Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: jA05QlT2VEcLPiP7mwaoBA75wO4Hyq7GSaPog/q9h5g=
Subject key identifier: 3B:B9:83:EE:44:6A:5F:DB:79:B6:69:5B:20:A1:B8:70:C4:A0:47:1A
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 019A50E4196B3CA13B07368C98E9D1D3AE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 0C1B
Signing time: Tue 04 Nov 2025 22:01:57 +0000
Manifest this update: Tue 04 Nov 2025 22:01:57 +0000
Manifest next update: Wed 05 Nov 2025 22:01:57 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: 2MKqIIyqrXbfUjZ6+jMiq7PyLNKOe/GiUnITgSaDd9Q=)
2: 4NcSUJ4Kg8dewIwP8RGgWPLVsGw.roa (hash: NfguGRutDpTl33g3TT2hnx9Rfi2f9fnIaQJYs24UAYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:19:6b:3c:a1:3b:07:36:8c:98:e9:d1:d3:ae:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: Nov 4 22:01:57 2025 GMT
Not After : Nov 5 22:01:57 2025 GMT
Subject: CN=3bb983ee446a5fdb79b6695b20a1b870c4a0471a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:6d:d3:a2:93:5d:2c:44:fe:5d:24:b9:1e:
5d:51:8b:15:f7:dd:d5:cc:82:b6:11:99:9d:05:ff:
76:fa:d5:b9:e7:e6:dc:8f:f0:b2:11:ca:3d:f1:d4:
d7:9f:aa:2e:5a:7f:ef:d2:57:b6:62:0c:ef:13:d3:
58:0e:d6:0e:7d:c2:32:e6:af:4f:b6:d1:71:8b:d7:
91:38:b2:d7:4d:a4:f4:73:49:8b:c8:22:3d:27:32:
47:c6:25:46:65:5a:51:da:31:8b:04:60:be:cd:13:
13:99:c3:8d:b1:c1:df:aa:44:c7:60:93:88:ec:b4:
15:47:23:35:19:7e:b6:4d:a7:0c:7d:5a:ac:0b:4d:
22:97:a3:d0:91:93:de:b1:75:d3:7e:46:89:4a:e7:
cd:10:67:3c:d2:8a:5c:a4:bc:4e:7c:4b:8f:a8:15:
7e:c0:18:de:09:7a:2a:d3:a3:bd:ba:a4:c2:1f:8b:
bd:60:2d:ee:4b:51:b2:77:a1:e3:d1:43:3b:ad:3c:
07:db:01:cc:c3:cd:25:96:57:ca:22:f6:c4:5e:8f:
67:c6:55:e8:14:6b:7b:a3:88:59:6c:7a:a4:a4:46:
6a:5c:e9:f5:5c:d0:0a:91:61:51:bc:b6:5e:91:cb:
a5:97:e5:dc:0b:6f:9c:bb:12:ab:fc:e5:e1:6c:b8:
eb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B9:83:EE:44:6A:5F:DB:79:B6:69:5B:20:A1:B8:70:C4:A0:47:1A
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ab:79:2c:ef:0c:c5:1f:8d:92:76:13:d8:80:46:84:b0:d2:
a6:ac:d9:9d:db:81:c3:6e:a0:1e:6c:29:4a:2f:0d:be:7f:71:
7f:ce:64:75:9b:67:f1:7e:09:07:e5:bc:ef:5e:64:8b:c9:5f:
35:bc:70:07:e4:98:43:59:e6:d2:91:5a:4d:ed:a1:55:df:17:
5e:a7:52:25:e9:90:45:27:27:a4:24:f3:f7:1e:f3:2c:ac:ce:
df:38:e7:06:28:a5:c7:e9:3a:31:85:eb:e9:10:32:b6:0f:82:
d4:a7:e3:9a:d2:d2:f1:ee:3d:a9:2b:b9:80:91:cf:d9:0d:4c:
55:09:45:de:ff:9f:83:13:79:34:4e:0f:c6:08:42:e8:c1:8b:
0e:c2:61:34:ea:ac:f2:20:a0:1c:bf:4d:c4:c1:27:ed:db:c5:
9e:0e:76:dc:81:2d:f3:49:d2:d8:d2:d7:a0:08:18:f7:c3:06:
e5:9e:55:8a:2e:cf:b4:59:cb:b2:e2:a8:2a:e1:df:ef:94:5f:
69:1c:69:33:b0:48:46:dc:1a:9b:f2:b8:1b:6d:b8:ce:43:45:
eb:be:ea:fe:90:58:75:d8:ec:5b:1a:9b:8b:bb:ad:93:06:34:
e2:40:33:d6:31:99:65:3f:fc:24:9e:bf:9d:95:c7:b4:92:e1:
c1:6d:93:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:52:12 2025 by rpki-client