Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
File: 3SppXEEiHdjt3PxcS1zAt4nLlTs.mft (raw, json)
Hash identifier: 2HamkidH6zXLTYebGxJddpCk9iORf95ISsopiwjdblg=
Subject key identifier: 4F:7B:1C:49:7A:1A:B6:80:00:28:99:53:B9:10:DB:3F:34:C1:AB:20
Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
Certificate issuer: /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Certificate serial: 019A5007645EC3725CF9DA81DE0F2EAD17C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 18:00:52 +0000
Manifest this update: Tue 04 Nov 2025 18:00:52 +0000
Manifest next update: Wed 05 Nov 2025 18:00:52 +0000
Files and hashes: 1: 3SppXEEiHdjt3PxcS1zAt4nLlTs.crl (hash: 8B6t7Lob+6BmKhcvnjTB9ASHAgvgPLuuj0tM8wCWqus=)
2: ZxKbEdzKxauu7o-Y7eoipbP5kS0.roa (hash: bVgUBiwiMttSarotQ+bYBGzvg0m/rWkM8yb5LV2CZwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:64:5e:c3:72:5c:f9:da:81:de:0f:2e:ad:17:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Validity
Not Before: Nov 4 18:00:52 2025 GMT
Not After : Nov 5 18:00:52 2025 GMT
Subject: CN=4f7b1c497a1ab68000289953b910db3f34c1ab20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:2b:12:f1:c3:b2:65:45:4c:ae:41:ea:8b:
16:b3:ad:d4:f2:92:cd:03:50:03:9b:3c:a6:fb:56:
de:bd:2c:cc:59:30:5d:f9:66:e0:83:1b:c1:34:13:
c6:e7:ea:97:1f:54:33:86:62:ba:fb:bc:a8:29:26:
9c:61:ab:69:de:7c:48:dc:fc:7a:56:54:ea:c6:06:
5d:08:a3:1f:87:18:77:5b:0a:41:e9:fa:35:c4:42:
c4:1a:7a:ec:14:82:83:9f:47:1b:27:fc:fc:c2:d7:
ef:58:d4:1f:93:c1:06:29:d8:15:b7:f0:2d:b7:73:
28:e4:10:87:16:e0:b5:4f:c2:f6:09:d3:76:12:8b:
ee:c2:de:37:db:66:79:84:09:79:ac:15:21:0d:8e:
85:79:c3:ec:63:ef:3c:b6:84:de:19:be:46:2c:62:
4f:d5:f4:41:91:81:41:5d:eb:a2:14:70:b1:e7:85:
d0:72:7d:5a:49:d0:ca:db:82:e0:3b:eb:52:f0:ad:
0b:1a:12:71:7f:20:f6:7d:ad:ae:c2:3c:8a:c9:89:
ef:34:60:90:a0:68:77:35:ee:de:c6:98:64:48:49:
0c:ea:11:12:03:24:84:9f:08:4e:ca:74:e8:97:bb:
e3:0a:f4:b7:b2:50:68:42:61:0c:12:9f:ca:cd:fe:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7B:1C:49:7A:1A:B6:80:00:28:99:53:B9:10:DB:3F:34:C1:AB:20
X509v3 Authority Key Identifier:
keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5c:15:cf:6e:55:8a:bd:4a:79:eb:ce:4c:ed:c7:06:de:48:
a3:84:63:42:f7:00:98:76:81:9f:1f:44:1a:af:78:58:32:be:
60:af:5e:9e:fe:68:6f:6d:fe:29:26:53:91:d3:a5:cd:75:f9:
ec:e4:db:bd:8c:58:6d:5f:bf:e9:b2:51:94:28:b7:52:28:5b:
0e:f2:e0:aa:71:ef:a8:d0:60:8c:1f:6c:9a:bc:68:13:18:65:
2f:4e:f1:70:a3:d7:53:55:ed:c7:2f:6d:1f:8b:4b:ef:d9:1b:
d4:da:b8:62:49:4e:23:f7:0b:88:9a:e1:5f:bd:9c:50:56:6f:
f9:32:60:79:7a:cb:c5:e1:43:e7:0e:33:7e:a8:e2:39:a9:7b:
99:20:14:75:37:de:57:5b:43:48:ba:64:3f:fc:3c:87:4f:06:
f8:b4:21:9b:d3:b7:3d:f7:6d:d7:6b:9e:57:0e:8a:72:d4:0a:
45:62:d9:a2:80:c1:26:7a:4a:7e:ac:b6:3e:aa:f8:4f:e2:7e:
1a:87:d3:b1:e0:22:a7:82:67:47:5f:7b:bf:d5:2c:91:8d:f8:
3d:59:78:e7:20:da:01:5b:b8:58:a1:1c:88:e9:63:19:43:05:
e9:d6:bd:ad:47:89:18:a1:0f:fe:20:ae:5d:91:0d:62:b7:9b:
51:30:66:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:16 2025 by rpki-client