Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
File: II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json)
Hash identifier: C3KRLperZGATOjYH6LfUW6xUSgFGwGrk01sxuhVtVEY=
Subject key identifier: 0D:E7:2D:EE:98:80:7F:8D:A9:6F:B5:D0:13:A3:49:C7:E7:3B:53:70
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial: 019A4F98D3C9CE50C2CBB9C372FCBC19BBCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:06 +0000
Manifest this update: Tue 04 Nov 2025 16:00:06 +0000
Manifest next update: Wed 05 Nov 2025 16:00:06 +0000
Files and hashes: 1: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: a70KuSauRymDqwaEqeox4m2mSvKE+cGjqNij31nkTKA=)
2: Sv8c63xNahZnEUX6sxkZS1Ry2Mw.roa (hash: jrXo/rmKfJlmke1E58p0Fv3ALUTTjd9LLG6tbA+jiaw=)
3: V04OCx0o1Bg0TgD8MO6kNsFMhog.roa (hash: 3a02UAIxWYHpz8tUKE7mHvONTRM/Wnqwu/RQszMGhpw=)
4: js9oNFtAP6uoXkguET2ifOtGxFk.roa (hash: xlI8bBSGf/iOY2KLlBGfTCvLGclFsfTElrxGe6FfxvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:d3:c9:ce:50:c2:cb:b9:c3:72:fc:bc:19:bb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Validity
Not Before: Nov 4 16:00:06 2025 GMT
Not After : Nov 5 16:00:06 2025 GMT
Subject: CN=0de72dee98807f8da96fb5d013a349c7e73b5370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:17:5e:51:c5:fd:d8:59:ea:3d:bb:23:38:
09:86:da:ab:84:85:1e:55:6d:0f:2e:46:5f:7d:cf:
59:c5:fe:30:ff:e1:f2:0e:3d:2f:26:9c:aa:7f:77:
a0:c8:da:26:9e:b2:2a:08:36:04:e1:6c:9f:5a:74:
ac:51:b4:27:f8:58:01:20:9e:d0:9b:76:93:51:b0:
d3:3c:77:a6:d9:67:b4:d9:a7:83:45:ae:a5:e9:01:
46:d3:ee:35:ad:7b:aa:9e:c5:9f:2b:32:24:7b:f9:
04:af:9f:87:8e:6c:19:44:ef:ae:92:50:e3:6b:b4:
14:9a:2e:5d:69:fb:f8:4a:ff:1b:c4:76:28:3e:23:
e0:97:ee:f6:3c:0d:9a:c6:c6:e8:a7:3d:6e:81:bc:
5a:5a:37:f6:d0:b5:07:b8:b1:3f:7e:7e:c4:11:11:
85:5f:90:56:b7:aa:86:20:b3:53:e3:a2:3b:a7:04:
73:06:a5:da:9a:63:a7:76:09:78:21:5c:62:e2:92:
45:d3:fa:40:30:95:68:a6:18:c3:a0:d4:1c:63:ed:
31:4b:df:b1:28:fb:d1:c5:34:b9:8b:e8:46:10:73:
ab:51:3a:24:2b:c4:28:32:3a:f8:5b:b9:2a:8d:20:
f1:64:d6:71:61:c6:02:2c:33:69:fb:ea:bc:1d:12:
5e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E7:2D:EE:98:80:7F:8D:A9:6F:B5:D0:13:A3:49:C7:E7:3B:53:70
X509v3 Authority Key Identifier:
keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:bc:74:77:de:08:18:ef:1c:d7:c2:9b:72:3d:89:af:62:8b:
3c:1e:79:ab:1d:55:82:b2:22:b3:b1:a2:96:f7:1b:ff:20:16:
77:8d:56:b9:10:28:69:b6:26:6e:b0:64:57:50:eb:b1:47:2a:
ca:20:65:03:1b:70:e1:88:8d:d7:19:70:4a:8e:5e:50:a3:5d:
24:4b:55:61:c2:bf:89:46:a3:35:94:38:5b:29:90:1b:7a:ed:
12:77:11:7b:15:a0:24:cf:b9:c3:60:64:4e:78:31:89:9f:78:
b0:ef:7c:c3:da:19:de:51:17:c4:6b:d9:38:40:55:cd:87:de:
cf:ae:4a:72:86:d2:4b:01:32:42:0f:77:27:ea:8b:ef:ba:87:
89:53:8a:d7:24:9b:6a:99:88:17:13:2c:02:55:3e:9e:83:d5:
50:58:09:69:b4:4a:80:c8:97:60:35:3d:73:aa:dc:00:22:66:
29:df:c2:44:73:59:aa:6a:10:e5:16:35:0e:a6:da:02:67:ea:
9c:fc:43:35:a8:99:d7:32:15:37:5d:d7:5b:69:9f:45:1a:28:
02:d7:be:0e:76:a6:e2:8f:85:aa:4e:31:4e:ee:26:5b:8a:fd:
cd:06:7b:2a:39:c8:2e:89:c3:c5:a6:db:a9:31:a6:f2:f2:0a:
f6:90:a4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:49 2025 by rpki-client