Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: 6GRLG/ksef7BAm+rJROLG0OpB6/o7dikU4DYlsfPZTs=
Subject key identifier: 46:DC:E5:51:67:1F:B5:60:47:9F:20:B3:13:A5:99:71:BB:C5:48:0D
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 019A559BB2DE246E256777E2F8F6548FA57E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 20:00:58 +0000
Manifest this update: Wed 05 Nov 2025 20:00:58 +0000
Manifest next update: Thu 06 Nov 2025 20:00:58 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: 9gQOJLUiZxAwo+NKbXE+aQAMAw1poGWQXndRE7RmQGM=)
2: sHHovkPcLVWIMQ_tboQIdcTBHy0.roa (hash: fYwK2GNfLuzV598M+4d1qnmBbMriSVB83QSoeu+hALg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:b2:de:24:6e:25:67:77:e2:f8:f6:54:8f:a5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Nov 5 20:00:58 2025 GMT
Not After : Nov 6 20:00:58 2025 GMT
Subject: CN=46dce551671fb560479f20b313a59971bbc5480d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:aa:9c:c5:61:60:5d:b8:a7:f9:d1:c5:b7:
45:fa:54:12:fd:1d:56:f4:5e:ea:ce:9a:8e:6b:7b:
d1:8d:5e:b9:e6:28:58:9a:e9:73:48:47:10:c9:7b:
8c:e7:36:90:f2:00:61:70:dd:65:c9:ba:16:3d:48:
dd:0b:f5:99:98:a7:64:8e:80:69:dd:69:af:4a:5d:
4d:ca:50:c9:51:74:f0:9f:1b:26:16:04:e1:af:e4:
61:31:24:56:07:ae:4d:ad:b6:fb:2e:f2:dc:b7:f4:
1f:ef:1f:fd:2e:6d:87:9f:c8:72:4a:1c:02:c2:94:
74:b5:73:88:85:c0:23:12:05:ff:1d:5d:86:88:69:
4a:51:db:74:12:95:b6:b1:7d:9a:65:3a:eb:e7:eb:
6e:c8:ce:18:47:ec:b3:ff:61:78:a0:0d:68:94:d4:
f4:b1:9f:37:47:86:c8:7a:49:f6:55:da:70:d5:5b:
41:df:0d:1c:34:c9:ff:16:3e:2b:6c:2d:b1:48:93:
82:de:13:12:e0:df:2d:b7:ee:bb:c1:7f:ad:02:e4:
7a:5e:25:01:b4:3f:74:d4:00:72:56:71:f1:bf:7c:
58:de:86:c7:5a:55:87:36:1c:89:34:46:67:71:e1:
de:88:23:9d:2a:48:d9:ee:fc:02:4e:4a:c8:16:27:
1b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DC:E5:51:67:1F:B5:60:47:9F:20:B3:13:A5:99:71:BB:C5:48:0D
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:09:71:85:e5:5d:98:48:e1:e4:e6:66:96:e9:b7:b1:67:2c:
bd:99:d6:26:12:bb:fc:e1:17:b1:a5:63:29:40:43:bb:fb:41:
2e:36:90:10:14:d9:7a:09:92:27:a7:ba:ba:8b:2e:38:03:43:
ec:cb:80:63:f7:20:b2:b3:af:20:60:a0:1b:92:35:83:d1:47:
88:9c:5a:7b:ae:45:e4:83:7e:89:b8:6d:0b:72:d1:e8:0c:82:
f4:bd:3a:fd:c6:0e:7d:2a:93:fe:68:4e:af:38:75:26:23:6c:
b9:e7:41:f0:ec:b8:ac:f3:ef:b4:1d:86:f0:a6:3c:e0:f6:29:
ff:6a:0e:1b:c7:39:01:6f:ea:3a:d7:58:c7:22:4b:da:40:f0:
78:4b:82:3e:48:0c:5d:59:df:d5:6b:7b:b9:4f:48:62:97:b8:
d1:25:9b:5a:7d:81:e2:c8:14:42:5b:cc:0b:37:c1:41:46:7b:
c1:28:d6:28:fb:e6:fe:d4:38:72:17:3a:ba:c3:45:d5:39:95:
19:6f:ba:2c:d6:8f:5a:81:04:7a:38:a2:50:be:96:be:c1:29:
42:90:05:2c:52:90:89:c7:63:bc:a5:fd:2a:99:ab:c4:38:7a:
d8:6d:ce:0e:ce:5e:bc:f2:88:cb:c5:7b:48:56:8e:b9:de:df:
8e:88:1d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:07:33 2025 by rpki-client