Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier: w4efw2GFZKR+R1KhuM+r14/WdjnC7vnU4iP2IZQGYOQ=
Subject key identifier: CD:D4:C3:34:AF:AE:C5:24:AA:F8:B2:B4:C0:84:83:AF:81:7F:69:DC
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 019A500749A26CEFB2362CA9D1ADCF8D7914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number: 1719
Signing time: Tue 04 Nov 2025 18:00:46 +0000
Manifest this update: Tue 04 Nov 2025 18:00:46 +0000
Manifest next update: Wed 05 Nov 2025 18:00:46 +0000
Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: +m3U+EXZywTvJH5Vq63BzY8g9RZ1R9EAtx11opAWwIA=)
2: DCDhVbD3fsODPYm5sUm8pjAvYC4.roa (hash: 7lv1CrpPPfO+TV6Xk6IsNlr9S02akSFzspE/euO4HYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:49:a2:6c:ef:b2:36:2c:a9:d1:ad:cf:8d:79:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Nov 4 18:00:46 2025 GMT
Not After : Nov 5 18:00:46 2025 GMT
Subject: CN=cdd4c334afaec524aaf8b2b4c08483af817f69dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:c9:57:22:6f:73:41:2d:bc:ca:14:ca:64:
bf:a9:06:d8:d3:a2:2f:2d:82:ee:4b:6b:0f:b9:bb:
c1:ca:30:0a:1c:18:79:d3:7e:84:7a:14:4b:f9:97:
24:24:2f:ce:e6:08:71:b8:14:50:77:6d:3b:dd:a0:
e5:06:68:63:a6:b7:3f:96:88:78:b4:46:33:43:60:
0f:29:53:b1:32:10:8f:8f:b0:de:26:5c:48:d8:b9:
18:5d:76:fa:ca:5f:ad:df:c5:17:34:1d:e2:70:d8:
dd:4d:44:1d:df:20:0d:7f:95:8b:1d:88:ea:bc:a6:
44:0a:f0:d6:0a:d9:04:38:19:83:e2:dd:5e:9c:ce:
d8:b9:93:84:3b:c1:be:4c:05:96:c0:b3:7a:b9:93:
29:7e:fd:e7:b3:d4:47:80:c1:65:63:aa:e0:73:17:
98:21:65:09:19:c6:7e:62:14:2c:c5:1f:e1:48:14:
77:39:94:49:b6:a5:0e:65:4e:d0:65:11:3c:50:22:
2b:58:78:d8:3c:c3:a7:e8:1e:43:e6:a0:a3:58:6f:
1a:bb:30:1d:1f:05:9b:d7:c1:fe:9e:ce:44:0e:92:
f2:0d:21:f4:76:c7:80:99:e6:b0:c4:a3:89:a0:7c:
45:58:de:d4:d0:89:bd:77:d6:2e:75:93:f3:f4:0f:
50:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D4:C3:34:AF:AE:C5:24:AA:F8:B2:B4:C0:84:83:AF:81:7F:69:DC
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:9d:a1:ac:bb:24:77:4c:9d:da:29:5b:40:cb:75:44:2d:43:
5e:c7:b0:c5:e5:4e:6c:96:68:e9:e7:92:fe:a6:62:f7:43:17:
37:3e:4a:c5:ed:89:43:24:9a:d9:ab:d7:5e:55:45:4b:d5:d8:
c5:01:fc:5f:df:6f:dd:7c:d7:a6:ad:79:5d:d4:b9:d0:36:75:
f1:5f:49:46:ef:d9:6d:72:9c:38:40:ee:05:ce:6b:dd:ae:63:
92:18:e9:83:5c:a4:3f:9b:86:4a:3b:91:8b:f5:79:bb:bd:72:
e9:3f:f0:3e:47:85:ce:b3:e1:19:80:72:d2:3b:60:fd:4b:14:
39:28:1f:51:40:78:8b:b6:93:65:68:9e:c2:2b:44:b3:77:32:
e6:c9:16:5f:3b:be:52:b4:6c:7b:63:4b:fd:29:2b:eb:e2:48:
be:9c:62:86:38:9b:75:bc:39:c2:b3:98:22:b1:21:3e:e0:e3:
6b:62:6d:01:97:3d:a4:5f:2a:cc:b2:a5:1f:01:d2:35:b8:23:
1e:d5:8d:dd:d6:d3:1f:88:8f:01:66:e9:bb:e9:d8:60:1d:3e:
e7:f0:64:8f:3b:e3:30:ab:65:3c:2c:9a:c1:fa:45:17:7e:d5:
0f:4f:88:ed:16:06:c5:0a:51:28:dc:af:9e:b4:c7:fa:3f:81:
c1:39:06:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:41 2025 by rpki-client