Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File: 3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier: 6Z8LoWGL8B+74C7fphKLZLwtTzB5SnSU9FPbvj1Cxtk=
Subject key identifier: 3E:7D:58:F0:42:A8:47:52:8B:71:4A:0A:96:CC:71:7B:8D:70:3F:9A
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial: 019A4E1913F43319FE197DBD7FFFCD5970FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number: 05FB
Signing time: Tue 04 Nov 2025 09:00:57 +0000
Manifest this update: Tue 04 Nov 2025 09:00:57 +0000
Manifest next update: Wed 05 Nov 2025 09:00:57 +0000
Files and hashes: 1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: qoXDgbp7rbGN8JIvjHba46FjAIKwvaO+hKR2bgtsN9U=)
2: wLvB8cGiUEUZNSS38jCt0kGtb0w.roa (hash: m3dcBbH2bIeKi8Ap8eHL2CuPz3vf7Stl96ekMV6tjIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:13:f4:33:19:fe:19:7d:bd:7f:ff:cd:59:70:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Validity
Not Before: Nov 4 09:00:57 2025 GMT
Not After : Nov 5 09:00:57 2025 GMT
Subject: CN=3e7d58f042a847528b714a0a96cc717b8d703f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:71:17:a5:64:db:64:8f:a7:9b:93:38:78:
9e:9d:5b:82:7d:2e:33:05:2b:23:aa:04:51:b9:44:
22:6b:f5:f2:9c:fb:9e:73:02:b9:36:a9:05:43:9d:
fa:67:9a:52:26:06:2d:f1:4c:51:78:86:31:61:bb:
28:51:63:d4:23:66:77:d2:b1:27:af:b8:4a:86:20:
81:59:91:cd:e9:38:9f:ac:9c:59:80:cc:d1:8d:34:
85:54:b0:26:4b:d1:bb:7d:b9:05:4b:37:09:1a:27:
e9:d4:39:f0:34:b8:52:a9:c8:38:8f:09:41:7a:34:
ba:92:f9:c2:be:25:a1:52:26:92:be:b3:3b:b6:77:
db:40:be:7b:d9:67:de:48:b7:1a:cb:b2:c3:dd:50:
fc:52:c4:55:26:a9:c5:e7:4d:70:87:0c:ed:7b:ed:
e3:c2:ac:c7:78:6a:54:12:d3:ad:a5:0c:4a:89:e3:
8d:7d:7a:cf:5e:7c:7b:be:88:43:ea:ba:05:ce:61:
02:4c:e4:1f:7b:68:50:27:9e:2f:f9:3c:e5:da:53:
60:31:d5:19:82:5a:9d:c4:96:26:89:ab:c9:2a:91:
13:76:8a:d4:bf:50:3d:c1:fb:0b:e5:f5:9e:22:0b:
25:b0:9e:75:3f:be:49:fd:85:f1:9b:8f:c5:42:95:
28:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7D:58:F0:42:A8:47:52:8B:71:4A:0A:96:CC:71:7B:8D:70:3F:9A
X509v3 Authority Key Identifier:
keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:fd:95:23:32:44:8b:d0:d9:34:44:d3:20:ff:29:9b:44:4c:
3d:ff:dd:3a:9a:fd:d4:56:e0:4a:a0:f2:b0:91:7f:18:23:25:
ce:f7:d4:90:c9:99:d2:9e:2b:13:b7:14:b3:90:9e:2a:64:a6:
a5:82:95:e3:cd:2f:e1:d4:f8:34:a2:a6:e7:7a:64:a1:d0:52:
73:83:aa:4c:e4:17:69:b3:56:34:6b:d0:fd:cb:94:10:2a:b5:
4c:83:d9:d3:c9:cd:33:92:64:37:07:c0:a7:ff:24:4b:a2:6a:
d3:91:a9:d5:b4:5d:20:7f:b9:08:bf:35:05:5f:b5:37:81:7e:
06:e5:49:70:d4:de:f7:f2:5f:2e:14:b5:b6:72:67:97:95:c3:
c8:18:c5:56:a4:f1:d4:a0:dd:4a:f9:6b:cd:0d:31:bd:40:8b:
47:22:ca:b2:54:5d:45:72:75:c9:cd:4f:7a:6b:f8:60:5e:bb:
32:b6:a2:74:9c:8e:ec:07:3c:92:fa:ed:67:8b:84:69:42:e3:
2a:68:79:79:93:04:60:d6:29:5e:ff:a7:be:b8:d7:35:da:a1:
39:9c:64:af:70:e8:a0:b2:e4:6e:ab:be:0a:23:5d:1d:1d:21:
3a:1d:91:ce:3d:d4:bd:e7:56:8c:6c:8b:d1:f9:39:e1:31:1a:
24:31:c1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:49 2025 by rpki-client