Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
File: s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json)
Hash identifier: 9t81yKx88lhBAmdZ6NrTCPj81FcHK2Ig6o9UwHpnIaQ=
Subject key identifier: F9:07:C5:1E:7C:E3:ED:38:C5:F2:2B:F9:20:7A:4A:6D:C2:41:47:37
Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Certificate serial: 019A4EF5E11A67B733FBBCBBCD9C59026EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:02:08 +0000
Manifest this update: Tue 04 Nov 2025 13:02:08 +0000
Manifest next update: Wed 05 Nov 2025 13:02:08 +0000
Files and hashes: 1: JlKwrg5m2lqERiKY6JmlhVBin6Y.roa (hash: BkRh9N3Osfkv0XYuGUi4VGfe9yFTNu672Q4bahAacS8=)
2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: GcZuzgiKljo99U75JDbDEqbFTE3faIc5IDH+bBeJfOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e1:1a:67:b7:33:fb:bc:bb:cd:9c:59:02:6e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Validity
Not Before: Nov 4 13:02:08 2025 GMT
Not After : Nov 5 13:02:08 2025 GMT
Subject: CN=f907c51e7ce3ed38c5f22bf9207a4a6dc2414737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5a:95:dc:64:77:02:db:cd:78:6a:f9:4b:38:
28:7b:ed:ca:ae:29:d1:26:03:d3:00:81:a6:3a:6a:
cc:39:e8:21:64:f5:27:a6:b5:3b:57:d6:0b:ce:e0:
1b:71:5a:a5:4a:5a:65:5e:fa:5f:bd:b5:e0:72:96:
6e:94:5d:13:b2:6e:87:6d:55:d7:b5:7c:4c:22:87:
51:31:27:31:eb:ac:67:a8:67:f5:c0:f7:75:5e:e0:
77:e4:c8:72:39:1a:d2:6f:4c:c2:fc:b6:ad:9b:ff:
a9:b9:c1:97:cf:e6:64:6e:e8:ec:88:2f:69:bc:28:
93:04:8d:e0:c0:80:de:dd:e8:7c:af:93:9a:f8:5c:
49:94:05:84:2c:f4:76:af:71:45:b1:c2:2c:3e:e3:
3e:e3:b2:8a:3f:86:02:37:76:82:c0:f1:68:d8:52:
e6:aa:bb:99:d4:0f:d2:49:14:ab:7f:70:80:d9:93:
bb:ff:90:a5:2b:9e:51:a2:2a:10:b2:5d:95:9e:c5:
ab:eb:9a:d7:f1:b2:f4:92:0a:ea:fe:88:69:8f:c8:
91:9e:7f:89:37:10:d5:25:12:9d:4b:c8:0a:c1:43:
b7:3f:f5:ee:0d:c1:e9:20:2f:04:89:7d:af:fb:d0:
bb:bc:2d:32:22:4e:91:bd:81:76:fc:05:98:a0:7a:
7e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:07:C5:1E:7C:E3:ED:38:C5:F2:2B:F9:20:7A:4A:6D:C2:41:47:37
X509v3 Authority Key Identifier:
keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:df:24:77:50:2f:71:59:57:75:8f:67:27:f6:80:d8:b5:b5:
a2:d5:b7:8b:0a:b3:e8:b7:4d:25:b4:57:fa:8e:9d:ba:cf:95:
c3:55:75:41:4a:51:ea:80:df:f8:f2:58:97:0b:aa:f9:8c:e6:
f4:17:e7:74:91:1e:12:29:f8:e7:a2:14:76:3e:cf:2c:90:3d:
cb:d4:20:86:b0:81:ca:5f:f4:68:86:7c:87:30:2a:35:38:4c:
fb:cd:93:9c:83:40:b1:52:e0:3f:24:83:12:91:c5:0e:1e:bb:
fc:89:69:f6:b1:4a:fd:f0:87:48:b8:05:e1:62:aa:b8:c4:b5:
44:23:4b:ef:56:7c:96:48:81:08:15:b5:a6:95:35:71:60:42:
f6:a1:c9:12:27:ba:92:a0:d2:80:8d:15:b1:fb:72:c8:76:ba:
ad:24:f7:27:e0:e3:c5:0d:64:be:86:05:52:d5:d2:0c:c8:13:
00:74:95:45:90:bd:d0:14:8e:ed:b7:68:73:12:cb:94:89:7b:
82:a1:80:89:9a:92:1c:c5:0d:18:5f:24:b9:08:4f:16:48:d4:
23:ae:46:7f:01:a9:3f:b8:27:e5:63:69:26:f3:e7:cf:8d:1b:
86:e8:e6:bf:9f:67:31:36:45:51:12:8a:6a:49:84:42:67:78:
f9:38:1e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:47 2025 by rpki-client