Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json)
Hash identifier: 1DlfGAnslOStdqyzw/fhkMdav20LryooyWSlETTEx70=
Subject key identifier: FA:ED:23:34:A3:72:83:32:51:8C:81:78:8C:21:59:E9:07:FA:60:6C
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 019A51511E22FDC5728B9863CFA7ECD99F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
Manifest number: 0131
Signing time: Wed 05 Nov 2025 00:01:01 +0000
Manifest this update: Wed 05 Nov 2025 00:01:01 +0000
Manifest next update: Thu 06 Nov 2025 00:01:01 +0000
Files and hashes: 1: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: YAb2y3xa2rISV5zM2JaN5KXAcwoaiwIi7wGWiW+Jwrg=)
2: 6_in1dGeOa5EieWvSzhrm2eve2Y.roa (hash: zCBFRN4Me6WT3LbN5ei+Xk4SQ36dgusZu9hKSxKm+nE=)
3: NUqvibQu6dWh6Eo5e0WkTVgiAOs.roa (hash: rpCYWQAUZby9hvUsdkbZ1E+JsPoOrGo+9DJrYWN/+/Y=)
4: QAjbbxJkwWP6mtvrf816lbgaTpE.roa (hash: BE3I5u9iuuHjxCqTUslvbILWdwNCS8MnbabYgEyaLMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:1e:22:fd:c5:72:8b:98:63:cf:a7:ec:d9:9f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Nov 5 00:01:01 2025 GMT
Not After : Nov 6 00:01:01 2025 GMT
Subject: CN=faed2334a3728332518c81788c2159e907fa606c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:3d:03:a4:01:d4:ed:28:04:30:12:e6:e7:
d7:ed:a6:c7:bd:b0:49:a0:2f:3e:b3:8d:e7:39:42:
fc:d2:f8:d7:b1:07:98:a9:98:ff:b3:ac:94:ab:15:
07:42:cc:c0:ed:85:00:e2:f1:97:b0:23:40:1a:1e:
02:6b:be:85:a1:46:81:f4:88:59:ce:28:a4:db:6b:
cd:96:ae:2c:4b:ed:73:79:60:55:e0:d1:b1:60:7d:
22:75:e5:3d:61:ee:95:f6:ea:a1:df:71:fd:2e:bc:
03:4c:0a:44:97:7d:ad:2c:08:d6:14:6e:a8:07:46:
a9:50:08:d7:4b:2b:0a:ef:10:85:e2:41:3b:52:42:
40:f4:bb:14:4b:1a:43:b2:31:ab:41:3c:35:c1:6e:
85:7c:18:86:2c:d9:16:4a:07:00:64:f4:10:43:f0:
7b:e8:1c:ca:19:0c:79:59:d2:cc:dd:2d:85:ef:81:
34:07:e7:d4:43:e1:1c:64:7a:f4:3e:2d:d1:d4:8d:
63:61:f3:39:16:5f:ba:c3:ac:a1:29:ee:86:d9:f2:
ec:ec:eb:0b:96:2e:9d:19:91:c5:e0:0e:0f:ee:b2:
e3:f9:c0:ba:77:52:3f:08:f2:29:8e:04:76:d2:93:
15:85:c8:bf:1e:57:53:a2:8a:b3:36:08:4e:f6:b1:
c2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:ED:23:34:A3:72:83:32:51:8C:81:78:8C:21:59:E9:07:FA:60:6C
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1b:21:5d:16:2d:dc:cf:fd:1d:cd:2f:01:2a:d7:13:ba:e8:
7a:0f:02:59:61:8e:7a:2d:03:6f:49:f9:00:f1:a2:a4:48:6f:
db:0c:26:f5:22:0b:19:2f:c1:20:db:77:81:be:70:14:6c:b8:
7f:1d:5b:78:67:87:7d:a8:89:fd:00:a1:a8:2d:27:9b:62:1c:
94:31:b0:45:63:bf:e3:7b:66:07:60:dd:f6:fd:7d:86:dc:f6:
78:e8:9d:21:4e:cd:e0:88:3a:c8:65:c4:20:1f:e2:ee:a6:54:
2a:5a:ea:55:53:cd:2b:21:66:db:ff:52:9f:73:f8:90:d2:a8:
51:91:f9:83:f2:b4:c2:1e:c6:e8:89:31:07:4c:b3:9a:0c:ea:
b1:e1:51:ab:c7:c5:0b:69:8b:bc:03:35:66:d5:3d:3b:55:15:
e7:27:a7:00:04:e6:31:a8:3c:78:32:68:35:7c:de:ad:da:34:
a7:06:0c:e6:4f:d0:16:ea:7a:0e:38:d5:08:b3:26:f2:2f:91:
08:37:39:e5:f0:d9:98:6e:20:53:28:0e:a6:3e:f3:9a:ec:16:
cb:5e:d5:28:c9:8a:92:9d:d1:2b:b7:ae:40:5f:08:2c:eb:17:
64:48:7d:64:18:63:88:23:fa:e2:aa:e5:fc:24:a6:7c:15:90:
82:ba:78:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:00:32 2025 by rpki-client