Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: QC2e33L0bRJTa7TiaZ0SI6yHe2TzzD6VQ2sgMFH74tg=
Subject key identifier: 5C:1D:8B:62:3B:CD:3C:58:9D:0F:1A:EF:6D:C7:58:38:6D:3A:08:1C
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 019A5187698D8801DC8824A88A36BBFCE436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 0D9C
Signing time: Wed 05 Nov 2025 01:00:20 +0000
Manifest this update: Wed 05 Nov 2025 01:00:20 +0000
Manifest next update: Thu 06 Nov 2025 01:00:20 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: 1ohfF4TsXZ+YNkQw+VCku+qHOR3cAAuQwb/FXdVlvLM=)
2: prKzcOdb2gq7whbRtn2j18st210.roa (hash: TLxvtHMzXY4Lge96VJalh1cOFoXVbLd9V2/rCUHRN3g=)
3: zxXrJCgqT81AO-d4vpKnqCQPEGE.roa (hash: WugT5zcayhMYDSTA/kF2PldTCBDPYZiQht5Wqh3j65Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:69:8d:88:01:dc:88:24:a8:8a:36:bb:fc:e4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Nov 5 01:00:20 2025 GMT
Not After : Nov 6 01:00:20 2025 GMT
Subject: CN=5c1d8b623bcd3c589d0f1aef6dc758386d3a081c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:6b:2f:ce:9b:8d:31:3a:2b:b3:65:dd:fe:
ec:1d:90:ea:7d:ae:37:ce:08:60:11:7e:d6:e8:53:
52:b6:53:19:99:1d:d1:be:8e:cb:10:a0:7e:69:b3:
69:7f:0d:98:07:38:2b:99:ac:17:fc:3c:63:45:8a:
45:89:e6:e4:1c:97:4b:f8:31:47:c8:7f:0d:3a:37:
64:b0:1a:22:12:4e:7f:15:29:bf:80:3a:eb:2d:0e:
5e:06:33:3a:b5:1b:bb:7c:25:cf:20:42:96:59:d2:
5e:55:48:f1:4e:06:fb:79:9e:c1:b2:84:fd:cd:85:
38:8c:88:4f:91:1f:24:a0:9f:f9:b5:a3:43:9b:69:
6a:c0:c2:85:77:be:d2:dc:f3:72:df:7e:1d:fd:ee:
bb:ce:e8:9a:63:76:67:5f:db:ff:03:35:d4:a1:98:
7f:9f:b7:37:ba:24:49:e6:95:f1:45:6f:44:5b:64:
9d:ff:a3:8c:4d:c0:34:02:85:41:91:27:61:26:31:
df:ed:27:20:69:d1:ec:34:08:1c:0f:3c:20:c7:54:
03:a8:31:e1:6a:fc:5b:94:d5:69:ce:b3:36:45:fd:
b8:d2:45:bf:50:81:c7:62:55:3c:f7:10:24:f3:13:
57:da:bd:67:bb:49:0c:09:66:cf:19:c6:a8:1b:f8:
67:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1D:8B:62:3B:CD:3C:58:9D:0F:1A:EF:6D:C7:58:38:6D:3A:08:1C
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5b:44:6d:0d:46:2a:2c:0b:20:ff:1c:ae:c0:ba:2e:ca:db:
db:d8:cf:1d:87:8b:83:04:a0:ca:23:df:f6:39:63:86:09:f4:
d6:a3:a7:58:44:63:2a:25:33:97:67:19:e2:61:2d:a1:9e:a8:
69:6e:74:7a:8a:17:92:51:5e:0d:bb:e3:9e:e5:4b:f7:e6:bd:
1f:36:9e:85:09:b9:05:88:ad:7a:7a:d6:fc:f9:c3:58:11:8b:
30:50:f5:92:be:ba:0c:88:d9:fb:b6:1d:dc:79:ff:bd:5a:75:
35:a8:3f:31:56:3a:b5:1a:24:11:c9:17:2d:8c:63:1c:49:d9:
e8:a4:a5:92:18:55:5e:12:0b:ef:a1:82:c1:bb:e9:4f:8a:c9:
30:f6:6a:2d:22:41:de:db:ed:af:bc:c2:7b:59:38:99:d1:22:
34:19:bf:41:2a:48:aa:fd:84:aa:4a:3c:f4:a5:8a:8a:a5:88:
54:14:28:5f:14:61:1d:32:67:b4:f3:d9:33:3b:d7:53:fe:9d:
df:be:2c:1e:84:67:d0:db:23:9c:ec:13:ab:01:8d:72:ef:28:
8d:d7:95:78:d0:30:6a:bf:b0:f5:7e:42:c3:a0:cd:38:0c:d6:
1c:7a:76:dc:19:74:72:8e:f4:b4:8c:3b:53:bd:35:a4:e1:54:
6d:78:51:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:54:16 2025 by rpki-client