Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: hkF2qrLFxzPZuVTOh5DZRQCvXgzfJ5aqv6MBSh4zRdo=
Subject key identifier: 59:07:74:9C:AC:5A:0A:3F:66:E5:DD:D9:70:A0:CE:A9:38:E7:3A:D7
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 019A54BF952C1B4CF636FA371F05B48743F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 1081
Signing time: Wed 05 Nov 2025 16:00:32 +0000
Manifest this update: Wed 05 Nov 2025 16:00:32 +0000
Manifest next update: Thu 06 Nov 2025 16:00:32 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: cMDQDDfASIstqOk0CHKvt6DjMzHga4ZcEBQXriv9LHo=)
2: i8FpzgugtZcFKDdMebgRZ16RoIg.roa (hash: Z0Wnkrs5xvwFBERJB5wvtxVMhqH4ul49O/mmtU48/Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:95:2c:1b:4c:f6:36:fa:37:1f:05:b4:87:43:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Nov 5 16:00:32 2025 GMT
Not After : Nov 6 16:00:32 2025 GMT
Subject: CN=5907749cac5a0a3f66e5ddd970a0cea938e73ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:70:eb:aa:e2:95:60:a9:1c:e2:f0:7e:22:f1:
d4:ea:1d:62:65:cf:40:eb:b7:9c:f8:d6:2a:42:3c:
76:d3:b7:5b:5d:cb:38:48:80:f1:b2:1e:f5:10:e7:
f4:ac:70:1f:69:53:cc:ed:bf:57:ac:08:a3:39:5a:
e8:92:a0:bb:87:5a:12:fc:ed:48:fc:99:18:cd:ef:
c6:b2:28:40:ac:1e:38:11:25:ff:54:22:2b:65:0a:
7d:2b:89:42:46:c8:9e:0d:bd:d6:a3:bf:85:a5:3b:
27:a2:b1:79:a9:23:4a:f5:d8:48:49:2a:ae:3d:51:
31:cc:c6:c3:82:4a:e2:e2:a3:d6:f3:ac:62:75:66:
04:d2:b3:f8:53:9c:28:69:9d:ae:ab:d5:af:9d:77:
21:58:72:d7:03:02:ee:5f:e1:d2:af:65:29:39:8c:
ab:72:6a:e6:4d:a6:dc:37:26:56:7b:1f:2c:6f:79:
fb:a3:78:44:79:af:f1:28:36:bb:13:40:97:9e:9f:
04:ff:91:fa:b1:09:59:e4:47:26:a8:45:2c:e2:45:
87:13:f9:b7:5a:7d:8b:ac:40:5a:38:64:e9:53:50:
a9:f6:28:e9:1e:94:71:6e:18:13:e0:aa:f0:d3:c2:
dd:b4:b7:dc:bd:a1:41:8d:d6:66:22:d9:1b:7e:88:
13:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:07:74:9C:AC:5A:0A:3F:66:E5:DD:D9:70:A0:CE:A9:38:E7:3A:D7
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e9:73:6b:cc:ed:cd:0b:b9:6c:e6:87:53:7f:ef:20:e0:a8:
85:15:9c:46:6a:3f:1c:b4:ba:ee:6b:6b:ad:24:4b:20:d5:4c:
aa:bf:9d:ee:0f:eb:4c:ec:96:58:df:6e:fc:80:32:dd:9b:08:
73:44:a6:8b:9e:a0:1b:4d:60:01:89:3a:46:85:72:70:f2:5c:
34:52:97:b3:2e:7e:34:ff:e2:14:00:57:c9:7a:29:68:a2:ce:
9f:d8:49:c6:0c:bd:a0:ac:0d:62:6b:fd:b5:fb:4a:be:05:ed:
90:fd:5f:a5:85:7a:79:a3:e6:2b:ee:d4:0f:ec:0a:32:30:48:
26:ee:ca:6f:60:f9:91:80:f7:75:b4:a2:1b:04:a2:49:e8:2c:
d2:a7:2f:89:08:03:bc:5b:b2:44:80:13:f9:0d:85:31:92:da:
86:11:85:88:26:fc:a8:67:f8:cd:d3:f4:eb:6a:80:ba:cf:08:
a8:fb:e5:81:06:40:36:2e:a2:be:83:37:3f:dd:6d:b1:b3:2b:
ed:bd:6c:95:8b:5b:2e:5f:ef:6b:fa:04:df:1d:0d:78:99:47:
25:65:50:9a:07:3f:1b:33:06:12:1b:fa:36:9d:66:99:f4:e2:
68:13:32:87:ed:47:7a:ca:21:88:b0:6f:44:98:12:b4:b1:b3:
2a:0f:ef:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:52:51 2025 by rpki-client