Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
File: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json)
Hash identifier: qUHl6UQJ9JL1Bbog3PlDYe9q54QYXOqKd/c0ewTaipY=
Subject key identifier: E9:B8:A2:C9:CE:E5:AA:4F:84:06:B0:72:69:96:6F:88:47:7F:03:5A
Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
Certificate issuer: /CN=dc6baa601236ab9bea29f807a66920ed5656a196
Certificate serial: 019A4E187304295AF1311308BBA391ED6C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 09:00:16 +0000
Manifest this update: Tue 04 Nov 2025 09:00:16 +0000
Manifest next update: Wed 05 Nov 2025 09:00:16 +0000
Files and hashes: 1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: LED68HqOuKR/taH3qXKVNUMI9V9DguH6nlz2aKjMMcQ=)
2: h-YJMMunIS0_gIZ5p26lgKRQyKc.roa (hash: bR5opkzZodiPK85GQ+pJiSPCVteQ0JuW261tZcQfTgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:73:04:29:5a:f1:31:13:08:bb:a3:91:ed:6c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196
Validity
Not Before: Nov 4 09:00:16 2025 GMT
Not After : Nov 5 09:00:16 2025 GMT
Subject: CN=e9b8a2c9cee5aa4f8406b07269966f88477f035a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b6:c7:4d:7f:fa:8f:19:5d:6d:58:9d:eb:ad:
98:19:85:f2:8f:d0:d1:b3:f1:3a:33:80:10:d2:10:
98:04:b3:a8:45:ba:48:30:72:e8:ae:b2:d8:73:18:
f1:c9:2e:9e:5e:f9:cb:e2:df:72:ca:0c:69:9d:ef:
e7:24:f4:7c:06:75:14:4a:ab:84:f9:ba:8c:e9:b5:
e4:89:96:fe:f9:2d:ad:e8:57:3b:ff:bb:43:c8:30:
5d:d9:9f:98:3d:51:1a:d9:81:ec:48:a3:ab:ae:51:
af:c9:07:86:85:ea:9a:e5:de:23:77:8e:b3:f1:f8:
ca:2a:31:be:be:c9:f9:19:7a:da:29:4b:e5:87:cb:
68:73:3a:1f:42:a1:91:f2:5d:6c:64:3f:46:9a:e1:
b4:9a:34:ba:fc:70:bb:25:37:e0:c6:0f:2d:00:6c:
4b:c5:36:75:36:ac:fe:ac:f1:15:81:10:fe:9d:80:
55:05:c0:9e:1a:a9:8c:9f:e8:fa:4e:78:05:d8:78:
47:cd:66:65:00:58:6f:4b:be:86:b3:9a:de:48:00:
9c:3e:3e:ec:cc:76:1d:7a:bf:5e:82:ee:f8:9a:9a:
f9:95:8e:74:d1:33:c3:f9:4e:28:12:12:32:3f:cd:
3d:b8:34:53:0d:cb:9e:60:26:4b:a8:e1:25:44:24:
39:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B8:A2:C9:CE:E5:AA:4F:84:06:B0:72:69:96:6F:88:47:7F:03:5A
X509v3 Authority Key Identifier:
keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:32:e3:24:04:e3:4f:94:56:25:c1:18:2b:bf:97:cc:1c:9c:
5c:17:26:b6:0b:78:ce:be:bf:6b:ce:8c:f5:4f:24:aa:7a:ec:
a0:c4:2a:98:07:cf:56:45:8f:64:fe:3d:8e:3d:21:d7:4a:cf:
17:b0:7f:be:85:ea:6f:bd:c8:3f:8a:b1:58:6f:c2:5e:73:e9:
ff:32:b3:b5:94:2f:9c:6e:c5:15:5a:48:a8:e1:a0:fc:c6:49:
60:14:17:f0:fd:4f:11:d9:35:78:a5:1e:ba:71:84:ad:be:da:
f5:96:3c:58:f9:92:98:7c:26:8e:19:ef:cc:96:03:93:e4:ca:
df:d2:c6:ae:1c:e3:cf:63:a1:16:d3:3d:f1:3f:2f:c4:45:fa:
55:ef:52:4c:2c:a4:bf:a6:cd:2e:c4:91:a9:0f:ea:dd:c1:d1:
ec:df:7e:f4:bf:98:73:73:7d:57:f9:5c:c4:dd:da:77:ea:6d:
ee:00:2e:5b:12:92:48:1e:ff:f9:9b:22:e1:59:38:6f:36:9f:
6c:94:91:a9:6a:76:ec:63:df:38:f9:e4:ee:13:f5:38:41:a0:
9d:7b:72:17:eb:b4:27:d5:8d:ae:1c:c5:da:3d:c1:d9:ff:11:
03:60:61:53:26:3b:bd:69:28:e0:8a:4c:2b:ab:17:84:f0:0c:
08:12:69:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:16 2025 by rpki-client