Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier: mDeGqvGQZFy/S2qFce6veUueehDJ0zoou2xPgxrl5tM=
Subject key identifier: 2E:7B:EE:B1:C6:C9:09:4F:E5:82:BE:19:83:54:A3:EE:90:5C:C6:E9
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 019A4FD0015101FB9E9C2CDB8268CDC94342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number: 13C3
Signing time: Tue 04 Nov 2025 17:00:23 +0000
Manifest this update: Tue 04 Nov 2025 17:00:23 +0000
Manifest next update: Wed 05 Nov 2025 17:00:23 +0000
Files and hashes: 1: d07SpQbRU8GC6VlWm7_Lbsn9Sb8.roa (hash: cERcZw5Z94F+CMFJAljz3XdDY1JrRkuGSpDxJHDgzq8=)
2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: P26B1v8ajdFFoZVMcM+o+3f/RtJ/rPrGqTzrD5rikHc=)
3: vBX5hh9jIQFLXk1AFr7Iw7Y-XTE.roa (hash: AhPFv/8nWSRXANQRSY1wzdZ4XMNkwwYufrm8inXx3Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:01:51:01:fb:9e:9c:2c:db:82:68:cd:c9:43:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Nov 4 17:00:23 2025 GMT
Not After : Nov 5 17:00:23 2025 GMT
Subject: CN=2e7beeb1c6c9094fe582be198354a3ee905cc6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:11:42:a0:42:12:b0:8d:b0:e8:db:a3:a0:
84:38:b3:fc:0f:b3:57:06:e1:be:9e:1c:40:ae:63:
c4:b4:2e:19:48:9e:26:a6:b8:a6:18:e2:98:d5:66:
69:1a:fa:38:96:87:c4:b8:91:8d:03:ed:69:3f:47:
9c:7f:71:2f:7c:2e:e7:7d:7e:d3:2c:bc:8d:39:0a:
6b:ee:a1:e6:4c:07:d7:1b:fc:a9:90:5f:fc:a4:d5:
92:c8:2c:77:45:b6:ec:14:43:b6:bb:a5:fc:7a:9e:
29:eb:88:ba:3a:25:86:bc:d8:e0:54:76:52:b8:dd:
af:53:32:9e:5a:84:ea:d2:6d:ae:a5:ad:d8:67:e2:
a2:a9:f1:3e:57:85:ec:a4:90:81:b7:c7:be:23:ce:
da:5f:c2:65:e4:8e:2a:5f:f5:fa:1b:87:60:99:60:
64:9e:65:9f:af:09:25:f7:d3:2f:76:c1:2f:d3:15:
be:e7:f3:cf:46:d2:b0:5d:e3:87:1a:a2:4a:92:c5:
dc:9d:e1:10:2a:de:76:dd:be:c2:48:75:00:07:06:
e9:98:d4:ea:d2:63:31:ab:cd:5c:bb:3b:ba:a7:07:
c1:0a:84:86:34:ca:29:fb:68:b9:6a:26:c7:bf:51:
36:3e:9f:21:c0:30:e0:3b:e6:b4:51:28:c4:2e:db:
11:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7B:EE:B1:C6:C9:09:4F:E5:82:BE:19:83:54:A3:EE:90:5C:C6:E9
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:6f:6a:a7:48:cb:dc:c1:87:e6:f7:ae:d3:c5:5d:85:3b:30:
30:2b:0c:14:10:1c:21:ca:73:34:4c:29:0a:f0:b1:1f:04:fb:
de:e9:9a:96:0b:3c:22:19:99:55:3e:36:05:71:f1:14:1f:3b:
48:c7:80:11:93:22:e2:d3:2c:f1:65:78:73:b0:4b:e6:e6:b7:
44:16:07:18:9f:e0:b6:c6:17:9b:9c:9b:81:48:e7:45:22:2a:
34:65:4a:fa:b4:59:e1:25:4f:3d:87:de:12:41:3d:ef:3d:8f:
e4:56:3e:b2:73:a4:88:55:40:66:64:c5:98:01:8f:ec:6a:dd:
45:c9:cf:c9:fb:33:02:b2:c8:1b:2b:0d:a8:39:b7:fc:f0:44:
43:17:43:2f:57:32:55:f7:08:99:ec:5a:ac:74:fa:4b:4d:83:
b2:ea:6d:ee:48:a5:c5:1e:1c:40:3e:b8:78:62:d1:05:26:a7:
7a:6d:9b:22:bb:4f:11:2c:f4:84:75:26:80:e8:04:23:3d:c4:
89:e0:ae:3d:a3:78:f8:53:80:07:61:50:4a:2c:06:26:a2:4d:
36:e7:a8:3a:85:ff:ac:96:09:43:10:17:c9:c1:a0:8f:09:be:
56:42:23:96:92:6c:be:f8:e7:2e:1c:da:55:4b:1d:25:c5:e0:
34:63:b5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:44:57 2025 by rpki-client