Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: GF1rsJmK2ggXqfTSxfHcue4VOLDyvST+QbKahOTzJ5o=
Subject key identifier: 5B:56:8D:FF:39:36:9E:7F:D4:A7:A5:04:50:DF:42:A9:7B:41:AE:B0
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 019A4F99738358A0D55414B507E1A45D1DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 16:00:47 +0000
Manifest this update: Tue 04 Nov 2025 16:00:47 +0000
Manifest next update: Wed 05 Nov 2025 16:00:47 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: P/QFwv+EDaI5cwqeVFrEyxUO2qcEDRRGw3vF74iuaJQ=)
2: d-cXZlvvdlyn7ox05EmpqUd6gwY.roa (hash: nBiz8J2UJroitgcJmWpKEDt0TmsVS2dSW257R8wSk2M=)
3: ddyzrC5BC4wxEQNwmkjcZcFPmY4.roa (hash: 0XE307HFpJ7wb9YEVzh633mz+Wdn4W7KWCgB9kPDSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:73:83:58:a0:d5:54:14:b5:07:e1:a4:5d:1d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Nov 4 16:00:47 2025 GMT
Not After : Nov 5 16:00:47 2025 GMT
Subject: CN=5b568dff39369e7fd4a7a50450df42a97b41aeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:9c:ff:9e:35:fd:33:bc:7e:d5:00:29:47:
5e:63:a0:cd:c9:30:08:40:93:88:6a:d7:a2:f4:5c:
87:50:86:fe:12:37:ad:c7:93:8c:0a:49:84:60:9e:
9e:64:51:07:fa:0b:bf:d8:33:cc:61:a7:5f:da:b8:
10:96:a1:89:8e:1e:ea:93:e5:e5:92:73:e0:b6:dc:
71:7d:b1:b7:47:5d:ce:c8:a4:0f:df:66:a4:a5:fa:
49:2d:ad:53:76:4c:3d:90:33:2a:f0:39:88:9a:1e:
19:54:c8:bd:41:f8:a0:17:61:50:27:ef:24:0e:9a:
44:d3:a0:d2:0b:43:e8:ae:d4:d2:11:1b:29:c8:80:
bd:a5:fa:5a:b7:e5:36:01:82:f1:2a:6a:81:ed:06:
eb:f7:40:cc:a5:36:5a:ef:c1:6c:d9:57:0c:31:e6:
d7:f6:b5:3b:ef:a2:49:0b:26:a7:47:15:54:3d:79:
39:2c:e0:8f:a8:57:c7:49:4f:be:e6:89:76:8e:9a:
06:5e:de:62:f7:4b:d8:8e:5b:d4:fe:c5:e3:52:82:
e8:3e:15:8f:36:e0:d7:66:4f:17:4d:89:1f:65:eb:
0b:11:e0:af:16:bb:0d:2e:1b:a1:b4:2b:b7:2b:30:
be:ef:57:1d:86:a3:5b:96:71:51:95:a2:de:5d:2b:
5d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:56:8D:FF:39:36:9E:7F:D4:A7:A5:04:50:DF:42:A9:7B:41:AE:B0
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2a:b3:0d:e4:b6:77:c5:62:de:a0:7c:f7:74:8c:9e:02:63:
d4:b6:0f:de:93:6e:ff:a1:5d:5f:f6:af:5e:f3:00:3f:c7:7f:
04:ee:56:0f:ae:4d:83:b4:56:75:82:2e:4c:1b:ef:7b:f9:c8:
03:14:e2:f1:58:05:73:2c:c8:61:1e:2d:f9:c7:f3:77:63:9e:
d8:58:ad:1d:d2:76:33:46:b9:33:37:df:82:5c:4d:3c:86:ab:
ad:94:74:f4:4c:74:8c:87:b3:e9:ef:6b:42:50:a2:e0:8b:bc:
3d:be:de:f5:95:d1:07:b8:be:9f:93:ff:80:ae:40:40:b9:2e:
4d:48:13:8b:e5:09:47:35:af:b5:63:84:0b:47:c9:ad:4f:3c:
af:8d:2c:ac:10:c7:af:b0:af:7d:c4:89:a5:8e:88:41:f2:2e:
d5:05:09:80:6a:d7:b0:59:af:d1:b7:0d:f6:c8:44:4e:4e:e2:
5b:18:c5:10:4b:09:bd:a1:1e:62:e1:84:c5:4c:98:6c:2b:d2:
b7:82:38:82:ab:1f:e0:ff:fc:15:27:0a:42:a2:3c:03:0c:b1:
3f:73:1b:1c:1d:e4:f6:a1:18:e7:80:de:47:7b:97:24:4d:ef:
dd:06:59:d1:d4:20:0b:f1:0e:a8:da:e4:3d:ed:56:a8:9e:f8:
e5:06:dc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:14 2025 by rpki-client