Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json)
Hash identifier: e7SlqPBJdR/sMSCq54O7mcYwNgu/OI009cixXSTbF6k=
Subject key identifier: 9E:D8:39:96:C7:F5:7D:60:4C:30:70:CB:69:0A:31:03:21:0C:E2:AC
Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Certificate serial: 019A4F61E690C3FE29183BF11DC585040DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 15:00:07 +0000
Manifest this update: Tue 04 Nov 2025 15:00:07 +0000
Manifest next update: Wed 05 Nov 2025 15:00:07 +0000
Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: TKjS+PNIpnxoSEDQm4SdJXw8XZk5vKGmoJ9CyggJFRg=)
2: 6GNxdzK9UE9bHySiQzQ4c2EkGfY.roa (hash: xWTUJszNKd3dbNHz1f2JomMkK2hd4V6IPZrJaK6VjKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:e6:90:c3:fe:29:18:3b:f1:1d:c5:85:04:0d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Validity
Not Before: Nov 4 15:00:07 2025 GMT
Not After : Nov 5 15:00:07 2025 GMT
Subject: CN=9ed83996c7f57d604c3070cb690a3103210ce2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:9a:62:19:f2:70:d2:0e:43:d6:8a:0f:66:
e9:67:df:0d:9c:19:2f:d1:85:6b:6b:f3:23:95:1b:
a3:b3:42:ab:9e:3d:2c:b1:ca:37:d4:09:d6:d0:5e:
0f:f0:71:b5:cd:8c:9a:04:5b:96:5a:e1:bd:3a:06:
3f:25:3f:66:f4:e8:3c:df:7f:b2:cf:94:7f:3a:b2:
2f:ac:d6:96:25:bd:56:d0:65:a7:8f:36:61:78:a0:
98:73:3b:b6:a4:3e:cf:0f:97:83:ae:45:6b:ed:42:
b2:6a:9b:3b:d3:f1:9f:35:df:55:29:84:d4:81:be:
63:1c:fb:39:c1:c5:35:4e:57:93:07:a2:14:6c:bb:
01:3f:b5:ab:c9:90:cf:f5:52:89:82:a1:83:51:12:
ba:dd:10:ce:9d:69:7f:95:e5:ce:be:01:f0:e8:a0:
0e:9f:d0:8f:f4:3e:e6:3c:e6:5a:b8:86:e9:69:6d:
91:cb:d8:0f:6e:1d:8c:a4:17:55:9b:b8:9c:77:3f:
d0:f6:6b:10:17:55:b3:1c:1d:45:28:53:7b:d9:1f:
13:ff:45:4e:de:a8:d6:0d:1a:50:d9:d0:21:63:38:
8a:de:a4:79:00:4a:2f:9b:41:e2:43:4e:00:69:eb:
9e:ee:07:f8:ff:50:55:b7:76:06:ad:02:ae:14:b6:
8d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D8:39:96:C7:F5:7D:60:4C:30:70:CB:69:0A:31:03:21:0C:E2:AC
X509v3 Authority Key Identifier:
keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cf:ce:72:24:87:63:fc:09:cb:b1:f3:bc:c2:38:e8:ef:fc:
aa:76:c4:04:27:14:72:25:e5:30:d0:50:55:51:95:da:20:f5:
36:2a:75:fe:6f:01:d8:9e:e4:df:5f:d1:38:69:36:df:e3:00:
49:0e:04:20:b6:7c:1b:f1:6d:d2:de:93:99:9b:cc:57:5c:c3:
6c:13:51:99:eb:fc:1f:9e:fe:a4:ea:68:b0:19:b8:1d:16:bb:
1a:06:a3:1d:95:af:51:2d:17:d6:97:12:f4:15:5d:6f:99:4a:
d5:7a:5d:63:dd:7b:eb:d9:5d:20:35:88:f7:d6:d3:22:db:80:
c4:b8:4f:9b:d9:af:9f:c6:67:95:53:9b:2d:02:ff:48:00:7c:
05:95:43:d1:ba:00:ab:b9:5b:59:fe:96:82:9c:6d:fc:40:c6:
fc:78:88:3c:5a:f5:4f:cb:6b:5a:7d:dc:82:26:95:d6:2d:98:
e3:c8:29:90:18:71:87:83:80:15:7c:3b:fe:1d:e2:f8:5c:92:
80:97:35:09:e4:ff:2d:96:4e:08:4b:93:7c:f5:db:76:6d:e8:
f8:ee:b3:8c:58:41:a1:e5:56:6c:2c:93:7b:d8:64:c7:ff:cb:
32:4d:11:68:ba:3b:9a:98:72:17:7d:1c:33:f4:e5:98:e9:52:
1d:73:aa:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:30 2025 by rpki-client