Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier: 5py8MxVM1tYg8jjxjwrt7/CGiZbcbj5GHoV7Ce51KNY=
Subject key identifier: A1:B6:5D:4B:20:DC:71:84:A4:8C:24:8D:A0:96:1D:69:70:7F:B1:E5
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial: 019A5074CCDE047632C56262EB6E942575AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 20:00:22 +0000
Manifest this update: Tue 04 Nov 2025 20:00:22 +0000
Manifest next update: Wed 05 Nov 2025 20:00:22 +0000
Files and hashes: 1: 6D6NbO4mpX3571YePb7wBqCbgBc.roa (hash: 360JpGFWi4fwKRE3FPgMGW/rJz0k3wsKNSQFnzGnVZI=)
2: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: 8BgezL7q4CHxxnEQzlYwc4wmfuSF7BZVq1f+KfWBeew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:cc:de:04:76:32:c5:62:62:eb:6e:94:25:75:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Validity
Not Before: Nov 4 20:00:22 2025 GMT
Not After : Nov 5 20:00:22 2025 GMT
Subject: CN=a1b65d4b20dc7184a48c248da0961d69707fb1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:7b:52:3e:94:c3:56:d6:6d:39:f4:1a:ba:
02:29:48:07:5b:14:29:33:28:0c:df:b9:17:7a:99:
f6:a6:17:d1:5d:ed:4f:39:c8:1e:e1:42:e8:22:e9:
27:b8:95:81:27:07:58:c1:ab:6b:dc:03:43:dc:da:
01:c0:9e:d3:cc:65:b0:01:19:8d:db:1e:44:db:f5:
c3:37:6a:c6:d6:f4:b9:d8:26:be:1a:90:63:09:83:
2f:46:9e:f4:b1:72:1f:7e:30:7f:7d:7d:2e:e7:81:
bc:af:bf:76:00:fe:4c:c1:17:5a:ae:e7:06:ff:bf:
e5:c8:80:1f:5c:04:d7:63:42:a8:d0:b9:35:c4:50:
c0:51:79:02:3a:51:57:dd:36:00:b0:ec:2f:f5:11:
4d:54:b4:b0:63:99:26:54:1c:1e:75:43:0d:b7:c9:
1e:3b:82:a5:3c:1e:3f:a7:57:11:1d:be:7a:68:33:
b7:2c:3f:11:62:26:bd:88:97:eb:2f:4c:61:eb:3e:
d4:b1:0c:07:6b:1b:e3:37:1c:fc:01:9e:8f:1f:dc:
c3:b7:c4:0e:0f:e8:8e:ef:a8:8a:6c:88:23:fb:e0:
dc:94:f9:96:41:a3:00:fa:e8:b6:44:e0:61:b3:f9:
0e:1e:9f:b3:fb:df:c4:87:c7:d4:98:5e:a2:e7:48:
d2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B6:5D:4B:20:DC:71:84:A4:8C:24:8D:A0:96:1D:69:70:7F:B1:E5
X509v3 Authority Key Identifier:
keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:94:22:49:5c:19:a5:1f:cd:99:5b:16:18:9c:41:60:e9:2c:
76:4c:2a:e9:5f:4a:5b:ca:fe:bc:6c:0a:a7:e5:ef:eb:9e:84:
44:fb:53:c2:c5:26:8b:b4:4b:e5:76:d7:5b:a7:9a:d1:63:61:
09:68:e7:6c:e4:29:80:c4:d2:dc:01:60:19:d3:be:53:e0:b9:
42:7e:56:13:46:2f:77:67:3c:37:fa:52:e8:d5:bf:91:81:4c:
1f:f5:39:f6:bf:a1:ca:3e:13:7f:3c:d1:93:aa:ac:9c:ad:58:
20:19:8b:05:bc:b1:8e:02:91:69:53:7d:b2:24:ed:cc:50:18:
79:52:24:8b:1e:a6:cb:27:d5:fa:d4:cb:ba:21:5b:2d:fb:ea:
8f:f5:19:99:b0:9d:da:5b:6a:5e:e4:68:e8:ca:b4:4e:5a:68:
a6:b4:30:59:1d:06:73:06:a6:eb:3a:4c:57:b4:bf:7c:14:72:
7b:d9:55:de:5d:08:93:2b:ec:26:3f:e9:86:6d:e1:a5:ac:8c:
77:4a:9f:2c:19:cc:9d:81:22:82:87:a7:b7:64:12:c5:44:0a:
ae:6b:ce:dd:b2:97:85:67:92:d0:ff:9c:14:71:c8:3e:f1:8a:
6a:2e:b7:86:0a:d0:57:2d:9e:0a:f4:70:c8:de:16:5b:b9:cc:
f4:07:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:59 2025 by rpki-client