00:41 2025 GMT
Subject: CN=4657c4c5fa549cdc93dd54ba98b1904fec622a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:87:7a:fb:42:40:f7:10:d0:90:9e:75:cf:bb:
0b:0a:32:8f:e5:f8:8d:d9:b5:2e:bc:73:80:e7:7a:
38:36:b5:d0:38:d0:41:88:74:76:d2:20:7a:e8:f2:
c3:ee:0d:47:fc:8d:12:08:72:6b:49:ca:35:8c:43:
be:f6:16:92:72:9e:e8:7d:a5:bf:0f:40:8f:e2:8a:
e1:62:93:44:69:e1:54:a1:9a:8b:d4:8c:c2:93:5d:
ea:91:a2:de:3c:bc:f3:2f:81:97:5f:31:c1:c4:f8:
6c:d8:3b:8e:1c:d1:69:76:ef:46:7d:06:e3:4f:d6:
2e:74:2c:40:d4:e6:67:f5:4b:55:b0:12:33:3f:30:
d6:af:79:10:28:fc:ac:72:12:12:2b:f5:5a:b9:dc:
dd:c0:21:ef:9f:a5:7d:ea:99:2d:14:be:d8:32:67:
0a:c1:aa:28:9e:17:6c:fa:ec:e3:9c:9c:76:e5:88:
58:ff:b0:56:38:e4:e0:fb:45:54:17:77:ee:e3:f0:
72:8d:0a:3b:ec:cc:05:9a:e8:24:c8:59:84:99:4c:
cd:14:73:64:3a:98:2a:4e:2d:8e:3a:ee:1d:53:46:
31:76:b8:5c:93:f2:77:6c:e5:77:6a:77:2e:66:ee:
c5:af:c8:b5:d8:8f:90:d1:92:03:3b:41:70:cb:2c:
ae:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:57:C4:C5:FA:54:9C:DC:93:DD:54:BA:98:B1:90:4F:EC:62:2A:64
X509v3 Authority Key Identifier:
keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:54:02:db:db:30:4a:e7:d6:ae:29:44:cd:d8:bc:ab:16:b1:
ef:3d:25:0a:74:d7:e8:4d:bb:0f:49:cb:ae:88:32:17:8c:46:
67:e8:21:e2:59:ad:ab:c5:f5:35:74:bd:ae:a4:5b:67:1b:6c:
e0:ff:e5:1e:06:7d:a7:2d:41:67:2f:47:6d:b9:af:5a:0c:81:
81:87:13:a1:d1:1d:00:ec:4c:12:62:1c:bc:5d:1c:18:bb:6b:
73:6e:87:07:e3:73:84:88:47:c5:7c:ec:e5:21:62:d9:7a:43:
30:b1:1d:b0:3a:f3:f0:2d:3f:90:ec:71:9f:92:0a:90:b5:47:
fd:59:7a:b0:3a:e9:6a:c0:73:cc:53:ae:09:68:08:7a:93:89:
09:9c:b1:fc:8b:0e:0a:28:32:07:4d:64:af:08:ad:28:a8:30:
00:2d:32:06:e8:f9:22:6c:d2:75:d9:ae:63:db:b9:e4:fe:4c:
10:dd:a9:70:73:ef:b7:b3:48:ad:74:0a:2e:47:6a:60:15:ca:
51:08:97:b8:fa:2e:80:2d:a0:57:dc:ce:a1:26:be:5f:0c:ae:
22:9e:f5:b2:2f:63:43:17:e4:54:b7:14:76:74:64:f1:0d:84:
10:ef:c0:a2:96:c2:1f:c1:79:ab:f6:e9:f4:0b:24:d2:fe:b8:
b6:e6:db:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:39 2025 by rpki-client