Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: etflCWP4vOeH2uc5qBrQPb8RYwhz3agtLggjFpAlfH4=
Subject key identifier: F9:55:88:FA:80:0F:23:EB:FE:27:7A:63:58:B8:49:A5:F2:B9:29:32
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 019A4EF40AD9FC6482E6EAA015957A22B3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:00:07 +0000
Manifest this update: Tue 04 Nov 2025 13:00:07 +0000
Manifest next update: Wed 05 Nov 2025 13:00:07 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: MXOOMarfQUDXszoby2Bi7NwO6jbCzyxYppbEs4JdnnQ=)
2: O3I8fzz4GA8viyeptOfjUJ2mnRw.roa (hash: MhSpfjBUjJxXqy4aU0rHbneKVULz0h6JWSZvHTRBN24=)
3: ovS3rx1XoRtGLlvdJ72CyzvNZcw.roa (hash: lov3tLPiy71ecc5+P9JXxH2Fu9PCJbxZNtxQg4EVWM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:0a:d9:fc:64:82:e6:ea:a0:15:95:7a:22:b3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Nov 4 13:00:07 2025 GMT
Not After : Nov 5 13:00:07 2025 GMT
Subject: CN=f95588fa800f23ebfe277a6358b849a5f2b92932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:1e:e7:b3:f0:80:d7:aa:84:d0:97:71:9d:
b1:81:79:3b:50:05:69:12:48:90:1c:b0:c9:72:ce:
43:51:d5:0a:da:40:9e:51:b9:17:f8:20:a4:b9:59:
33:af:e2:c0:3c:0e:19:c1:3b:31:b4:ee:b8:b8:fc:
a1:b6:0f:61:4e:ab:32:fd:6d:90:2f:6a:81:7d:d8:
f6:68:ba:5c:4b:dd:5d:90:db:d0:92:20:ea:31:40:
be:cb:42:21:79:c4:7d:ca:26:b0:c6:f4:7b:06:5c:
2e:26:5b:37:e2:1d:90:ac:71:9c:37:d4:91:2f:82:
86:c5:3d:34:5a:61:ca:16:5d:d9:b0:22:38:50:e2:
f1:31:b8:b7:53:20:d8:47:ed:84:64:11:19:14:47:
70:cb:3d:c9:6e:b2:b6:2a:93:22:dc:49:42:8e:28:
6d:52:75:43:b8:84:8c:59:46:c2:1f:1a:b6:b9:f8:
0d:9a:f2:d1:3a:6a:cd:e2:eb:ca:c3:1a:0e:5a:17:
26:98:3c:a7:f6:4f:55:91:a2:80:cc:a7:00:07:05:
9e:bd:67:a1:c1:4a:2c:33:85:79:b6:c9:ab:39:c9:
05:55:ce:8e:46:77:28:2a:60:3f:b7:d2:85:02:04:
35:e2:7b:59:6f:05:ba:07:78:04:16:a0:8a:ba:ab:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:55:88:FA:80:0F:23:EB:FE:27:7A:63:58:B8:49:A5:F2:B9:29:32
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:60:f3:4f:75:53:84:fd:7b:15:d4:8f:9e:72:16:6c:68:8f:
2c:26:ef:cb:20:8f:22:09:00:5d:9c:58:85:70:c5:ab:c0:a8:
ce:cb:46:df:17:21:b3:28:0b:5d:8b:0d:fa:da:65:d6:8f:a7:
09:c2:46:84:25:6f:90:4d:f9:51:cc:c9:5d:9b:32:7b:78:ab:
a2:ba:57:02:e6:3a:92:7b:b1:e8:61:a5:38:aa:86:7a:a9:ab:
d2:8f:64:f0:26:38:10:99:c4:47:7f:7e:ca:c5:3b:13:fb:a5:
7e:20:ab:8f:de:f5:c3:36:74:0e:36:d4:0d:2d:6e:67:e4:a7:
74:14:76:bd:aa:64:0b:26:0f:fb:05:d3:d1:54:93:02:33:c3:
97:07:7c:37:ba:15:2c:cc:7c:b7:65:71:f7:c9:82:04:ca:3a:
18:38:83:c6:5c:46:f9:b7:bb:02:e4:d7:02:0d:88:9f:be:28:
c8:47:f2:a5:15:d7:8b:fd:6b:35:68:17:a8:96:ba:56:9c:87:
7a:b0:30:31:8c:dc:9d:7a:f0:75:ee:93:22:14:b3:d0:e4:52:
b1:16:80:c2:33:c0:6c:20:14:1c:54:47:84:41:75:84:0b:64:
c1:21:12:a1:8b:1a:c4:88:c3:9c:17:e6:0c:eb:ef:d5:2c:f8:
d5:4d:f3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:47 2025 by rpki-client