Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier: cWdNJRzHnaIzcvbXCSwLtGqBU4UISORk8sFhgVXKWd4=
Subject key identifier: 43:38:73:E8:38:29:2D:DB:A1:AC:1B:3C:AE:F7:9F:3D:5E:E8:12:96
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 019A4D3D40D0AF558B6CA855D4C099B7CB00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number: 164D
Signing time: Tue 04 Nov 2025 05:00:51 +0000
Manifest this update: Tue 04 Nov 2025 05:00:51 +0000
Manifest next update: Wed 05 Nov 2025 05:00:51 +0000
Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: FKH7GSxdlNvnXdLZUlPaEhyH2DSDFZOYfrkwCdjl30M=)
2: i93FbkwGzwrRV5pk719Azh7mnco.roa (hash: FbLtCYorp5+hnW87pG1j3ZHIdaixJG9L/nchejMVUes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:40:d0:af:55:8b:6c:a8:55:d4:c0:99:b7:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Nov 4 05:00:51 2025 GMT
Not After : Nov 5 05:00:51 2025 GMT
Subject: CN=433873e838292ddba1ac1b3caef79f3d5ee81296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:4c:33:dc:ed:63:de:36:7f:4a:69:57:a5:
01:12:9d:87:95:3d:cf:a8:9b:bf:b8:93:14:dd:3c:
20:e2:d3:6f:72:f6:4d:8f:ea:f4:b3:06:d0:e7:f3:
4e:4c:96:9b:32:3d:d2:43:af:91:69:7f:03:ed:56:
e4:1e:dd:64:59:fa:b2:d0:2a:77:55:c7:d9:c7:bd:
2a:93:c6:a2:ef:ee:c6:8e:17:29:e8:31:34:37:8c:
9b:ee:7f:e3:0d:b6:64:b4:34:9c:4c:43:4a:c7:7f:
45:47:50:39:78:ef:01:98:fd:67:84:18:9b:d0:be:
85:64:66:26:49:48:6c:93:35:5e:a8:8b:2b:b5:c9:
b5:52:95:1e:81:cb:af:49:8f:aa:a6:12:c3:2c:eb:
7b:fa:87:47:55:c7:84:ee:2d:82:46:54:ed:b9:de:
e4:9b:e5:30:19:ad:19:62:20:38:57:16:fb:53:31:
bc:ea:27:cf:f3:d7:57:59:82:e2:f4:02:a7:20:6c:
c7:32:9e:0c:72:cf:66:53:13:47:f6:42:51:37:5c:
de:d8:fa:25:3e:e6:e4:64:71:1b:b2:b0:f3:d8:ef:
11:93:e0:be:86:98:c0:be:f0:62:de:5b:c0:02:a1:
c8:bd:b3:e3:10:ee:58:7e:68:1d:0b:48:62:2a:cb:
ea:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:38:73:E8:38:29:2D:DB:A1:AC:1B:3C:AE:F7:9F:3D:5E:E8:12:96
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:03:b9:92:07:df:58:7d:4c:7b:01:26:75:0d:0d:52:ad:9d:
02:17:ad:a2:5d:4e:e3:50:63:d2:fe:d9:eb:82:28:24:a7:d7:
b8:df:a0:9b:be:2a:7d:5f:92:cd:76:48:c9:12:86:35:d6:ce:
bb:9d:49:0c:e9:1d:69:f9:e5:0e:9b:f0:d0:20:f7:78:83:c4:
e5:c4:2c:2c:81:da:00:44:67:4d:e4:39:03:d2:86:6a:d2:44:
38:a8:97:40:ac:c1:e9:df:6b:97:b5:38:ac:53:2c:cf:2d:58:
fe:f0:4e:8d:a6:75:a8:1d:73:d0:3c:30:94:67:ba:52:ad:6b:
26:86:7c:c6:82:d0:a4:66:71:a8:4e:0d:1d:62:fe:85:22:13:
72:ad:0e:ff:2f:62:78:7e:2b:a8:dd:5d:8a:20:f1:b4:c9:2e:
1f:b1:1b:8e:b1:2b:f2:a7:8f:06:2e:0a:b3:e1:07:bc:03:62:
eb:62:2a:5e:9d:cb:1e:ca:02:50:7e:b3:5c:ee:a2:15:6e:ba:
8f:42:b4:cf:9a:7f:ba:87:9e:8e:01:7e:f0:b6:57:5b:18:2b:
80:eb:39:4f:53:8b:cc:fa:ca:08:b3:5b:14:50:77:b8:85:94:
c4:5a:54:e8:96:6c:42:8c:96:5f:5c:6c:ee:79:70:ca:b6:6a:
77:05:83:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:36:23 2025 by rpki-client