Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
File: 3g2da2l8ochlcMJWhi5oWLR5nIU.mft (raw, json)
Hash identifier: 5wO82ZXxKrxWX+RAR2BwIka7OBIbI+Xl12PnBGQgCNc=
Subject key identifier: 8C:FE:03:49:0E:45:8B:18:AA:8C:93:2D:43:69:7E:62:09:FC:C0:0E
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 019A5074FA5B902634B44DB792A96DC54B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 20:00:34 +0000
Manifest this update: Tue 04 Nov 2025 20:00:34 +0000
Manifest next update: Wed 05 Nov 2025 20:00:34 +0000
Files and hashes: 1: 3g2da2l8ochlcMJWhi5oWLR5nIU.crl (hash: uKTBhfsN9/ekGMDfO+pNqeXULbNuw297vM3mj++zqT4=)
2: CURhnBTebRtFbuqIF-dFXdwxOsI.roa (hash: N2c5XcgW+AQpVpLwLHbjy6S9Vm1RjK7GXpDlAsFZpfk=)
3: EUX35BVNkJsUjFXuBk75OVm9PCc.roa (hash: K2j+jUDEk3zskvvRatSmoYAxHWdNXJq7sEJx+OMyHQQ=)
4: EpSf_xGsxic86z10zbwqzKmasW8.roa (hash: eSnnnz/WKP7V/MJyjND4ey6FBA8RQok1qLjk+ng6oW4=)
5: P2rbCazRzAecS6cq7qBlJh3ulhk.roa (hash: eS1swdw4PwPA3JuCzPIM9DRGgb8q7vXujdInn+mWiHc=)
6: mld6HE3RapKTIrTK3ARnJwX6Nfo.roa (hash: QckW2u4tae0vEXpqjOByW8q7ybuT0MKIf8YyQZ8Ec7k=)
7: pX4EUgeDNNWi24hGb7Vs1LSwVFU.roa (hash: 8qojOgWb70IVU0ElW5/Sut6REATPavh52G81zhsEHj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:fa:5b:90:26:34:b4:4d:b7:92:a9:6d:c5:4b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Nov 4 20:00:34 2025 GMT
Not After : Nov 5 20:00:34 2025 GMT
Subject: CN=8cfe03490e458b18aa8c932d43697e6209fcc00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:5b:0a:1e:64:a7:ac:70:4d:0e:16:f2:bd:
ae:57:f4:e3:53:95:0b:c1:64:7b:10:68:3f:1f:78:
17:6f:f7:5c:f1:93:de:8e:14:60:43:07:54:36:ea:
df:ab:bc:46:1c:9e:38:00:6e:cc:8c:92:22:00:f7:
f4:a0:1a:0b:de:48:ce:03:fb:d7:02:d3:82:32:01:
19:b0:3e:1e:32:8d:d9:63:2f:49:c1:9e:98:ef:02:
a2:80:2b:7e:05:b9:ed:9e:b4:b9:5f:30:3d:4f:98:
ac:ab:ab:eb:c0:c9:1e:42:2b:e1:78:6c:5b:9f:bf:
90:79:36:61:d8:1f:02:23:76:f8:2a:bb:07:01:ac:
b3:cf:32:62:a1:26:7f:16:71:5b:7d:79:d3:80:f9:
19:71:e0:7d:08:91:d1:4b:2f:21:e8:9b:e7:7c:db:
f6:43:01:0d:67:58:2b:05:df:39:8d:57:d4:35:9c:
54:fc:d4:d4:6a:15:f9:fd:ca:4b:d4:3b:91:47:8c:
2b:17:dc:40:70:9a:45:b4:82:77:00:0a:f6:35:a0:
1c:cb:40:19:89:c5:8a:7a:3d:4f:a6:4a:1b:fe:78:
15:55:40:8e:25:ec:9a:6b:7c:56:1d:b8:b0:62:0f:
65:03:e6:a4:1b:b7:06:45:c0:a9:d9:62:79:05:b8:
de:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FE:03:49:0E:45:8B:18:AA:8C:93:2D:43:69:7E:62:09:FC:C0:0E
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:be:99:3c:d6:38:3b:ac:6e:1f:88:f2:2d:c0:46:12:02:dc:
5a:df:37:14:03:78:d3:48:d9:46:d6:cf:d7:fc:73:10:61:d9:
49:02:ae:ca:da:15:4a:5a:f8:08:09:5b:cd:4a:b2:5e:7d:6f:
7d:5c:b9:8c:81:66:02:64:bf:69:1d:da:97:76:14:02:53:df:
f0:b0:66:9b:3f:5c:0a:38:10:b1:f3:6b:1d:f5:b7:36:ac:a6:
02:1f:72:c6:52:e5:8f:8c:c8:9e:ef:93:44:e4:b5:be:95:d3:
8b:ed:c6:6b:db:c5:f1:3d:a4:1d:b2:9f:2e:49:68:24:3c:23:
5a:79:4e:7a:f3:26:12:c0:50:e1:4d:c1:1c:da:ce:f1:00:5d:
1a:a0:63:d6:dc:6f:34:44:46:7a:e1:b8:b9:02:fc:1e:d7:25:
d1:ea:5e:73:a2:c0:05:94:ea:ec:63:2c:fa:f1:8a:ac:48:ac:
9e:18:63:86:ab:28:2c:fd:04:14:7f:e0:a9:4b:fd:36:f3:4f:
7e:2d:29:c5:c7:b3:4f:ac:f4:7d:d9:54:be:9f:21:e1:90:7b:
ca:7e:74:c9:a5:5f:0c:8c:f2:99:47:a6:2a:69:f9:a5:87:6d:
17:73:15:f0:04:66:b6:06:02:78:f3:7b:e8:b9:0c:fc:a0:e9:
0b:58:f4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:51:35 2025 by rpki-client