Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
File: 3f2U67jLmKHb31C9zWncwpFEiJ4.mft (raw, json)
Hash identifier: sq+fDdHiOls58XOb+/WMrB1hoi4EMUq7tKmBbXY25ww=
Subject key identifier: 5F:9C:C7:6D:4A:04:69:02:D4:66:33:9F:D4:CB:12:47:E5:F2:AB:1D
Authority key identifier: DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
Certificate issuer: /CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Certificate serial: 019A4EF4D5ABE616CBC5321540C4240C73AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
Manifest number: 0DF4
Signing time: Tue 04 Nov 2025 13:00:59 +0000
Manifest this update: Tue 04 Nov 2025 13:00:59 +0000
Manifest next update: Wed 05 Nov 2025 13:00:59 +0000
Files and hashes: 1: 3f2U67jLmKHb31C9zWncwpFEiJ4.crl (hash: bezd5E5+UKTiSw2OdBz2UT6bpJFa8pHsqHRu4ljqhXk=)
2: OMnuxUeA0haC1p_KDdRfwFA8Q2s.roa (hash: cDQVnRaiJ+Kb9nhkJ6FSjxN3vz7jN+QBdbH8z93gYFM=)
3: yOI7tiSRDXgdskD_bs5AhIY61n8.roa (hash: jCxGB8CWsOl2EvkB0hTjOgeBy34atnE5kB7r6h+CCmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d5:ab:e6:16:cb:c5:32:15:40:c4:24:0c:73:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Validity
Not Before: Nov 4 13:00:59 2025 GMT
Not After : Nov 5 13:00:59 2025 GMT
Subject: CN=5f9cc76d4a046902d466339fd4cb1247e5f2ab1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6f:55:3d:30:b6:2b:4d:b5:99:7b:45:fb:51:
a9:25:2b:f8:d7:5f:25:04:62:3a:06:fd:15:8c:d4:
ea:49:e4:18:99:2d:bf:52:0e:f5:8d:a8:8b:03:f0:
52:5e:28:34:d4:59:00:bf:b5:40:ae:03:c5:90:57:
4d:d3:02:aa:ed:6c:a9:30:d3:92:ac:60:6e:ff:8c:
25:d9:15:59:18:31:44:a4:35:4c:ee:71:e6:90:da:
94:50:a1:4d:d2:38:b7:5c:8d:4f:6b:aa:98:0f:8a:
ed:bb:dd:11:0a:6e:39:4e:ca:0e:a9:da:74:ed:a2:
2b:1d:36:eb:f6:9c:6c:a3:e9:db:6e:cc:c0:fe:2e:
a9:6f:74:53:a7:0b:48:80:b1:43:4e:5a:37:bf:22:
fb:49:53:83:7b:bc:53:42:74:c5:3c:cb:b3:dc:88:
3b:24:2f:7f:ee:88:ba:76:1d:fe:55:4d:da:0b:e3:
fd:dc:a7:ef:a9:f1:16:aa:fc:eb:3a:23:cf:23:fc:
56:11:02:89:17:4d:ae:c1:a3:59:fc:6c:18:95:58:
9d:85:63:5c:21:f1:d1:5d:b6:49:fb:42:4c:6f:5f:
03:a4:22:2f:cc:bb:0b:e4:57:4a:95:5a:71:05:a7:
9f:6e:72:58:60:c7:24:2f:ee:ed:4b:6c:4c:58:40:
a0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9C:C7:6D:4A:04:69:02:D4:66:33:9F:D4:CB:12:47:E5:F2:AB:1D
X509v3 Authority Key Identifier:
keyid:DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f4:ff:6b:71:81:1d:07:40:40:8d:e8:07:89:74:f1:7f:34:
27:0d:99:23:51:3f:fa:0d:08:1c:dd:c8:b7:bd:42:8d:36:0c:
91:f5:90:4a:3f:fe:57:49:2a:23:70:88:e1:2e:47:6d:03:94:
a2:b0:c4:cd:a6:07:ad:a0:f1:b9:a8:08:d6:b3:38:8e:cd:2b:
bb:fa:16:ad:9e:dc:25:b5:ef:a9:bf:a1:36:be:1e:93:12:27:
84:d6:0b:e7:42:61:ad:dc:34:bd:bd:03:91:b2:fe:60:3a:fd:
a9:88:7d:61:15:b3:97:da:2f:a7:2c:1d:ca:1b:9f:75:e1:b7:
1b:6f:22:54:0b:9d:05:41:08:d8:48:50:4f:93:0c:15:34:d1:
ce:f5:6b:4a:dc:92:10:01:6b:d6:6a:de:9a:8c:69:63:08:eb:
8e:7a:23:1d:fc:04:39:5c:5d:f1:ff:0c:8c:93:ea:0e:ce:19:
db:6d:83:2a:8e:71:8c:d3:2a:36:7c:e8:fb:67:87:38:1e:fb:
34:62:97:0e:ec:97:ef:a8:1c:ba:55:bb:7a:53:8e:bf:81:bf:
3e:4b:7a:8e:7a:0e:5b:5d:e9:ee:95:ca:3b:98:88:05:c3:f7:
e6:7a:ba:61:14:e1:ae:e6:74:d1:4d:a7:64:71:5b:0a:c1:97:
91:4d:15:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:14 2025 by rpki-client