Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
File: t3M-nelIW0RnHI5RHaIh5BU8cRs.mft (raw, json)
Hash identifier: VKpz2XMGk+uaDm2LRK4JIaWdbU9qgIaEFO4O8a1lmhA=
Subject key identifier: F6:D5:58:37:63:C9:14:B9:0D:64:39:6B:0B:27:E0:D2:D5:E5:A9:75
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial: 019A4DAB064698DC23E3D79061731B3A0894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
Manifest number: 171E
Signing time: Tue 04 Nov 2025 07:00:45 +0000
Manifest this update: Tue 04 Nov 2025 07:00:45 +0000
Manifest next update: Wed 05 Nov 2025 07:00:45 +0000
Files and hashes: 1: MTPWLW2wZKUX3rd5H2fglwcmRP8.roa (hash: NV6d77rjaDRaqkT0W7HOp+x3FnU/qH62m4QIfaIEmLM=)
2: t3M-nelIW0RnHI5RHaIh5BU8cRs.crl (hash: XD3x/1A//SCzY/0+z/Fvksl7RD0jmf+1W+Fn4aKq4Jk=)
3: zMsRcKOONscECgINX74a-U1WNU0.roa (hash: 6TWMzzay/K1ed+s9hSmFCHo0y4lDFCLVPqVrZje4kuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:06:46:98:dc:23:e3:d7:90:61:73:1b:3a:08:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
Validity
Not Before: Nov 4 07:00:45 2025 GMT
Not After : Nov 5 07:00:45 2025 GMT
Subject: CN=f6d5583763c914b90d64396b0b27e0d2d5e5a975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:47:d2:88:4b:05:f5:75:fc:26:97:39:45:
3b:8a:2c:a9:b1:80:2a:05:f6:3c:0f:14:a4:86:ef:
25:08:82:fc:b9:bf:79:e8:4c:2f:cd:f5:e9:fc:d4:
e2:12:27:95:85:5f:c2:8a:b9:9b:67:2a:08:b4:c2:
9e:2b:bd:08:01:6c:92:44:29:44:79:c6:97:1d:54:
52:17:ca:10:c2:84:a1:5c:15:2f:04:56:48:bc:b9:
8e:a4:6d:00:19:e2:09:43:c2:21:44:98:77:8a:f5:
47:93:eb:53:4d:10:94:09:10:6d:4f:14:e5:99:f2:
2f:3e:45:62:0f:4c:4a:f6:65:74:7b:2a:b7:55:0b:
58:14:62:e4:18:f7:eb:31:c3:53:57:4c:4e:1a:fb:
9c:0c:c5:66:a2:92:01:88:2b:15:39:f4:b3:a0:a2:
d0:9d:35:d2:81:f7:c1:3e:00:7f:5a:96:89:de:63:
b8:f3:de:22:19:7a:ea:6d:43:67:ab:6c:ed:40:dd:
0c:18:f8:eb:d2:7d:65:07:29:d8:d4:a2:65:98:25:
74:17:c9:5a:6c:cf:3e:b9:00:5e:61:19:20:17:63:
fb:66:13:dd:c1:28:75:b9:e3:50:de:e5:e8:eb:30:
34:38:2c:11:69:3b:de:54:b0:b4:05:4b:8c:2f:a4:
bf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D5:58:37:63:C9:14:B9:0D:64:39:6B:0B:27:E0:D2:D5:E5:A9:75
X509v3 Authority Key Identifier:
keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6e:9a:e6:b2:3a:fc:60:7a:0d:49:ab:08:e7:c2:f4:bb:e0:
9b:86:ee:96:a8:0c:65:1d:f1:3b:3f:36:b0:af:0d:18:13:81:
ff:ff:22:fe:fc:28:01:4c:de:5e:ab:a1:0c:ba:cf:08:68:36:
f7:86:6a:89:3d:b8:4a:db:59:94:d9:74:91:90:b0:e3:57:8b:
78:fa:de:81:6e:d9:05:18:44:9b:31:c8:c8:1c:e4:6a:79:d2:
8c:85:33:6a:8b:8d:4d:e5:3e:fa:78:e4:b3:98:3d:7c:08:a9:
00:0d:62:72:bf:5d:8a:33:1f:9d:28:9a:c3:0c:39:c5:27:7c:
45:39:36:73:0a:59:cd:ec:cc:48:ef:62:3a:e5:87:8e:a3:52:
4c:67:5d:a4:52:8f:18:c3:6a:07:b1:e9:18:a3:bf:62:21:0e:
e4:0d:3e:81:e4:78:20:a0:3b:89:d0:f1:2d:86:58:1b:ed:01:
86:93:03:3c:49:a3:2f:11:a2:99:f5:c0:0d:28:7f:30:b4:ae:
dc:25:86:ab:31:32:da:eb:d2:e2:32:63:0f:b7:ac:31:ac:72:
90:06:80:4d:13:34:5a:54:15:e5:8b:b0:09:d5:81:58:12:b4:
c2:75:f1:4c:96:ad:16:b4:92:ed:e6:0f:dc:0f:77:71:fb:fa:
95:de:01:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:29 2025 by rpki-client