Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
File: t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft (raw, json)
Hash identifier: PXPr85mHmL7Y6o2XD73WDFdRWjT9qpEo658w+XlQA3M=
Subject key identifier: AF:3D:BB:EE:C7:41:74:41:5B:D5:BC:EA:28:CB:6B:D7:03:9E:D1:E1
Authority key identifier: B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
Certificate issuer: /CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Certificate serial: 019A5DC36999C8919FF3D25CD306C9CCB681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
Manifest number: 0149
Signing time: Fri 07 Nov 2025 10:01:18 +0000
Manifest this update: Fri 07 Nov 2025 10:01:18 +0000
Manifest next update: Sat 08 Nov 2025 10:01:18 +0000
Files and hashes: 1: t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl (hash: Qor6ARR5nz0U45LMVzVsORmYnJgNq1AnhevjPzCNeto=)
2: vfts5VO11Lf49yWawFf1T10X7IA.roa (hash: o5JhQxo9WfUPfoKsbz0ZkfnOyZ6HVJldiK9KySDHufY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:c3:69:99:c8:91:9f:f3:d2:5c:d3:06:c9:cc:b6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Validity
Not Before: Nov 7 10:01:18 2025 GMT
Not After : Nov 8 10:01:18 2025 GMT
Subject: CN=af3dbbeec74174415bd5bcea28cb6bd7039ed1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:85:9e:35:c6:5c:af:d5:df:67:fe:35:2d:
9d:77:06:e0:e8:3f:c9:2c:31:31:e4:8a:2a:46:bc:
6e:81:cf:66:8c:68:ee:8a:c3:5e:98:0b:a6:b5:99:
79:58:37:15:d9:51:c6:f2:ea:08:cc:f9:74:57:ce:
94:61:1e:b0:30:13:1f:75:38:64:74:0e:ce:85:2d:
6b:08:2b:6c:e4:fb:cd:95:6f:c0:33:9c:32:49:8e:
b1:c6:5a:36:29:ac:2c:6d:91:44:2f:2e:a1:2f:1b:
1f:42:6e:9b:bb:36:2e:f8:0d:7b:f4:47:a5:ae:31:
f2:28:94:6b:fe:58:e0:35:92:23:01:2b:a7:a8:64:
dc:a6:13:ce:18:0b:bd:10:1a:d8:2d:ac:b5:7d:3c:
02:5b:42:c4:83:83:d4:24:d7:bf:d1:1e:f7:c5:04:
10:cb:55:a5:47:c6:ae:dc:68:fc:4f:65:e0:f5:62:
8a:d4:d5:64:f1:be:85:98:25:bf:0f:bd:e1:54:74:
f9:c0:10:2e:40:25:be:fd:d0:ea:15:27:e2:b1:50:
e4:77:e1:94:4b:6a:b7:51:90:31:94:6d:a3:71:dc:
b7:32:c5:2b:51:de:40:45:fb:b8:05:02:45:c9:bb:
25:2e:35:1b:d2:78:7e:1e:f1:84:fc:60:b4:d8:d0:
d3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3D:BB:EE:C7:41:74:41:5B:D5:BC:EA:28:CB:6B:D7:03:9E:D1:E1
X509v3 Authority Key Identifier:
keyid:B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:99:f6:72:6d:64:4f:d2:94:00:1d:80:3d:f7:51:38:b4:6b:
10:0c:ec:60:b5:f7:cc:ee:55:35:a1:57:31:e0:57:88:49:b8:
ee:7c:63:b0:f6:09:03:1c:1b:26:8c:6d:ae:7d:36:e8:75:1d:
35:9b:bf:7c:c0:bb:9d:a7:98:a7:37:54:04:76:76:e6:89:e1:
cb:bb:2e:6e:47:6f:fe:21:89:66:ec:d8:65:eb:8f:89:79:7c:
cf:b7:5c:64:47:b3:9b:9f:27:0a:f0:28:a0:66:04:c6:f4:2f:
20:84:51:3a:01:c8:0d:10:22:fe:da:d3:2b:c0:c9:5c:3f:6c:
3d:5d:9d:26:64:7c:60:ae:1d:00:af:85:4e:fe:75:91:c5:2c:
6e:a7:42:b5:b2:8f:b6:e3:a6:89:e4:34:e6:51:63:05:4b:a4:
43:17:87:a9:fc:b6:32:8d:16:b5:92:91:66:92:e7:12:4b:55:
35:d3:40:71:8b:22:c0:0f:c4:2f:a0:8e:4f:5e:75:95:5c:dd:
ae:2d:55:6d:1e:62:ed:c1:d0:67:d2:5a:17:bf:46:39:bc:ad:
0c:9f:4a:ff:32:91:96:28:e6:d1:b8:74:ba:d5:49:ef:9e:33:
e6:40:9c:23:40:b6:a5:67:b4:47:8b:c3:d3:33:91:5e:2b:b2:
d4:48:2f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 11:46:54 2025 by rpki-client