Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json)
Hash identifier: xp+BMprNAIFlcKOwJrWIPpPHc/1B6IVz3AQQmzKmQ+A=
Subject key identifier: 85:07:5D:C6:47:50:3E:93:75:89:7C:EA:A9:B9:A0:94:A2:36:A5:47
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 019A5074A3CDD5095979C439C5283E2D0DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
Manifest number: 0DD2
Signing time: Tue 04 Nov 2025 20:00:12 +0000
Manifest this update: Tue 04 Nov 2025 20:00:12 +0000
Manifest next update: Wed 05 Nov 2025 20:00:12 +0000
Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: 1vXi1ZmmU4qr7tItwGk23f82uzN30j7db8imbGkJ0Jg=)
2: 3y9oPhhQ76ajFYxPaGTfj0mGenY.roa (hash: aJMldfOcg7PSjdceOikOWHYMelePcp968D1IHsbQCQs=)
3: Eru4dcnP3AWADVXKAGfzuxLYfJc.roa (hash: qrokzcnnG9HxWIaV9kzA+31DT5BxA/ZSbotCh3hraYc=)
4: Kbhh_-jKSqwyjY9YyEcKOFQSYSE.roa (hash: a+ayqrZ5gSfoloT8KLq9Di5/TpqXgWgvxKNvHS7J0us=)
5: Tz-eGTasLTxJaRB_AyMo0GbjCYY.roa (hash: y/BDSOiRtRFchkB8Upvuvb+MNs6zs82qA1XU7WJzVqs=)
6: n1PdHVenW5fayjdB9KftVERroVM.roa (hash: vk271JDoo1aPMh1SkN6xn//CcT9hk4SqnKTKa0JtzvQ=)
7: njV-GA0Ii5_5OkqbA6b8eDCoFt4.roa (hash: 3zM9PD2sx2obkpcLLLOA9+i/X09CCKUBp/Xzom7yXUE=)
8: zH0GORTR7Uyj1Cp9s_FZC30xG7E.roa (hash: hQY0rZB8ZrQ/2LTg6dzNd2hK2I9T6rcNdp9cuBHVHhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:a3:cd:d5:09:59:79:c4:39:c5:28:3e:2d:0d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Nov 4 20:00:12 2025 GMT
Not After : Nov 5 20:00:12 2025 GMT
Subject: CN=85075dc647503e9375897ceaa9b9a094a236a547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:a3:5d:a2:a1:1d:6c:d6:3b:9a:32:2a:bd:
2a:48:49:66:10:dc:80:aa:0b:4e:dc:ce:b4:1f:8f:
e7:8c:3a:2f:f6:74:2d:b8:c7:54:a2:c6:4f:1f:96:
ba:e3:b5:c0:a7:8b:d9:10:28:d5:27:b2:11:ad:b5:
14:37:66:72:0f:db:43:b7:b5:61:9d:ad:65:ad:2f:
f3:e5:69:6b:5d:7a:6b:c3:6f:7d:81:0a:50:72:65:
bc:a5:a5:a8:7d:ba:d3:e0:1a:a5:11:fb:ec:f3:7d:
95:43:aa:34:6b:1e:ad:11:d1:9d:99:40:40:18:46:
db:10:2e:e6:7e:28:1c:ec:d1:84:93:5a:43:5b:f0:
e8:87:70:16:3b:71:2e:06:42:8d:2e:84:76:7d:08:
92:4b:0d:be:47:89:f4:ce:ac:0f:2f:71:82:49:93:
a2:ed:bf:c9:57:2a:ce:fd:d9:dd:5e:d7:b9:ad:87:
26:56:fb:3b:c0:9d:77:ff:b0:a8:a7:eb:b1:2a:34:
7c:bc:c5:32:aa:15:c7:ba:5a:d8:0d:af:c8:09:59:
37:df:69:6f:6b:f5:f1:35:26:5a:9c:8e:8d:6b:c3:
a3:91:85:f7:5a:15:6f:78:09:d6:a7:f8:e8:eb:22:
7d:50:11:a2:9f:86:1b:d4:14:f4:bf:44:a7:91:a3:
bf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:07:5D:C6:47:50:3E:93:75:89:7C:EA:A9:B9:A0:94:A2:36:A5:47
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:fa:2a:a0:17:08:09:61:cf:a0:ca:5b:c6:c4:ac:bf:55:a8:
ee:eb:a8:ac:30:63:d8:f3:93:a3:c3:4d:6a:ee:37:7b:d1:bf:
83:27:57:7e:56:e7:78:6d:f6:35:b5:d8:30:18:fb:77:2e:6c:
2b:1d:43:70:b4:bb:0f:9f:93:55:b4:0a:69:55:1b:3e:34:08:
a9:5c:ec:ae:28:89:3b:cb:68:d0:fd:b2:36:df:5a:3b:b2:81:
8c:15:93:c5:3f:fe:2c:72:4b:e0:76:17:43:cd:35:1b:e7:68:
fd:29:ea:7f:ef:71:63:f8:29:f2:f3:60:60:1d:30:3c:cb:64:
19:54:15:c8:0e:b0:92:43:8e:0c:84:18:f1:54:27:da:e0:a6:
ca:04:9c:d6:a7:de:2f:9a:5e:a5:4b:9d:aa:ee:75:31:8a:30:
3d:6a:c1:b6:07:fd:53:6f:b8:b8:54:40:71:1e:87:2e:1a:ad:
35:dc:2e:e0:01:84:8c:ab:d1:86:a4:34:1c:68:59:15:81:b0:
db:31:f6:b7:20:a7:84:27:3e:d4:03:20:27:04:3d:50:74:d7:
46:d8:8d:c8:39:d4:95:be:99:c0:79:84:36:b5:2d:c0:6e:2d:
23:99:e9:e4:80:a7:80:2f:e5:9d:d5:fe:fd:5b:a6:d1:bd:9b:
5f:e6:0a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:38:39 2025 by rpki-client