Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
File: 3AOqmk_p1gxc-FOpJIIiafHMdFI.mft (raw, json)
Hash identifier: pmiKM4m2lPJC6hJZwRz0Wtc+XmomYidXjeZ4llVRN/w=
Subject key identifier: 3A:7B:83:CC:57:FF:16:68:15:68:37:C8:9D:3F:1A:B0:4F:57:26:A4
Authority key identifier: DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
Certificate issuer: /CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Certificate serial: 019A4FD06C2FA23C1FF72B2855642558304D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
Manifest number: 0CB9
Signing time: Tue 04 Nov 2025 17:00:50 +0000
Manifest this update: Tue 04 Nov 2025 17:00:50 +0000
Manifest next update: Wed 05 Nov 2025 17:00:50 +0000
Files and hashes: 1: 3AOqmk_p1gxc-FOpJIIiafHMdFI.crl (hash: W3kA2SRkzUJ6BqamJHNG9X73yUOug1AO1zbJPud1PrM=)
2: qHsLN52OLV40PkdsNg1LTDhrI1k.roa (hash: o2jlcmcZCFuQ0+N7Kss7ufNJs+2izJmB43Pkb+WDd2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:6c:2f:a2:3c:1f:f7:2b:28:55:64:25:58:30:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Validity
Not Before: Nov 4 17:00:50 2025 GMT
Not After : Nov 5 17:00:50 2025 GMT
Subject: CN=3a7b83cc57ff1668156837c89d3f1ab04f5726a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:a4:3f:68:1f:c3:7a:1d:31:ce:88:b0:7a:
e7:4c:be:ce:db:98:d4:0d:02:ba:22:0d:1c:0f:8e:
c9:8b:86:17:62:d5:35:ad:c2:90:3d:de:0d:3f:45:
2a:cd:c5:40:fd:0e:d9:04:a5:83:22:73:fe:36:d4:
56:ad:9a:a7:1f:24:5b:ff:41:37:d3:6e:87:1b:ad:
25:d9:de:65:5a:e5:0d:f5:54:9f:1c:1c:3e:5b:0c:
1d:07:40:a4:94:eb:b1:5d:f0:d9:d1:b1:4f:b1:0b:
11:3a:db:42:01:28:cd:32:92:1f:36:d2:35:a0:7e:
82:c4:47:88:1c:17:58:0c:7d:0e:c6:55:09:c0:c1:
5a:97:b3:6f:30:ca:c7:33:fc:55:b4:21:98:76:90:
ee:c9:ea:ae:2a:05:94:dd:04:c8:3d:fd:95:be:75:
f2:73:fd:ba:fb:e4:af:f9:bd:0d:ba:4d:66:a1:d2:
44:59:a5:6e:75:92:9a:d8:dc:77:31:b0:13:bd:13:
86:90:6d:52:11:e7:ce:6e:aa:42:d3:bd:52:43:89:
ef:fb:34:ef:83:50:e9:a9:10:4d:95:7e:da:b0:ae:
09:35:e9:b9:92:1b:13:e6:fe:49:ca:68:4c:49:d0:
3a:69:fa:65:04:5a:b1:c7:e5:e0:ef:eb:c1:24:90:
97:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7B:83:CC:57:FF:16:68:15:68:37:C8:9D:3F:1A:B0:4F:57:26:A4
X509v3 Authority Key Identifier:
keyid:DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:83:f4:64:f5:2a:4a:f3:f1:63:01:c0:30:d3:67:e8:d8:40:
b2:f0:69:db:be:5f:83:53:c9:f0:1b:ad:ff:80:0e:5a:73:e7:
2c:80:06:06:d3:0d:03:c6:08:35:fd:61:ad:38:fe:19:5d:5a:
7a:2c:8b:c2:67:65:7c:51:61:0b:fa:78:dc:49:1d:d8:c1:bc:
7d:c6:cd:35:1c:bd:60:a5:5f:bc:e6:1a:99:d3:b7:c5:62:87:
15:af:2a:bb:ea:aa:e4:41:bf:79:ee:55:d6:59:4d:37:b6:05:
db:8b:2b:9a:d9:4f:2f:fc:90:b2:4f:37:9e:f8:a3:8c:ba:1c:
a3:ee:4d:bd:21:ae:2c:5a:ae:9c:b4:14:2c:ca:a5:6f:cd:ea:
ca:4e:06:42:c6:cd:17:80:9c:13:40:07:01:34:99:e1:df:47:
20:8e:59:75:fb:ed:67:e2:20:99:ab:bb:25:6e:6e:c5:46:52:
0c:fb:97:4a:10:14:06:e3:ef:c2:fd:37:04:36:d0:de:3a:0c:
53:d4:d2:7f:5c:ba:0d:21:1b:7d:ab:17:a7:c2:d2:48:8b:0a:
c2:50:b2:3a:d4:bb:79:a9:37:89:00:5d:8d:3d:7a:91:2c:69:
0a:45:d1:88:bb:1c:82:96:b6:23:1f:37:15:5a:cd:3a:1d:44:
cd:27:6f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:53 2025 by rpki-client