Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: 6OF6Xxh6Vs7/cnS2bP1vljJBaIAFlm6rd/PIyrTLgcc=
Subject key identifier: D1:30:12:F7:BB:04:D8:D9:88:DD:FB:9F:9B:56:54:22:8D:5A:52:FD
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 019A4E868A2131913558D8EA63F6BEFFB48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 11:00:31 +0000
Manifest this update: Tue 04 Nov 2025 11:00:31 +0000
Manifest next update: Wed 05 Nov 2025 11:00:31 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: GtTbNZ2+UAyJ4puHWsddul6GgS3KbvtFzBjyPnoEHAc=)
2: CCRf4uRfN50mc9puWV81ppkreOw.roa (hash: LGl0z7K8wV8haQ1zz2k3H6t4IGmg2Wy0LO5aidZN86c=)
3: gscq1-4ndiJ65U4hoz3eyHbkbS4.roa (hash: 24Hqzy5xg+vDt6hLmdJILsfqCK0ST6pwEHLOwV8AwS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:8a:21:31:91:35:58:d8:ea:63:f6:be:ff:b4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Nov 4 11:00:31 2025 GMT
Not After : Nov 5 11:00:31 2025 GMT
Subject: CN=d13012f7bb04d8d988ddfb9f9b5654228d5a52fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:37:cd:7c:d5:3b:92:04:da:5a:ea:05:bd:c5:
78:26:1a:b1:75:ee:10:4c:2c:e2:f2:37:2a:29:8a:
d9:43:8f:24:f1:ed:d3:25:b4:3d:48:71:fe:fb:20:
24:b4:2b:e7:cd:64:5b:13:e5:5d:2c:d3:a9:53:a5:
5f:0e:39:9d:0b:1c:f6:1f:d6:38:f9:a1:e1:4d:bf:
aa:39:97:33:e6:73:8b:e0:1c:2a:e7:9d:52:93:70:
bc:39:64:ca:4d:0b:79:43:4e:c4:9a:e5:56:be:c9:
df:7b:ae:3e:07:41:49:9a:6e:c3:d4:9a:51:d1:25:
aa:08:7b:48:24:9d:36:0e:d3:b0:38:b5:e8:94:76:
7e:cf:b2:97:bd:fa:d2:0d:e0:2e:0c:2c:ff:10:6d:
10:6d:04:a9:b8:e5:89:81:ae:f2:34:55:15:20:5f:
57:26:db:ec:eb:75:47:8d:12:3c:59:ff:86:7f:27:
0a:ba:8f:29:d1:a1:f0:c6:08:e9:35:4c:67:56:08:
43:3d:17:cb:6e:11:64:67:bc:4f:14:b9:c0:af:f9:
e5:93:66:92:31:27:1c:aa:cb:4b:80:c2:3c:d5:d1:
a9:03:b2:11:55:1e:49:83:d4:74:5a:87:40:b4:e3:
a2:1a:f1:a3:f7:70:cf:f0:c3:0b:0f:d8:d8:37:80:
1f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:30:12:F7:BB:04:D8:D9:88:DD:FB:9F:9B:56:54:22:8D:5A:52:FD
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1b:3d:ea:0a:89:06:ae:33:20:37:ab:09:cd:f1:36:ba:fc:
b8:82:e6:05:6c:6d:39:52:42:ef:31:37:10:64:fc:61:a1:a1:
7d:b5:8c:36:dd:89:71:20:11:7d:1e:c9:69:81:a8:83:39:40:
85:41:cb:8f:97:83:39:61:cd:ba:93:7b:39:6d:a3:b3:12:34:
cb:79:c4:82:52:d4:a3:c4:71:34:12:44:9b:59:c2:79:38:96:
1a:0a:49:2c:72:ec:1b:ca:45:4d:ec:13:c8:47:dd:87:96:fb:
2c:c8:72:2b:7d:e6:46:80:fa:87:dd:a9:57:04:28:e0:c6:0e:
02:a0:81:36:16:d7:d7:49:f6:32:1a:87:f1:e7:76:ac:16:81:
08:95:80:93:33:8b:d8:52:8e:f9:ea:1f:e4:a1:7c:f5:d4:1f:
92:08:53:23:36:b4:57:e5:07:bc:39:3d:98:91:98:08:06:c4:
31:dd:1a:28:45:a7:9b:08:5c:4d:61:ad:ac:51:41:cb:bd:71:
5c:e2:cc:bd:a9:f5:17:ce:f8:75:a9:14:38:d7:6b:20:f9:9c:
66:57:84:a2:82:ab:bd:7c:92:44:f7:73:16:97:cb:6d:a2:2b:
f2:d8:82:b4:fa:8f:55:f7:fc:93:ee:ee:0a:d5:3f:02:92:98:
91:6f:fa:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:50 2025 by rpki-client