Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
File: 3BCJyUK2gDNoO03VBsDDb3S-DqM.mft (raw, json)
Hash identifier: maixMBvjqpwhzXoErkbxQTMXkghfXj46O/6uFSPm7XI=
Subject key identifier: 85:65:D3:2A:AF:F3:48:30:88:B9:CD:3B:44:EC:93:64:02:2B:0D:A7
Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Certificate serial: 019A4FD03516E133564D59628BC3C2641A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 17:00:36 +0000
Manifest this update: Tue 04 Nov 2025 17:00:36 +0000
Manifest next update: Wed 05 Nov 2025 17:00:36 +0000
Files and hashes: 1: 3BCJyUK2gDNoO03VBsDDb3S-DqM.crl (hash: PA4pGE5vLVahzXnhqVJadK7uila4jicIujtSseodmxk=)
2: 57HaC7393494-Kydk1JdAp5sP5I.roa (hash: MC5zLYnL7jsECqxeDtP30qM0sWScy6N43eUhfx207aw=)
3: m5gUSNnJ2hKaiWTW0ODmWqqDw-s.roa (hash: EE2S7AYIPyyJZqEsdRi77q99LaNKBqMzcLpUq4bS+A8=)
4: nX1l9uEaP3hKft0f6nr66330FaY.roa (hash: Ify3evSlWibc6XFuSTIlXp6BEPgQD/cUtILAv8sgqKU=)
5: rYOTmI6zBWy0_qXug-7vEbI5-NE.roa (hash: WCnXAEMnH2mCY9gWHiuKlZ1HO6eQUoArgriFfc+fAVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:35:16:e1:33:56:4d:59:62:8b:c3:c2:64:1a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Validity
Not Before: Nov 4 17:00:36 2025 GMT
Not After : Nov 5 17:00:36 2025 GMT
Subject: CN=8565d32aaff3483088b9cd3b44ec9364022b0da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:58:8e:cf:44:d1:51:0c:7f:f7:fc:83:9e:
fc:64:c9:45:5a:a3:c6:34:e3:32:9a:77:57:5f:f8:
36:8c:45:85:e6:75:b9:ea:bf:50:5f:7a:3b:86:e8:
90:b2:be:d7:33:18:73:f1:fd:85:b1:b7:7f:66:b0:
a6:1f:fe:9c:40:74:96:8c:ec:aa:8b:1d:e9:9e:aa:
af:a8:b9:e5:89:a1:64:49:5f:a4:f0:02:fb:01:7a:
79:6f:d6:1b:80:1c:b3:cf:c2:4a:05:08:a9:05:e6:
69:a9:1d:6c:6d:ef:1c:a5:d3:47:d8:f2:46:ee:5f:
81:fe:46:80:7a:60:0f:9c:be:42:9b:f6:29:8e:16:
06:71:0e:46:d1:2c:50:41:0e:22:f3:0f:ea:d7:83:
2f:36:6c:14:de:a1:75:77:04:31:6a:52:01:76:9b:
8a:37:b4:8c:64:ca:6e:7f:cd:b5:a4:26:d8:f6:8e:
5d:6a:78:d4:aa:85:4e:ef:af:1d:35:4f:fe:ed:5a:
2d:40:88:21:d9:ec:11:5a:8b:ed:e6:90:15:62:1f:
e1:6b:bc:8a:67:a7:be:04:b9:35:f2:17:bb:bd:7c:
63:40:ef:ae:31:13:2e:ab:37:41:6d:9d:d0:83:9b:
58:cb:ad:7e:df:d6:cf:74:ad:9a:f9:43:66:b4:2b:
c0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:65:D3:2A:AF:F3:48:30:88:B9:CD:3B:44:EC:93:64:02:2B:0D:A7
X509v3 Authority Key Identifier:
keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e9:69:dd:4f:1d:31:bc:6d:da:a5:66:5b:f9:d0:52:59:08:
07:1f:1a:7e:b4:f6:57:e5:c5:59:82:bf:d3:25:11:46:9c:a4:
c7:2d:63:4b:b7:ca:56:dc:d5:cd:11:5d:59:48:db:9e:3f:2e:
d0:2d:2e:51:62:57:83:9d:4d:a1:63:a7:f5:ad:f5:c1:32:5f:
f1:7d:c7:9c:57:3d:2a:70:8b:e0:4a:96:6a:1f:a5:7f:ba:99:
c5:38:9d:f3:b4:0f:45:83:b7:ab:7b:7c:95:8b:56:ab:20:4c:
f6:f4:6d:5f:b7:88:64:2f:8c:8f:8c:fb:73:a6:8e:98:42:8e:
28:bb:46:3a:6b:8a:88:4e:61:83:34:8f:23:17:d7:1a:df:ab:
33:1b:0c:04:ed:a6:4c:06:28:dd:56:c1:e8:a7:f7:64:e1:ff:
92:17:77:33:da:66:86:68:d5:0b:c7:27:50:a0:26:ad:f1:d6:
6e:a7:f4:50:3b:4d:1b:92:16:33:3a:96:b5:59:48:56:b7:f6:
71:23:f7:d6:fd:3d:a5:bd:7b:3a:dd:6b:e0:95:3b:de:68:04:
57:52:fc:12:60:7c:f8:b1:c7:02:4c:1e:39:92:c9:b0:6a:25:
db:7c:6a:d2:67:4a:77:d2:a0:89:ce:fc:fa:45:21:4a:22:7a:
2c:dc:f4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:25:12 2025 by rpki-client