Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: 02m1uI4CYsihi5/MD52H6ZofNwctHfuxr77ZexkzoGM=
Subject key identifier: 4E:5A:83:09:FB:0E:21:C2:A4:80:D6:FE:53:89:45:82:7A:58:3A:F3
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019A4F98EA50D26D18D8A2BC3BEEDB28ABDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 12D6
Signing time: Tue 04 Nov 2025 16:00:12 +0000
Manifest this update: Tue 04 Nov 2025 16:00:12 +0000
Manifest next update: Wed 05 Nov 2025 16:00:12 +0000
Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: Pk3eqqnOsMw+GZFcXprY5WZSj4kxXrKd45c3Hc4QyOk=)
3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=)
4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=)
5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=)
6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=)
7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=)
8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:ea:50:d2:6d:18:d8:a2:bc:3b:ee:db:28:ab:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Nov 4 16:00:12 2025 GMT
Not After : Nov 5 16:00:12 2025 GMT
Subject: CN=4e5a8309fb0e21c2a480d6fe538945827a583af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5d:4e:70:02:51:fa:1c:86:d1:35:71:f9:4f:
11:f5:6c:9d:42:cc:9d:ff:f0:d4:70:43:f4:1e:71:
4a:3c:18:13:0a:46:4b:ee:f3:d1:b7:22:27:d5:b1:
70:77:64:6b:e3:6c:84:4d:8f:50:7a:d5:1e:4b:c8:
f5:a8:67:bb:2b:51:d0:a5:45:c2:f7:c5:87:80:c8:
6d:ac:4a:d3:94:97:cd:87:10:25:9a:a4:7e:63:91:
59:b8:a9:1e:40:21:e2:d4:6d:85:33:a0:bd:71:4d:
27:e7:3f:aa:24:2e:34:6d:ba:c6:5a:23:68:b8:38:
5b:cc:e7:99:62:d5:31:a9:20:79:54:3b:14:6b:f9:
b1:34:d6:7c:8d:8e:1e:11:b1:0f:9b:30:45:f5:71:
b8:56:92:09:29:e9:ac:70:ba:45:97:f9:3f:c3:01:
63:4b:a1:0c:bd:24:7b:4a:c7:d5:4c:b6:56:7c:bb:
26:74:ce:b9:c7:37:32:9a:47:b6:5c:42:f7:6e:29:
fc:b9:e2:c1:e6:43:cb:99:bf:af:64:1b:6a:38:ff:
3f:4d:4b:ab:c2:ab:41:c5:69:c6:23:aa:b5:cc:c2:
c6:ee:e3:ac:c2:90:74:30:0e:df:a2:63:3e:08:5e:
a8:6c:fe:ad:87:3a:27:8a:78:4f:0d:c9:88:7c:a2:
8b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5A:83:09:FB:0E:21:C2:A4:80:D6:FE:53:89:45:82:7A:58:3A:F3
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:89:6d:8a:d6:a7:2c:b2:d4:fc:38:3c:86:e3:cd:3d:f5:dd:
5f:59:db:40:7b:41:a8:d0:40:42:22:6a:6b:99:de:2f:f4:88:
63:7e:ff:fb:5a:9c:71:19:b8:1d:33:6e:44:c8:75:e3:a6:2d:
c3:48:25:7c:f2:0f:c2:40:e0:d0:56:07:b1:e8:bf:4e:12:25:
7a:5e:39:68:dd:2b:6f:c8:a0:ab:a7:6d:ee:a3:06:3a:3a:79:
36:95:b2:d3:cb:16:58:a3:99:83:db:1c:62:25:8a:1d:e5:a7:
ec:c7:62:98:2c:7d:b1:9d:d8:8e:89:70:3b:90:95:24:b3:2b:
49:e1:bc:f0:d0:55:2d:db:3b:87:0d:4d:fb:14:58:7d:fd:b4:
09:bd:80:c4:b9:07:11:28:35:90:e5:6c:6c:e9:d2:37:c7:ad:
24:f0:fe:aa:2b:be:73:93:73:db:63:0b:5e:11:d7:f5:f5:5b:
49:37:39:be:30:31:95:60:07:e6:2d:58:23:bc:a6:6c:31:ec:
f2:14:00:e3:bd:1d:2a:d9:10:37:b1:6a:b3:f7:43:cd:de:aa:
28:72:6d:4e:69:31:07:97:ac:c0:75:59:1c:66:72:f3:0c:b3:
5e:42:c7:aa:3b:99:fd:7b:bf:36:45:47:db:3c:45:04:14:10:
d5:04:51:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:25:02 2025 by rpki-client