Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier: AwDGxLyzTpRpA8QqcQW8o4TRnokaqsUYahLiHfQI6oI=
Subject key identifier: 23:3E:6C:99:F8:35:B8:55:ED:83:C3:75:1B:E8:D6:F1:FB:29:BE:DD
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial: 019A522CD213D77C2AE3CF6F5B90BE144396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number: 04DF
Signing time: Wed 05 Nov 2025 04:01:00 +0000
Manifest this update: Wed 05 Nov 2025 04:01:00 +0000
Manifest next update: Thu 06 Nov 2025 04:01:00 +0000
Files and hashes: 1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: +JO/eK9N0bwtIyeCRoqKZIN3SG6BvCqguKbFy3tiKUY=)
2: Opp8U8aeHzNwIE0mPBiUqooeCJQ.roa (hash: V/D3sQNgSw6lGL7igciFA6sJiWbs7FF9hEBFUMCcvFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:d2:13:d7:7c:2a:e3:cf:6f:5b:90:be:14:43:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Validity
Not Before: Nov 5 04:01:00 2025 GMT
Not After : Nov 6 04:01:00 2025 GMT
Subject: CN=233e6c99f835b855ed83c3751be8d6f1fb29bedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8e:c5:ad:05:17:f1:05:38:ed:b3:94:df:fc:
88:57:fc:f4:c8:da:37:4f:21:b4:41:dd:1d:3a:ad:
3b:19:41:cb:86:23:6b:da:d4:ab:bd:a8:00:a9:89:
f5:6a:88:6c:41:75:4c:48:36:d2:1f:7a:e0:7e:75:
de:43:62:ad:52:83:be:4a:a1:35:bb:84:b1:27:92:
bc:fc:6c:95:61:d6:7a:20:34:47:90:dc:cf:36:19:
5b:2d:b4:9b:35:2d:41:7f:ff:80:bc:58:1b:5e:d9:
46:2b:41:1d:7b:09:f2:10:b3:d7:bd:3b:0f:29:a8:
10:f2:99:ce:09:bc:32:d4:f9:b1:50:5a:d3:b0:ed:
c4:2d:ea:27:20:eb:a3:98:39:e0:cb:47:a4:f1:cb:
9d:73:01:97:5e:60:86:0a:60:bd:6e:e6:4a:e6:ac:
c9:24:80:bd:7c:33:48:a7:32:9a:45:00:f4:bf:93:
e7:96:07:f6:b7:a6:c1:ea:53:04:62:51:cb:01:e9:
10:44:55:ce:a2:a5:6c:5d:13:ad:7a:67:d8:78:df:
25:a1:fa:28:50:e5:ff:99:98:37:71:70:ac:36:cc:
46:f4:7b:14:fe:dc:ed:93:3b:15:23:40:2e:82:e9:
bd:62:9c:d7:91:70:fc:5b:dd:f7:67:b5:d8:8e:00:
b9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3E:6C:99:F8:35:B8:55:ED:83:C3:75:1B:E8:D6:F1:FB:29:BE:DD
X509v3 Authority Key Identifier:
keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:25:16:79:07:39:78:5f:c0:74:28:82:81:8a:2c:be:05:6a:
5b:3a:a9:68:9f:5b:09:fb:4f:03:32:29:27:2f:73:88:1d:b3:
da:5a:be:31:be:d1:c9:30:68:3c:bd:f7:98:0b:58:a5:33:6c:
3c:e9:c0:b9:5d:07:68:50:82:6e:7d:e0:03:7d:48:5a:58:ee:
12:e2:58:af:26:bb:7f:25:01:8b:e6:ef:c9:ed:bf:69:c5:71:
c2:6b:c8:4b:4f:37:73:11:96:b0:d4:e7:13:f4:69:54:19:85:
09:45:b3:68:ee:0c:69:66:d1:55:5a:d5:c9:64:35:a6:51:30:
b2:7a:62:12:29:f7:3e:e3:bb:ae:00:a8:be:61:cd:23:7c:9f:
a9:63:e7:42:c1:ea:5e:15:70:b8:a5:5a:55:5f:29:4e:72:97:
d9:01:6c:ae:f3:1c:cf:2b:6d:31:25:35:b0:9e:89:80:9e:dd:
2d:9d:dc:f0:cb:a6:82:7d:34:6d:cb:38:41:d6:1e:2f:d3:e5:
ce:78:8d:3a:c0:a3:86:3e:a2:b5:b2:0f:aa:c9:b0:93:ad:aa:
5b:83:18:54:c3:8c:71:64:df:d7:30:4b:04:93:a1:6c:86:3c:
50:cc:fc:a4:0a:13:58:1a:04:e3:a6:bf:56:14:ff:18:d8:ce:
69:c4:e4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:23:52 2025 by rpki-client