Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
File: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft (raw, json)
Hash identifier: 2xb4SzUP4s2w9h+PUFfdbCiHmd5nEUs/eGCh1VthMQg=
Subject key identifier: E0:FC:39:06:04:5A:3F:B8:D5:85:24:57:75:70:B1:D2:A4:F5:84:4B
Authority key identifier: DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
Certificate issuer: /CN=dd189621d2fa872166e6a05ee47a7d756243e919
Certificate serial: 019A4EF5D0B98F19949F52099C7076C75092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:02:03 +0000
Manifest this update: Tue 04 Nov 2025 13:02:03 +0000
Manifest next update: Wed 05 Nov 2025 13:02:03 +0000
Files and hashes: 1: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl (hash: 9fxHxcHr6/tcdDV2+MThk4vP2Ui5r3Q9NgWcVXUDZtc=)
2: IbWAiMp66FrrjCqKdb7PL52gYqc.roa (hash: ZvFHwkqxl1Y1UkoOepo0AdZCTZvXFwyowt6Ue0U0AQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d0:b9:8f:19:94:9f:52:09:9c:70:76:c7:50:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd189621d2fa872166e6a05ee47a7d756243e919
Validity
Not Before: Nov 4 13:02:03 2025 GMT
Not After : Nov 5 13:02:03 2025 GMT
Subject: CN=e0fc3906045a3fb8d58524577570b1d2a4f5844b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:bf:38:83:d7:54:dd:f1:63:43:2b:d1:83:
e4:ef:13:37:28:0f:75:07:69:cb:b3:5a:01:8d:88:
67:11:ce:cc:04:c6:ee:f2:d9:58:33:84:74:10:84:
ed:dc:34:e8:ed:39:ab:ba:e6:42:57:2e:a8:6a:2c:
9c:54:53:2e:a6:74:d2:77:fc:35:a5:16:da:8b:e4:
43:af:6e:a4:2c:a0:02:3c:07:72:6a:2d:6f:3a:b3:
7b:9b:6e:6b:f1:a9:40:5f:9b:1e:f2:69:cb:55:23:
9d:8d:5a:69:10:0d:44:9b:7a:1f:1b:06:f4:2c:2e:
06:10:7a:28:6b:89:92:18:65:2d:7f:2a:8e:9b:80:
31:03:64:6d:dc:2d:c9:d1:45:f1:a6:78:66:9e:f7:
dc:48:7a:17:6c:08:e0:58:13:82:26:d9:79:96:f9:
82:71:ca:d5:0c:b4:ad:e8:1c:62:fb:7d:81:2f:85:
03:f0:74:5d:74:b0:8c:d6:49:3d:af:c0:43:1b:ac:
44:56:61:5e:55:cc:e4:45:1f:27:ab:b3:ce:fa:31:
38:20:f3:d7:9c:30:40:7a:5e:cf:b0:d0:29:3d:af:
95:7f:5b:67:74:21:4e:6c:9e:00:9b:10:72:e8:02:
61:0a:21:bd:85:57:07:a0:70:30:f8:d1:31:2a:d1:
c3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FC:39:06:04:5A:3F:B8:D5:85:24:57:75:70:B1:D2:A4:F5:84:4B
X509v3 Authority Key Identifier:
keyid:DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:96:e3:55:01:ec:af:79:90:14:e2:ce:6a:43:ec:6c:c9:0b:
d6:64:c2:12:fe:d5:c5:74:70:23:22:fc:41:3a:c2:1a:59:5f:
10:2f:1e:cb:79:03:49:a8:fb:7d:82:08:15:c8:b3:78:bc:66:
ba:f9:d2:13:24:6d:5d:1c:ab:d0:16:e5:23:71:b8:b5:9e:46:
21:7f:e9:12:11:8a:a1:a6:10:dd:42:7d:ab:c4:4a:9a:ec:a5:
f4:81:97:f1:67:01:be:f1:f4:9f:ef:b0:51:1c:34:ce:ef:da:
80:18:fb:79:f3:8a:2f:c4:be:26:54:5d:f7:e1:ae:6f:b7:1a:
7d:7d:e6:08:f8:14:98:09:7a:ff:8e:38:ec:c5:69:76:ea:dd:
8e:df:f3:9a:a4:38:d1:24:40:e2:0d:c8:5b:fe:4f:38:88:b1:
08:09:69:f7:cf:99:76:3c:8f:7b:aa:19:9e:c3:c6:c7:9d:eb:
35:41:58:fa:0e:e0:a8:77:76:da:8e:49:72:03:ca:24:7e:e0:
ca:a4:be:ee:34:fa:b6:4e:33:e2:e7:55:01:23:d1:cb:71:09:
98:31:ba:06:cb:76:49:6e:81:c6:74:71:18:11:3f:b7:4d:b3:
b0:22:af:25:8c:44:79:7e:df:e2:d6:79:7e:59:39:6f:d2:61:
dc:c4:4f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:33 2025 by rpki-client