Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
File: 3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json)
Hash identifier: I54ATlTRORwDkZUaHS8vRW2PSGN9WqE3UZ/kKljW480=
Subject key identifier: A8:81:FB:1E:2D:C9:61:91:0E:A7:70:31:EB:B7:15:BE:39:91:8B:1F
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 019A4EF51FA0F952B97091A1231006B79C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:18 +0000
Manifest this update: Tue 04 Nov 2025 13:01:18 +0000
Manifest next update: Wed 05 Nov 2025 13:01:18 +0000
Files and hashes: 1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: 6doWiwASBYaMIL2nRDA/2eCmVIXBl+73ZCYyP/9lTks=)
2: lGIx-o92jKFHwjzv3WLOo2W-Z-M.roa (hash: Q5Tqe0EHcZZYvwuXt1YX2uqSKiJ+UhyPnyv5Ni+/PxY=)
3: wV8zvnBET2OmPNrrtE4SsK5y3DM.roa (hash: WHZUiMThERHZ0hfVjMipF4WGFlL19sh6184Ce9U7WFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:1f:a0:f9:52:b9:70:91:a1:23:10:06:b7:9c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Nov 4 13:01:18 2025 GMT
Not After : Nov 5 13:01:18 2025 GMT
Subject: CN=a881fb1e2dc961910ea77031ebb715be39918b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:1e:43:84:2b:c2:69:fa:c8:e9:d9:21:48:
fb:76:27:52:80:90:7a:da:4c:7e:6a:75:ae:77:ae:
fc:21:29:4f:19:57:e4:30:78:10:f9:de:29:cb:59:
d4:af:08:8c:27:de:de:4a:f7:9f:0a:d3:bb:45:7d:
7c:83:52:ca:ba:49:ca:d9:98:cf:e3:54:4f:b7:95:
d3:02:09:c7:ea:5e:6e:37:7d:a1:ad:95:a5:16:91:
06:69:25:5a:fe:c8:3e:4a:a5:f9:d4:e5:a1:ea:e8:
9e:40:2c:2c:3c:09:c1:2a:d5:84:2f:2f:c6:60:f1:
80:73:84:13:7a:c5:cd:18:60:d9:32:0d:38:8b:5b:
7a:a1:2a:c5:ee:06:9d:68:b3:a0:1b:49:e0:a4:0f:
84:84:06:dc:30:9f:0a:aa:64:db:76:fe:4f:7e:98:
d3:3b:21:d8:c7:ac:e2:23:24:5c:7d:6a:cb:e6:8b:
03:b3:26:36:e1:e6:5c:9e:5d:6b:f2:da:2d:16:f0:
65:c6:b6:df:4e:0b:bf:6c:83:35:fb:89:82:0b:28:
7e:fc:1a:f0:7f:89:b8:48:23:e5:e0:7e:23:0b:ca:
6b:b6:f8:70:c1:64:8a:95:59:48:aa:d5:40:3a:a0:
ab:ee:f2:5a:de:6d:3c:c4:00:9c:ad:71:0e:07:21:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:81:FB:1E:2D:C9:61:91:0E:A7:70:31:EB:B7:15:BE:39:91:8B:1F
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c5:a9:33:69:c4:72:ba:25:1e:b8:19:47:b1:11:ce:eb:b6:
8f:e0:31:b4:79:44:60:d9:ee:03:08:67:18:fa:ed:1f:fd:fd:
ea:59:a6:06:90:eb:5d:3b:df:88:e7:d4:18:ce:a2:e4:32:c9:
05:8f:dd:74:28:80:18:96:e5:0c:65:a9:5a:44:01:d4:1b:14:
64:78:40:cc:a2:c0:46:47:ab:a7:ae:27:d8:c7:c8:df:f4:b7:
0c:48:b7:8a:de:cb:19:24:0b:42:fe:27:fc:dd:12:ed:cc:42:
e3:f9:05:36:4b:04:01:87:06:7a:56:23:c3:da:e2:35:50:d2:
22:31:df:7d:ac:ad:ee:b2:e5:69:d0:c7:2b:c8:d5:55:cc:20:
3c:4d:d2:70:a5:14:1d:56:21:f5:ab:11:e9:01:b1:21:a6:b3:
c3:12:ee:f6:92:f3:db:7d:bf:d4:02:00:82:19:a0:51:54:c5:
f2:66:61:15:2b:78:7d:6d:5f:d7:aa:83:e8:35:63:ec:20:81:
50:51:a1:31:91:f5:7f:e0:d8:ce:b8:07:b1:4b:94:e2:45:81:
59:96:68:87:a3:7b:e7:13:3c:06:c0:40:33:d3:ee:85:10:d7:
52:16:0e:ce:07:9e:2c:e1:ef:b2:3f:df:2a:6e:4c:17:3f:72:
15:00:5b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:35 2025 by rpki-client