Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
File: m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft (raw, json)
Hash identifier: Pe0nhbuU/DxmCO0FuI3eTXvu3nsumh24Q776TSPxhIs=
Subject key identifier: 29:CB:C9:E0:6D:96:99:E8:BF:DE:8F:FE:CD:15:1D:1D:80:83:76:A0
Authority key identifier: 9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C
Certificate issuer: /CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
Certificate serial: 019A52D191622F8C1D873FA208D1743E3B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
Manifest number: 14C3
Signing time: Wed 05 Nov 2025 07:00:57 +0000
Manifest this update: Wed 05 Nov 2025 07:00:57 +0000
Manifest next update: Thu 06 Nov 2025 07:00:57 +0000
Files and hashes: 1: 60W-NBk3253Bk_GEI2gKgd_BE8I.roa (hash: X2dRuZeK2mpNw1Oq8MItS3tX6isys5T0YQbrPJr37XA=)
2: WMfZ9_oSWOFVeUy99ChSUELiYaI.roa (hash: H0ifkv1EEGP8mDtQZpBc/lFwxXIm4L3JwiD9/BcXTyk=)
3: m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl (hash: bSXbdx/vXGOTDPevo4ZZ0OoMiA3ZIVqn1FUWODgnvxo=)
4: tXaCAurW2gGTHINoOjZh72dEXKU.roa (hash: y5O02pogDW0jIlJpvO+hAt91pj2qn6goqR2eIeEiFSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:91:62:2f:8c:1d:87:3f:a2:08:d1:74:3e:3b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
Validity
Not Before: Nov 5 07:00:57 2025 GMT
Not After : Nov 6 07:00:57 2025 GMT
Subject: CN=29cbc9e06d9699e8bfde8ffecd151d1d808376a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f5:d3:4a:a0:0f:c4:be:68:12:92:98:29:1d:
ff:6f:f1:15:8d:7d:3f:38:fe:5f:74:1f:de:b1:f4:
05:36:b1:6f:b8:41:ba:a8:ed:72:ee:5b:cc:03:ff:
51:32:85:b7:7f:ad:b0:13:42:a0:c5:80:5c:28:7f:
72:ed:d6:ad:da:4c:8a:41:3f:56:9b:10:c7:60:db:
29:0e:46:a8:cb:52:67:2f:cc:53:89:db:3f:e7:56:
37:65:d3:3d:85:1c:0c:3e:7b:ed:73:73:79:c8:2c:
03:04:56:a8:04:4a:0d:ac:2d:d1:97:90:31:f6:9e:
58:22:86:ef:a5:0d:d8:29:5a:89:8a:a9:e7:12:f7:
e2:13:78:ea:34:72:6e:7f:f3:f3:54:60:05:bc:01:
03:0c:28:99:20:9d:5a:3f:81:6e:30:97:be:86:09:
e8:90:fe:2c:7a:29:5e:26:b5:dc:a2:c5:dc:d9:f8:
af:b6:25:6e:50:4b:1d:a8:a1:88:a6:0d:eb:b2:2c:
97:47:75:3f:49:3a:bc:0c:7b:ca:ae:0d:cd:ae:6d:
3a:43:6b:88:3a:d3:dd:55:62:33:0e:51:26:f9:36:
67:04:e5:eb:0f:9d:d9:41:a2:88:57:5b:f4:f5:21:
8c:e9:3d:5d:bc:53:1d:07:c7:6f:a5:4d:4e:e5:01:
7b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CB:C9:E0:6D:96:99:E8:BF:DE:8F:FE:CD:15:1D:1D:80:83:76:A0
X509v3 Authority Key Identifier:
keyid:9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:83:28:dd:71:b2:68:fe:0c:d7:f4:01:8a:47:37:bc:64:6c:
5b:3f:c1:70:6d:bc:ae:7a:fb:ca:6a:0a:5c:75:11:c5:4e:c0:
9e:69:7f:cb:e7:b8:29:cc:a2:bf:67:f3:34:b9:b6:76:ca:ed:
a4:eb:16:b9:35:e2:84:00:a2:69:ec:09:1f:2b:b6:bd:dc:09:
08:34:fd:f8:bc:e1:8c:53:0c:c6:0c:12:37:d4:c9:01:49:a5:
db:40:28:a5:82:7c:08:58:05:67:21:2f:49:a8:a8:57:6b:b8:
b4:20:25:33:1d:17:07:ed:a4:4a:8d:a4:94:70:aa:37:dd:ad:
26:6a:2d:97:b3:7d:94:b6:86:a4:54:28:d3:2a:f5:04:6f:75:
c6:86:90:cd:a3:3b:2b:ef:3a:e0:b2:d6:1c:e1:62:3b:1e:ca:
b4:33:07:86:bc:cc:47:d1:d2:66:c4:a4:34:6a:ee:a5:33:70:
e1:3c:58:97:df:8b:21:a6:89:3b:bd:be:92:72:eb:06:69:2c:
82:b6:5f:80:13:fa:c3:19:d9:97:3b:3e:dd:a3:f2:80:23:8e:
2c:28:60:8e:d9:f6:02:3e:43:36:1d:b5:3e:e5:ca:3f:6d:57:
16:1b:16:47:29:68:f1:09:f1:17:1f:47:b3:e8:42:49:b5:4f:
80:fc:a0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:37:27 2025 by rpki-client