Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier: RGwU2Wh1qY2Ap9PFy/Z/oTOpXXvu+FkglLqH7XYytyY=
Subject key identifier: 46:CA:9F:35:57:6E:8C:58:19:E5:7F:59:60:6D:F7:8C:0D:AC:D3:F7
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 019A4F627C399916F5AA7C8D0A2EFBB67388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number: 16A1
Signing time: Tue 04 Nov 2025 15:00:45 +0000
Manifest this update: Tue 04 Nov 2025 15:00:45 +0000
Manifest next update: Wed 05 Nov 2025 15:00:45 +0000
Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: 2KtjfVD9s9PlFte7eeP3WPorTWPiOk8x7hPxJAAXnJ4=)
2: KC65iLduV38Y-_4YeZcOkvub1x0.roa (hash: 59wDbBZd77QyRnr9wiaIVyjbp4l+GRhLfxwyuRW0y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:7c:39:99:16:f5:aa:7c:8d:0a:2e:fb:b6:73:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Nov 4 15:00:45 2025 GMT
Not After : Nov 5 15:00:45 2025 GMT
Subject: CN=46ca9f35576e8c5819e57f59606df78c0dacd3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:9a:f3:b5:01:57:e8:6a:15:dd:d8:70:c8:
63:cb:52:04:d9:c0:ae:70:e6:b3:1e:02:6a:7e:3b:
79:bc:21:04:50:55:51:75:62:c3:bd:ca:92:ab:56:
a1:e3:29:e7:1a:49:49:27:f8:3f:4e:75:45:df:5e:
37:5b:11:fc:36:23:27:fc:93:15:4b:bb:e6:77:33:
23:e3:48:d2:91:5d:8c:ef:dc:99:e1:ea:89:e3:ba:
65:3a:47:ef:77:59:59:46:37:f0:57:58:b0:09:93:
40:b3:3f:06:9b:00:8a:a4:a9:51:88:c5:61:d7:9e:
5f:34:16:1b:b0:fa:4e:59:bc:1d:a9:3d:b1:c6:e0:
40:10:7c:35:40:e1:f2:97:41:1c:82:ce:4a:f6:8f:
4e:68:55:48:9a:7e:26:85:de:7f:90:0d:8c:e7:06:
0a:a5:ea:5d:9e:d9:98:3c:d4:a9:f0:c0:47:16:46:
7f:a0:bb:f4:09:15:b2:5b:19:3c:fb:46:a2:80:38:
f7:87:41:9a:17:08:78:eb:23:c9:7c:63:5e:29:7d:
2c:d2:29:ff:6f:19:93:63:74:19:65:95:f0:d2:11:
37:76:a4:7a:58:05:36:6e:f2:6a:de:7f:d0:70:94:
f7:be:b4:61:7c:d5:4c:a7:31:0c:0a:70:2b:57:d3:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CA:9F:35:57:6E:8C:58:19:E5:7F:59:60:6D:F7:8C:0D:AC:D3:F7
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ce:49:4f:bc:f9:28:0b:4b:90:1e:b0:1c:85:cc:37:c9:73:
e9:bd:79:24:b4:d3:08:08:d9:6f:f1:a4:2d:b8:b6:32:f8:46:
15:9d:8d:7d:26:a8:8f:9d:3e:d3:f5:61:9f:20:3c:23:e2:93:
88:a2:5c:1e:e3:c7:ef:92:01:b8:3f:9f:4e:19:73:fa:e6:ff:
ed:00:ff:4f:9a:bb:26:15:0a:c0:a9:70:95:b4:02:9d:04:1a:
fc:7f:a9:a9:25:ce:c3:4c:37:e1:ba:2b:c4:a1:c0:c7:a4:96:
f5:82:58:05:08:af:07:54:29:e3:41:61:6f:c4:03:81:c7:3a:
07:b9:47:de:b5:a8:75:ea:78:a5:bc:16:0e:2a:11:75:6a:01:
b0:ca:0c:6c:81:19:8e:3f:aa:75:cd:cb:81:e5:57:dd:35:66:
7f:da:83:2b:bf:0c:ab:79:ce:f1:de:59:51:45:0c:d6:2c:e4:
b9:3e:ea:d9:cd:62:f0:e3:4c:6c:fe:af:78:a4:16:db:ae:2e:
92:ad:59:b4:bd:23:51:d5:cc:37:b6:b9:01:f6:3e:ac:05:ce:
33:4b:a9:47:1c:b1:0a:7c:ad:88:86:29:3b:a3:b0:67:f4:a7:
29:d6:9d:14:e9:25:71:6f:5f:30:22:95:18:85:e5:a6:89:9f:
c4:f8:e8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:57:53 2025 by rpki-client