Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier: uCeMLtn6agMwwuWwRuMRdg2Kw8OnVROZ7fMebAHd1cM=
Subject key identifier: 35:C7:34:C4:D0:86:5B:53:D6:22:60:E2:FF:DC:16:93:3D:12:2D:91
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial: 019A4D3D4A9273A36D94671943975813C268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number: 0805
Signing time: Tue 04 Nov 2025 05:00:53 +0000
Manifest this update: Tue 04 Nov 2025 05:00:53 +0000
Manifest next update: Wed 05 Nov 2025 05:00:53 +0000
Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: X7CIKTzDktFtVhru9Ths1trRj1diAEuRdveg46LhIsA=)
2: xR2Kuj_X5JRY3WX_WqgPgukk9Lw.roa (hash: wP9kQODXoT56dWOB0bEFnWVWD/Y0ndzO5Fzna/QZSuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:4a:92:73:a3:6d:94:67:19:43:97:58:13:c2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Validity
Not Before: Nov 4 05:00:53 2025 GMT
Not After : Nov 5 05:00:53 2025 GMT
Subject: CN=35c734c4d0865b53d62260e2ffdc16933d122d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:48:b2:bb:28:c4:ed:ae:8e:b8:13:92:b6:
f4:33:a9:24:68:23:8a:30:fe:9e:08:73:fa:82:8e:
cc:13:07:35:65:e8:a2:d4:f5:4e:0d:ba:09:08:6d:
64:20:4a:05:31:39:f4:48:d1:11:8d:c7:6b:98:86:
02:75:25:b1:c4:89:f1:a6:0d:98:c4:8d:6c:fd:67:
be:0e:9d:bf:f4:0c:6e:8b:19:36:b4:af:08:30:60:
af:1d:9c:da:59:1b:ee:62:b1:f5:61:72:64:49:bd:
41:00:d8:0f:33:0b:30:fd:fe:5c:80:26:14:b4:d9:
d3:d3:11:8c:4a:92:72:e3:09:81:14:16:57:02:a7:
23:a2:51:df:28:b3:f1:fa:1c:ba:3b:14:e3:8b:2c:
3a:88:d4:83:b1:ff:fd:65:79:33:d4:7c:31:49:c0:
af:ff:50:48:66:a7:a3:2b:47:fe:c9:ef:43:a2:3a:
d4:6d:72:82:a7:7a:11:61:ee:9a:f9:97:3a:ee:c9:
de:7a:9c:25:66:9d:43:09:bd:bc:f4:4b:a1:6d:d5:
ad:a2:cf:6f:e6:7a:d1:49:87:65:9c:b1:29:1c:a2:
27:d0:2f:50:e3:fe:d5:82:ad:b2:f8:e6:b0:53:a8:
94:3c:ff:3b:f1:bb:a3:bf:89:9f:9d:a4:18:1a:b2:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C7:34:C4:D0:86:5B:53:D6:22:60:E2:FF:DC:16:93:3D:12:2D:91
X509v3 Authority Key Identifier:
keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4b:e7:20:16:c9:eb:78:f6:2c:f2:3e:0d:60:b1:5b:dc:85:
1d:55:7b:5a:bb:83:19:77:d2:12:7c:e8:d4:93:1b:17:c0:47:
d8:94:c7:cd:fc:81:d0:a0:77:ef:df:ea:e8:25:f5:60:54:5a:
e3:65:a9:6a:5f:a1:a3:fc:08:6a:b4:9f:bc:b2:62:d1:ce:b3:
d1:3a:f3:ca:d4:35:76:bf:ab:f4:0e:f1:3c:c1:04:fc:af:e9:
6e:d0:65:09:54:2f:ef:aa:91:a4:fc:a4:71:92:fc:fa:d3:f9:
3a:47:bc:6a:a4:a4:1c:0c:37:b4:f4:9d:17:a8:73:a5:a0:37:
54:99:7d:e5:3e:37:c8:4d:1b:7f:81:1b:33:3c:48:9c:f7:3d:
bb:9e:cd:99:2d:02:46:5b:11:a7:c1:36:51:43:b3:c9:a3:27:
a6:3e:5b:b4:f8:70:0d:a6:62:7b:ff:00:b9:41:08:3f:df:eb:
71:5a:1a:c9:55:5a:01:21:99:75:dc:12:78:52:34:21:65:10:
0b:1d:5b:2a:d2:16:31:b1:19:97:39:79:90:e5:17:55:77:e0:
59:ad:7b:65:80:8d:1d:83:de:f6:88:94:c9:d1:a3:22:7a:32:
43:71:85:50:65:b1:b2:20:25:1d:a0:61:b9:a6:fe:18:42:8e:
ae:a4:84:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:47 2025 by rpki-client