Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.mft
File: I--d4hUq7xsqYqMfsvNehZCzrYQ.mft (raw, json)
Hash identifier: jER42a1DunoUBA5cC11CPmeh+L4ZVPJz5txKW8uZsYQ=
Subject key identifier: 3B:F7:10:AE:5A:CE:A1:81:19:10:3A:80:78:6E:F0:95:3E:4B:E1:AB
Authority key identifier: 23:EF:9D:E2:15:2A:EF:1B:2A:62:A3:1F:B2:F3:5E:85:90:B3:AD:84
Certificate issuer: /CN=23ef9de2152aef1b2a62a31fb2f35e8590b3ad84
Certificate serial: 019A51F54B345B456B9FC8C46946D9B423F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I--d4hUq7xsqYqMfsvNehZCzrYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.mft
Manifest number: 075F
Signing time: Wed 05 Nov 2025 03:00:21 +0000
Manifest this update: Wed 05 Nov 2025 03:00:21 +0000
Manifest next update: Thu 06 Nov 2025 03:00:21 +0000
Files and hashes: 1: H78piGDM9XMhN9ttfDQLjflrGw0.roa (hash: A/U1yMrz8Q8LYte4PciQEyU7L3zVOHn5gKWczBZWelo=)
2: I--d4hUq7xsqYqMfsvNehZCzrYQ.crl (hash: dqphdqp8jM6YSQFJT27D5tQbnOuVpA/W5+oOJNrvhQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I--d4hUq7xsqYqMfsvNehZCzrYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:4b:34:5b:45:6b:9f:c8:c4:69:46:d9:b4:23:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ef9de2152aef1b2a62a31fb2f35e8590b3ad84
Validity
Not Before: Nov 5 03:00:21 2025 GMT
Not After : Nov 6 03:00:21 2025 GMT
Subject: CN=3bf710ae5acea18119103a80786ef0953e4be1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5e:b3:5c:1c:b4:80:be:3b:79:ad:74:61:4d:
a7:83:18:b6:a8:09:f4:83:c1:43:41:47:cf:f2:eb:
69:67:13:3d:f1:4a:89:4c:14:3f:21:96:59:71:90:
93:ef:e0:33:df:e1:ce:89:41:23:53:a0:af:53:d3:
ec:9c:8e:a7:7a:61:79:16:55:e3:f3:1c:ba:0c:8c:
9e:fd:6d:ca:06:5c:9a:7b:45:96:81:ec:1a:1f:90:
59:b7:21:f3:69:e8:dd:bc:58:63:2a:62:0f:a7:e8:
3c:b8:f4:87:65:15:df:e7:89:3f:01:f5:58:0c:23:
03:0e:a6:20:ba:28:26:7a:10:58:94:37:6c:21:7f:
e6:01:11:bb:cf:66:ed:d0:47:06:9b:e7:eb:50:9a:
39:97:11:d6:ec:f5:b9:fa:6a:e4:f3:b5:8e:c3:7a:
80:50:08:11:32:35:48:4f:2b:0f:35:99:bb:c6:9a:
c3:ba:0b:76:83:1b:9a:72:80:e3:cd:f4:f5:fe:d5:
94:59:2a:4f:7a:71:09:93:be:cc:d5:ad:4c:e5:59:
70:ad:d2:ff:0a:11:82:7f:bb:08:8f:e0:1a:5f:8e:
0b:5d:96:09:a5:47:04:ac:ab:58:9c:ff:73:e0:44:
67:51:d3:69:24:58:0d:2e:88:eb:d8:62:f7:08:ec:
a0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F7:10:AE:5A:CE:A1:81:19:10:3A:80:78:6E:F0:95:3E:4B:E1:AB
X509v3 Authority Key Identifier:
keyid:23:EF:9D:E2:15:2A:EF:1B:2A:62:A3:1F:B2:F3:5E:85:90:B3:AD:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I--d4hUq7xsqYqMfsvNehZCzrYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d8:9a:b5:27:bb:20:bd:60:48:9f:9f:f2:33:86:a5:f9:bc:
4e:ad:da:a5:f6:5d:c6:55:b8:63:a3:e0:41:2e:7b:33:1a:ad:
b9:fc:2c:a0:81:bb:60:b6:00:20:54:99:a2:09:5e:83:52:83:
04:b6:a0:0b:e5:cb:2a:43:52:9b:a5:9e:ba:00:0e:db:92:f8:
a1:88:98:98:3c:16:13:a9:83:05:92:b1:7e:e7:ec:60:1f:c2:
b9:24:fb:c4:3a:10:1b:4f:20:a4:d6:48:3a:66:c6:47:fd:3f:
ee:21:72:19:fd:86:97:f0:e8:6f:33:5c:53:1d:e4:e3:09:3c:
3b:28:98:45:3e:3c:9a:c3:cb:13:4d:79:b8:8c:a4:37:ed:04:
7c:d3:97:42:b4:84:79:b9:bd:96:4a:21:b5:36:19:7f:52:c7:
b6:6c:13:e4:25:3f:a9:01:20:22:0f:b0:47:4b:25:56:07:dd:
db:b1:6c:56:90:cb:82:85:85:d9:65:b8:8a:da:37:32:3b:c0:
d2:39:f5:71:54:0c:a8:41:dc:89:2c:66:bf:cd:35:2d:f2:0c:
09:67:92:2d:89:14:f8:e9:0b:e4:5f:c6:95:2e:a7:07:c3:3a:
ae:4a:d5:9f:ca:82:12:79:7c:9e:4a:f0:a8:2a:d4:8f:9e:fb:
e8:f5:3b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:17:48 2025 by rpki-client