Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
File: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft (raw, json)
Hash identifier: Z1zSz54V6PGr8PRsK5IyHm8UlGJPWcCgnYA7krZ49jc=
Subject key identifier: F3:55:40:2D:34:CD:F8:F9:5A:68:B4:6A:84:7F:9B:50:5B:19:5C:57
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial: 019A4EF5595B911618F6FB8879B3D02BA22A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
Manifest number: 12F0
Signing time: Tue 04 Nov 2025 13:01:33 +0000
Manifest this update: Tue 04 Nov 2025 13:01:33 +0000
Manifest next update: Wed 05 Nov 2025 13:01:33 +0000
Files and hashes: 1: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl (hash: vllKZA8uDBl8GHocELn0Rq0MAsVcsO55tYwr5NGEVx4=)
2: q36KB3psJEdwM9htMyeD7v_JoOg.roa (hash: TalVhq3AmB2TIBAEtWkTlS4vjvUd3V9bg1ZpQQHry4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:59:5b:91:16:18:f6:fb:88:79:b3:d0:2b:a2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Validity
Not Before: Nov 4 13:01:33 2025 GMT
Not After : Nov 5 13:01:33 2025 GMT
Subject: CN=f355402d34cdf8f95a68b46a847f9b505b195c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:97:25:a6:8b:56:15:1a:d3:ff:99:82:2b:
dd:9c:7e:2a:37:e4:52:ef:c2:86:7b:54:52:79:d9:
65:f2:cd:41:96:b9:43:70:d8:62:8b:9a:79:e6:f5:
08:3f:65:c3:52:11:8d:ce:81:fc:7f:39:9c:b0:2d:
32:2d:04:3b:a6:76:0a:b7:12:da:0b:7b:33:96:1d:
9e:e8:d0:60:5c:80:ff:56:f2:1b:ca:26:fd:48:c0:
02:a5:c9:21:d6:2b:f3:7a:c4:2d:72:e6:a2:59:8e:
05:78:7a:60:6c:e9:dc:11:3f:2e:a9:54:83:b7:91:
39:eb:68:86:e4:40:67:37:bb:95:d9:58:4f:6e:bb:
60:7e:40:fc:1f:2b:0f:d6:dc:93:3b:2e:30:3b:f2:
51:52:2e:f2:39:8f:65:9d:67:9c:e8:37:d9:14:de:
e6:a1:ce:14:85:e8:db:94:a6:96:78:8c:ab:9c:16:
be:1a:73:76:f2:24:32:82:81:d9:16:90:74:e8:36:
e4:30:4a:2a:83:e1:47:96:49:39:2a:c9:b2:6e:89:
70:b4:74:f1:de:22:78:23:73:5c:7a:79:66:40:8e:
32:9f:9f:6c:c3:d7:f9:c9:c1:00:c6:92:2e:ba:b7:
4e:07:a3:8a:d0:18:32:eb:e0:fa:68:b1:e6:50:59:
e7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:55:40:2D:34:CD:F8:F9:5A:68:B4:6A:84:7F:9B:50:5B:19:5C:57
X509v3 Authority Key Identifier:
keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:29:71:ed:20:d2:78:7d:16:df:b4:4a:40:1c:56:e1:29:06:
08:70:58:ef:05:4d:4a:39:45:d5:a9:48:05:e7:ca:45:4c:42:
9a:fe:5b:67:51:3e:a5:26:7b:4d:81:a0:ac:94:1f:f2:c0:32:
b1:fe:8a:7f:a7:f5:ec:66:d9:db:60:8b:1c:27:b2:8f:49:b9:
7c:7d:77:f6:33:b2:c2:87:24:9f:8c:0d:0a:ef:d4:c1:62:73:
a3:22:af:0d:56:3a:b2:44:9c:3a:92:48:a6:00:13:0a:26:59:
b2:2f:25:8c:56:b1:ec:ac:96:e1:12:77:4c:b7:2d:33:4d:0d:
02:ec:b4:aa:d1:71:9f:41:f4:6a:9d:63:5b:8e:35:de:42:cd:
21:7f:30:68:e0:39:4f:5d:53:f4:2f:59:94:a7:84:45:ad:cd:
75:0f:27:bf:a8:62:de:ea:66:21:be:f0:f3:9b:cf:77:50:1f:
b6:e2:20:21:1f:8a:f6:14:53:57:b1:b2:86:40:a9:ac:70:f0:
73:f0:57:f3:3b:25:79:0a:43:7b:50:d5:69:f8:9e:84:c9:ee:
30:8a:43:6d:16:9f:27:6f:73:d3:4d:a2:39:38:18:62:52:c0:
d6:d3:90:4a:2c:55:0d:06:39:5e:25:b5:1f:4d:c2:69:99:e0:
a7:48:2f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:53:05 2025 by rpki-client