Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json)
Hash identifier: vJgtqs5lK8POGZ/XnvGUJRlePilFbOjtTtVUpXHePek=
Subject key identifier: 44:CE:4E:24:B6:08:6F:16:3A:50:8E:2F:CC:6D:71:E0:94:57:7B:F8
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 019A522C116E9D11756705558421187D28C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 04:00:10 +0000
Manifest this update: Wed 05 Nov 2025 04:00:10 +0000
Manifest next update: Thu 06 Nov 2025 04:00:10 +0000
Files and hashes: 1: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: fkD4I5rKBk9YPk3Bse1FJnTxUWa35FIlm3LmScvCdh8=)
2: I2pncAJfzNdJmYYh59kVF5OSpUs.roa (hash: lHfLeGadLKnQRU2ejGfcyZ67n8h62UJ2WQIx9Gm+axg=)
3: MnzrFfyCM6_m24BkwXpZ_Rso1RQ.roa (hash: XgLOcASonVn7TWXy+ktIGTPZ2UgFdKpsifVTE/uxOB0=)
4: UJU_wGK_nKOpS66Lv-qw5sHx6Yc.roa (hash: DVPLZ7QtHdhq6Tawu/C5Hzz46ZghvtTkOTNBcz5aL5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:11:6e:9d:11:75:67:05:55:84:21:18:7d:28:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: Nov 5 04:00:10 2025 GMT
Not After : Nov 6 04:00:10 2025 GMT
Subject: CN=44ce4e24b6086f163a508e2fcc6d71e094577bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:dc:4e:95:58:7f:43:c5:94:5e:2e:f9:a8:
91:ee:be:15:c8:6b:81:14:a8:b2:71:e1:7f:ce:59:
f0:3e:fb:93:bd:e9:fe:17:5e:d7:95:b9:8d:5f:a3:
e0:86:62:02:bb:22:7b:9a:01:b0:c8:cd:d3:67:7f:
66:b5:36:b0:69:43:6e:15:1d:6e:1f:38:39:77:87:
f5:b4:d8:68:9b:29:10:10:d0:d3:3a:68:dd:10:a8:
86:f1:eb:1e:27:4a:00:44:7f:9c:09:a7:9c:df:80:
8d:0f:fc:12:01:19:93:c0:5c:70:70:60:5f:2e:3b:
8d:dc:5c:4b:28:06:fa:da:de:c3:da:59:62:48:c3:
ee:08:68:e5:b0:22:f1:2c:a8:b6:3a:a3:9c:f6:36:
86:d8:33:02:6d:64:48:3a:9e:c8:ac:35:77:ba:22:
49:50:77:24:a3:a0:d9:f9:01:47:31:22:28:1f:13:
91:47:0f:04:8d:c8:fa:e7:18:bf:3d:0a:1e:a3:97:
6a:2d:fc:09:a1:83:81:1b:bf:17:9a:a9:44:b8:04:
00:62:f7:bc:fb:7d:14:b0:f7:42:f9:6b:da:08:ce:
87:4b:3f:f9:01:ac:da:1c:09:5a:5d:95:15:78:a7:
b2:fb:82:f6:f4:84:de:30:b9:d6:48:36:b3:80:bf:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CE:4E:24:B6:08:6F:16:3A:50:8E:2F:CC:6D:71:E0:94:57:7B:F8
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c1:8c:8f:96:d5:ee:a6:23:06:16:a0:eb:10:cf:15:21:ee:
7c:65:d9:53:a9:93:e9:6b:2c:02:ec:9a:7a:20:77:0b:b7:9a:
33:e1:9b:27:61:ac:ee:3e:34:6b:dd:3c:05:79:88:6b:92:d6:
c1:98:97:c9:2f:cd:19:c1:e3:2c:81:d0:3b:80:ee:c5:d0:7f:
f2:a9:18:cb:e7:a9:fd:73:55:11:3c:ba:db:41:da:a3:47:c1:
0c:af:77:6a:ce:3d:02:03:ae:70:7d:28:4c:e4:57:3a:b2:d6:
32:9e:22:f7:63:46:42:6a:d6:ca:a8:5b:a5:a2:f8:28:2d:7d:
a3:eb:96:97:e3:3d:cb:59:89:38:73:9d:98:fd:d0:bf:9e:ad:
9e:3b:af:6f:52:01:39:f7:55:ea:72:0a:5a:d0:fb:f5:35:8e:
ab:ff:b4:f6:c1:e3:89:f4:e2:5e:8a:a8:c3:e5:fe:58:43:ef:
5c:d8:65:1c:cd:55:20:66:90:59:0c:a1:cc:74:06:a3:90:fd:
21:09:9d:e0:7a:2f:e9:1f:fe:e3:d0:2d:69:6f:81:31:fc:4a:
6d:8b:26:a1:21:ff:22:55:bc:83:25:2e:03:83:c5:3a:68:09:
92:60:c0:c0:2f:ae:a5:13:6a:bf:f9:b2:14:14:f4:f2:c8:43:
be:a4:5d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:51:54 2025 by rpki-client