Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: QEnXsDEmlcQE3RSji6I3lKU5Qd4kVmu5pqEqjj35i9I=
Subject key identifier: F1:11:ED:4B:64:6E:CF:F9:4B:05:B5:B1:AA:C1:91:F7:F5:CC:B6:BE
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 019A51BE7D53AEFED7A764F30AB08FD74F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 02:00:29 +0000
Manifest this update: Wed 05 Nov 2025 02:00:29 +0000
Manifest next update: Thu 06 Nov 2025 02:00:29 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: qeqmvj/YLQwLhCECic2mDLSLOrN6KcsP1eZ99zog1b4=)
2: sHHovkPcLVWIMQ_tboQIdcTBHy0.roa (hash: fYwK2GNfLuzV598M+4d1qnmBbMriSVB83QSoeu+hALg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:7d:53:ae:fe:d7:a7:64:f3:0a:b0:8f:d7:4f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Nov 5 02:00:29 2025 GMT
Not After : Nov 6 02:00:29 2025 GMT
Subject: CN=f111ed4b646ecff94b05b5b1aac191f7f5ccb6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:67:d0:25:4b:90:14:bf:3e:47:e3:e3:66:
0a:0b:59:e7:d2:77:90:2a:d9:22:b8:0b:fb:25:c8:
20:fe:5c:05:08:1d:90:a2:b0:22:5a:87:76:9f:5e:
f2:e7:f5:fe:ec:20:cc:82:30:f4:f7:74:15:ad:41:
d4:54:be:9b:de:bb:a3:3d:1b:91:f8:2c:21:f9:7a:
c7:a0:3f:e2:29:1e:ee:2f:2d:d7:2d:ca:2c:27:c8:
5b:be:d2:fc:65:4a:cf:bc:17:ab:40:e5:20:d9:d4:
dd:3d:4b:9c:66:e3:ad:a5:f9:bb:38:52:d1:f5:c2:
fe:e2:9d:d9:d3:0a:f8:25:d0:e9:a0:6f:e6:f2:8a:
93:1f:4b:2f:2b:eb:ed:2e:50:11:4c:07:62:b3:54:
88:93:e4:f4:23:4f:26:19:e9:89:1d:0b:9a:d7:7e:
23:29:26:22:75:f8:64:da:75:4d:ee:98:18:a5:bd:
e6:6e:fa:b4:19:87:f7:c6:a9:25:1d:ac:91:f9:b5:
aa:68:a1:66:b5:f2:9b:6f:c2:ff:d3:4d:73:ee:bc:
be:d8:a6:c1:2d:b7:97:df:b3:a1:63:90:9b:48:22:
5d:2c:5a:53:dc:d1:3e:16:ba:4c:00:32:46:24:1c:
1a:e1:8a:3a:96:da:6c:d5:c5:a7:bd:fb:eb:34:82:
37:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:11:ED:4B:64:6E:CF:F9:4B:05:B5:B1:AA:C1:91:F7:F5:CC:B6:BE
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:cb:a7:11:13:cc:0e:31:7d:5c:ae:19:84:6f:ce:54:d5:d6:
4c:56:4b:05:ed:a5:a8:dc:54:23:ed:6d:9d:1e:c5:c2:02:88:
2e:ec:92:bd:44:4e:7c:ed:8c:6d:f0:35:74:5c:61:45:bc:49:
07:6d:fd:4f:57:7b:45:0a:9c:ad:8a:ff:3b:85:c1:e3:91:89:
f8:3a:f1:a0:17:a7:56:01:1a:7b:7d:30:04:5e:76:45:e5:f6:
66:c5:76:6b:ce:0c:92:75:b5:79:06:99:9c:5e:0b:3a:69:8a:
c0:d4:81:39:d2:64:c7:96:7a:87:85:d1:51:eb:4b:b0:c8:b6:
e9:2a:ac:c1:34:b5:c5:77:ea:67:f0:2f:f4:4c:ce:91:11:5c:
f5:0d:b4:b6:2d:fa:fd:7a:e5:14:47:08:8a:2f:a2:6e:d2:58:
31:35:dc:bd:f2:00:36:94:9c:9a:a5:1b:06:57:bd:0a:2a:99:
a7:5b:2e:df:86:97:97:ce:f4:f5:3a:18:08:1f:8d:66:56:5c:
9a:43:5b:f7:6d:35:3f:14:01:f0:6f:2b:a7:e3:02:9b:2f:50:
4d:ed:45:3a:3b:96:a8:65:e1:2a:25:9c:57:23:ef:07:df:d1:
82:c4:e2:bb:7e:30:94:f0:a2:c4:80:14:4b:64:e5:0c:ea:3d:
63:24:da:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:38:17 2025 by rpki-client