Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
File: 3wBu2HGlzgDSu_lovAlA7lhqPOs.mft (raw, json)
Hash identifier: be3/25Vw/I9B2wmMw0dLc/4HX9Iep2pERl6lsD61S2o=
Subject key identifier: 81:CE:D4:B4:E9:2E:CE:0E:BC:19:6A:A6:E4:90:5D:68:0A:A4:ED:91
Authority key identifier: DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB
Certificate issuer: /CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb
Certificate serial: 019A537612F584E9AD095E81E5BE6597C780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
Manifest number: 01D5
Signing time: Wed 05 Nov 2025 10:00:38 +0000
Manifest this update: Wed 05 Nov 2025 10:00:38 +0000
Manifest next update: Thu 06 Nov 2025 10:00:38 +0000
Files and hashes: 1: 3wBu2HGlzgDSu_lovAlA7lhqPOs.crl (hash: OGtB2efv/iVPgNe1KOYNnAqan/6xuBbLhkJafctiDls=)
2: xlhZPy2tgq9KnJAF-W8wAfARZ5I.roa (hash: gkGnuQfXZLAxpDNGgxfjG9Qut5Hb3M/1cK2A/dmc9SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:12:f5:84:e9:ad:09:5e:81:e5:be:65:97:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb
Validity
Not Before: Nov 5 10:00:38 2025 GMT
Not After : Nov 6 10:00:38 2025 GMT
Subject: CN=81ced4b4e92ece0ebc196aa6e4905d680aa4ed91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:70:de:e9:d1:7e:b8:b8:b8:df:2c:46:d8:0f:
ad:d1:9b:96:6f:15:70:ce:d2:a7:b2:cb:a9:85:2c:
4f:cb:4d:2f:d3:c5:0c:30:cf:27:d5:81:be:0c:57:
b9:b1:f1:1a:c3:b1:6e:36:16:9f:64:ad:30:47:1a:
b5:bf:10:e3:e2:3b:50:dc:e9:5b:63:88:1d:44:98:
e2:35:57:69:6d:e0:b0:1d:05:a6:aa:39:20:33:22:
0c:7f:9f:83:25:4a:02:b8:85:f7:8a:d6:44:d2:e0:
77:49:fb:99:da:f0:00:b6:5d:25:7a:c2:aa:f0:b3:
fc:16:d5:ec:4c:c5:a7:b6:46:47:ba:51:69:48:74:
67:5b:c2:f4:5e:74:cf:42:25:59:a5:f7:b8:19:42:
0e:0b:95:e4:06:f6:4c:32:06:49:2d:f9:3d:f6:de:
d4:6c:d9:80:b7:e5:43:1a:fc:75:fd:4d:12:9e:40:
3e:a9:8b:ee:fa:79:bc:42:6f:94:b1:61:09:69:dd:
4e:e6:b3:7c:15:6e:3f:15:4e:c9:ba:32:28:2e:c3:
d9:c1:f8:b3:c3:02:1e:f8:c3:16:ea:0b:7a:79:5f:
42:09:f3:bb:eb:db:ad:ea:4f:31:ca:b8:1f:3b:b4:
39:66:60:0e:d6:3f:22:bd:ad:8f:83:62:de:16:ab:
50:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CE:D4:B4:E9:2E:CE:0E:BC:19:6A:A6:E4:90:5D:68:0A:A4:ED:91
X509v3 Authority Key Identifier:
keyid:DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9e:ef:6c:8b:d9:47:86:8f:d2:31:50:15:c9:27:63:f8:51:
fd:ad:5b:5d:47:ed:00:e7:d9:58:0e:03:9d:bc:48:fa:91:48:
5b:bb:0c:6c:2e:ac:b4:2f:8a:86:b7:ab:89:97:5c:7b:32:58:
c2:49:a4:e2:33:4f:47:00:a7:4e:ef:df:be:33:82:61:a2:82:
f0:2d:94:ac:81:7c:c5:55:b9:e0:26:01:25:aa:4a:c2:2f:10:
5a:62:28:83:ed:1e:92:5c:2c:ae:a7:3a:a6:70:d2:fc:05:ed:
ac:a1:76:5e:88:e9:f1:75:59:7a:f4:65:ce:b3:ac:3e:17:77:
69:5a:54:4a:81:73:8b:19:d6:1b:fe:ab:c9:b6:e5:e1:ba:ce:
e7:ac:c4:2f:16:a8:5e:48:18:2b:52:64:0e:00:b5:61:46:41:
26:ac:e7:02:44:2f:3c:d2:9d:c4:5d:2f:ed:e7:4f:12:34:a1:
60:d0:06:54:15:ca:58:de:64:34:dc:17:59:8d:07:02:33:6f:
52:ae:11:78:c3:85:6f:23:fc:3e:90:84:5a:a0:ab:65:0f:6e:
ad:c3:c2:aa:c0:05:32:9b:24:ea:7a:25:8d:c0:73:fa:04:aa:
f0:e7:22:a2:32:c8:38:38:78:f2:08:7d:c3:44:16:6a:ce:93:
53:96:e5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:07:30 2025 by rpki-client