Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
File: 3itcv5Z6A0nYiXBLtNYfpSajHW8.mft (raw, json)
Hash identifier: TtfDjb93UnMO52sIVCmF7pCml+nkjGsF6px/HcEoBW8=
Subject key identifier: 1B:B4:0E:EB:55:7A:DF:B0:5F:08:7C:65:0B:28:A6:84:B4:E7:F2:26
Authority key identifier: DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
Certificate issuer: /CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Certificate serial: 019A51F5B2E980EA2C958DE3239BE6D73E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
Manifest number: 164E
Signing time: Wed 05 Nov 2025 03:00:47 +0000
Manifest this update: Wed 05 Nov 2025 03:00:47 +0000
Manifest next update: Thu 06 Nov 2025 03:00:47 +0000
Files and hashes: 1: 3itcv5Z6A0nYiXBLtNYfpSajHW8.crl (hash: BSUS20fbDimcDHu4yY0ZmCH2mLjnDhx5EegnBjLZ+p8=)
2: RmRTHkNLraqOOzazgFQdU_YCKkM.roa (hash: 5SoXabo2aLivwm4lm+kA69S7S7+v67Nc52d80muCgcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:b2:e9:80:ea:2c:95:8d:e3:23:9b:e6:d7:3e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Validity
Not Before: Nov 5 03:00:47 2025 GMT
Not After : Nov 6 03:00:47 2025 GMT
Subject: CN=1bb40eeb557adfb05f087c650b28a684b4e7f226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:be:73:59:a6:bc:a5:94:fe:4d:df:4c:26:
72:f6:c2:b9:68:f1:7e:7a:32:ac:e2:20:14:85:36:
77:c0:3c:69:37:6d:48:5a:da:7f:98:d4:d9:d4:c5:
01:52:74:0b:07:44:6e:6f:00:0a:53:b4:3a:d4:70:
3c:15:a4:4a:9f:84:11:ac:e6:c8:ff:3f:3a:01:bb:
bd:35:fe:39:05:4e:8e:11:5d:24:35:48:2a:9a:54:
75:ce:b9:e6:5b:ed:bb:c4:7f:ea:1d:94:e3:0f:f1:
6d:cf:3e:da:c1:8d:c8:c5:a4:b7:55:08:44:36:0f:
fe:55:a7:eb:f8:f2:00:98:00:e0:36:a3:f3:34:3e:
a2:dd:12:86:64:0f:79:78:27:fb:eb:50:f4:af:fb:
e4:57:c0:3d:04:a2:18:64:5c:2b:31:e7:a1:b4:00:
e9:34:86:d6:21:26:bc:1a:03:ee:2b:2f:b1:d9:6b:
d1:c6:db:0b:28:a9:5d:e8:1f:1d:f7:b7:2c:75:74:
77:92:59:c8:65:0e:52:11:8f:de:b0:6a:37:45:1e:
43:c9:86:ea:35:42:6a:91:1b:af:15:d2:17:a1:a2:
50:08:3c:c8:ff:a3:b2:00:b4:b6:8a:bb:5f:21:54:
dc:d1:41:8d:78:58:25:6c:d1:68:8f:52:11:4a:c9:
eb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B4:0E:EB:55:7A:DF:B0:5F:08:7C:65:0B:28:A6:84:B4:E7:F2:26
X509v3 Authority Key Identifier:
keyid:DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:14:31:61:35:f5:6e:03:55:d4:3c:26:b8:27:a2:06:a0:67:
4e:e4:2b:60:42:0b:eb:4a:10:94:cf:0a:fd:18:18:24:2f:22:
3b:59:89:24:b4:57:90:2e:ac:84:6e:30:f6:41:51:10:b2:0b:
c2:29:32:8a:ca:8a:f1:cd:c7:77:c3:e8:3a:93:39:c1:a6:fd:
28:cc:c3:45:c6:4c:6a:d6:6d:d7:95:12:27:83:35:f7:4e:95:
21:7c:dc:5c:ef:15:46:54:4a:c6:e2:e4:18:af:bb:91:46:56:
83:4a:13:bc:01:66:4b:23:93:2a:6a:7f:e0:66:45:31:0e:1d:
98:da:8f:3b:87:01:c0:9f:c9:9a:17:b7:ce:76:1d:2e:3b:4f:
66:94:08:e8:59:6c:7f:96:ef:f3:96:ba:b8:1a:bc:e3:50:0e:
39:44:41:e3:14:7b:5f:e8:3d:4d:7b:3f:d1:88:52:81:70:88:
69:f0:19:b5:17:1d:76:b3:bf:88:3b:a9:9e:e3:5a:6d:e8:66:
65:aa:a7:fb:1a:3e:ec:11:55:3c:78:89:51:93:bf:86:c7:95:
80:6b:ea:a4:5b:9a:9f:ce:6c:48:50:a3:33:8b:ab:28:fd:f7:
11:d1:d4:d7:32:26:7e:66:e6:6e:be:70:81:27:78:7f:66:4f:
4d:a7:74:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:10:26 2025 by rpki-client