Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
File: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json)
Hash identifier: DP93V4zbZiFNhZj+2RpSMVRUoJZD2/gkp9D4q5OZn/k=
Subject key identifier: 3C:9A:66:C1:68:25:F3:31:CB:A7:52:24:B4:10:63:89:DE:4C:B3:5B
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Certificate issuer: /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial: 019A5007618D2C0D7F4048669B31827495FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
Manifest number: 1396
Signing time: Tue 04 Nov 2025 18:00:52 +0000
Manifest this update: Tue 04 Nov 2025 18:00:52 +0000
Manifest next update: Wed 05 Nov 2025 18:00:52 +0000
Files and hashes: 1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: 3SiE3qKyK2kR9j8Y5XphNb0BSO6BYXyJyiky6DbDEQI=)
2: _iwCmsjTAlw634BVcFH9x4y6od0.roa (hash: sGzYd7+zk4VbbBPH9QI8yNwz1RatcjDRVrzAv9yiEMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:61:8d:2c:0d:7f:40:48:66:9b:31:82:74:95:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
Validity
Not Before: Nov 4 18:00:52 2025 GMT
Not After : Nov 5 18:00:52 2025 GMT
Subject: CN=3c9a66c16825f331cba75224b4106389de4cb35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:cd:c5:17:24:8c:f8:4e:00:b8:49:ac:8f:
86:b9:1d:ec:46:b6:0f:0e:b5:1b:52:3f:8c:01:08:
e3:55:01:f9:5d:59:00:8b:62:4f:42:ad:76:5a:84:
e4:68:a9:ef:3d:85:36:b7:2e:0a:92:1c:25:3f:e0:
e2:e1:35:71:73:10:44:13:28:a7:77:81:7e:fa:e3:
e2:cc:13:bd:76:24:7b:fa:fd:70:da:64:bf:e8:5e:
ff:6b:36:0e:86:5b:26:af:78:b9:39:17:26:76:b8:
d0:a0:38:d4:0f:af:05:21:84:b4:2b:23:9c:f4:1f:
d9:1f:83:4f:5b:90:8a:39:7a:9b:96:49:10:41:ad:
d5:95:3e:24:a7:cc:27:92:76:63:7d:b8:d8:f6:19:
e4:f4:ec:1d:0a:54:62:ae:57:fc:a7:f1:d6:fb:cd:
a8:0f:85:73:20:9f:2f:40:35:c1:d8:85:2b:ac:11:
b8:cb:a5:84:df:5a:0b:ff:6d:ef:3f:55:f0:74:69:
b4:ce:8a:92:93:e1:a2:5a:c4:d8:b3:30:40:d6:3b:
9d:c8:0a:fb:47:a0:19:86:f4:51:34:8a:25:82:32:
3b:17:0f:dc:7a:32:75:5e:ee:7e:73:5d:5b:90:f1:
7b:75:16:b9:8c:1f:2e:f6:f2:ce:ab:0a:51:1e:9f:
e7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9A:66:C1:68:25:F3:31:CB:A7:52:24:B4:10:63:89:DE:4C:B3:5B
X509v3 Authority Key Identifier:
keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f4:4e:2e:20:32:24:74:ba:dc:02:6b:3f:6a:e6:af:f1:00:
33:b6:a6:76:c3:be:a4:41:5d:76:84:a8:6f:75:3d:8c:5f:b6:
fc:ae:f6:a7:32:d9:94:3c:04:da:05:e5:d4:f3:d6:81:14:60:
72:1a:34:58:52:00:e6:c3:d4:ab:27:8a:7e:86:c3:1f:98:55:
86:e5:2b:43:dd:f3:3c:a7:56:e2:54:b9:72:4a:4c:6d:a0:19:
06:10:50:1d:2a:d0:b5:81:5d:73:ac:9e:21:6d:98:2a:ee:f3:
da:07:fa:1b:70:e8:3e:e1:91:ca:76:19:38:b2:47:24:24:f1:
fe:10:ae:5a:29:ee:2c:15:4c:18:f8:02:61:2b:da:0f:b0:ea:
38:de:91:8b:a8:32:97:f2:ce:4b:5a:1a:0f:75:7d:9f:23:35:
be:ba:f7:20:fd:14:15:58:4d:bd:ef:be:78:0c:04:5c:7e:08:
33:d2:24:f8:60:d3:e7:ed:89:92:63:48:65:41:ea:51:3a:7c:
84:c2:81:82:64:bb:de:34:29:d3:c8:1e:fc:44:e8:4e:e4:42:
f5:66:d3:eb:a6:bd:65:02:f3:1d:09:c5:6a:2b:ec:b9:53:22:
48:44:0f:13:5a:1b:d2:83:17:f1:a6:90:44:15:e2:0e:ee:c9:
47:43:2a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:51 2025 by rpki-client