Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: YBf2UjM5xL9DinjQTG9TmblBWuEGpmodJmj3owWdZgE=
Subject key identifier: 5C:F1:5D:DD:32:F5:14:82:71:A8:88:31:79:80:B5:DE:88:DB:C7:CE
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 019A4E1902F242D9C3DF48B3D42AD86D10B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 104D
Signing time: Tue 04 Nov 2025 09:00:53 +0000
Manifest this update: Tue 04 Nov 2025 09:00:53 +0000
Manifest next update: Wed 05 Nov 2025 09:00:53 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: AcuGbmvAOcohwhOeuodo7Hj2qlr3wcOSSVVmqSGmmyA=)
2: M0CEGpqdnFyhH05u6ywrw5xpjxw.roa (hash: Da8bL20Ezk/7GnIViJo/xS7eFj2lqLDIbA2oioZuSt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:02:f2:42:d9:c3:df:48:b3:d4:2a:d8:6d:10:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Nov 4 09:00:53 2025 GMT
Not After : Nov 5 09:00:53 2025 GMT
Subject: CN=5cf15ddd32f5148271a888317980b5de88dbc7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:97:e9:27:a7:f6:f3:02:0f:b7:0f:9d:df:9d:
09:c3:8b:89:ab:3c:77:98:92:92:af:48:c6:08:74:
fc:d8:08:51:e0:3d:50:d5:31:5d:ad:49:9d:85:00:
dd:4b:b8:76:43:28:45:06:9d:70:e7:dc:73:28:19:
69:ce:0c:2b:66:fc:75:9e:08:f1:c0:1e:4d:cb:77:
eb:63:aa:87:69:39:6d:6d:b4:e2:78:70:d5:39:cc:
22:62:b2:c9:01:6b:c6:e2:9c:6a:22:07:e4:8d:7d:
bf:e3:08:17:8e:28:bd:67:1b:6b:26:6c:67:bf:d0:
00:6c:0f:59:13:d1:2e:f7:a2:1c:38:90:31:b3:d3:
e3:d1:71:17:52:3d:f2:2c:06:8b:5a:60:9a:15:a9:
b3:f3:0d:24:1b:68:e1:d1:0f:c6:4f:ed:28:62:bb:
57:03:db:1a:eb:b0:82:3d:c0:6f:ef:32:22:93:52:
fa:3f:75:6e:dd:5c:22:28:e4:d2:1e:91:78:0e:eb:
a8:36:6c:0c:3c:46:21:85:ca:24:08:02:9a:a9:ff:
55:2d:a7:8e:bc:8b:96:e5:8f:be:0a:3e:1f:ea:66:
90:00:40:fd:36:8b:96:7c:0f:d3:0e:33:68:45:10:
e4:ef:f8:e3:17:c1:fe:c8:8e:c0:f9:fa:35:2d:3d:
6e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F1:5D:DD:32:F5:14:82:71:A8:88:31:79:80:B5:DE:88:DB:C7:CE
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:99:52:0b:ab:e3:89:c5:d1:07:18:fb:ff:f3:3c:d4:21:c9:
44:9b:52:48:4d:f6:c7:3a:df:7f:ab:87:f2:4b:bb:48:32:69:
06:38:18:58:15:19:45:a9:68:a4:da:f3:96:d9:d7:df:68:a1:
b5:b4:94:11:ea:d9:5c:11:f9:a3:48:03:22:44:c7:a3:e5:c9:
16:9e:ad:17:d0:8c:07:f9:b4:86:81:c7:8a:46:cb:d8:d0:18:
ef:b6:38:d5:b8:19:47:60:19:d8:89:03:95:dd:d3:a0:1c:9f:
b5:39:b4:6d:c4:0d:5b:2b:fa:68:c1:95:56:d9:f3:da:64:42:
9c:1b:eb:ed:04:99:2a:97:e7:05:a3:87:ea:e7:d5:ba:fc:c4:
0c:49:98:cb:74:50:cd:09:13:40:e8:72:f2:57:f3:1b:9c:42:
0c:12:83:04:0a:bb:63:d0:6c:c8:60:3c:49:7d:5a:40:bb:80:
c9:c1:57:55:cb:bf:03:e0:65:f8:1c:4f:4a:7a:21:f5:8a:d7:
93:0e:2d:12:48:56:f4:c7:75:01:36:68:be:9f:cf:81:9c:a0:
fe:81:7d:c2:b3:bf:41:9f:13:39:9a:82:f6:eb:dd:a6:13:88:
6e:3e:90:27:40:71:15:78:12:9a:98:7d:00:e2:95:a0:57:0b:
e6:88:ef:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:51 2025 by rpki-client