Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
File: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft (raw, json)
Hash identifier: crfXFcgEX6JJme3piFYLFDXAZqDn9c2umOywuZ9Tb+4=
Subject key identifier: 07:95:FD:1F:FB:3D:26:2C:A8:E9:F1:48:CB:C2:19:E8:D1:88:98:95
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 019A4D74187B4CE5F049480FEE632666AF3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
Manifest number: 0EED
Signing time: Tue 04 Nov 2025 06:00:45 +0000
Manifest this update: Tue 04 Nov 2025 06:00:45 +0000
Manifest next update: Wed 05 Nov 2025 06:00:45 +0000
Files and hashes: 1: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl (hash: o7v9kPE0ASLrzfy94RUyFMN9syGRZyuY/Jto2ce3QcE=)
2: C9mugrtzW_-CpWlbrAzn7HLndJs.roa (hash: us/IF6tfe4s5IdJAAyc5z0B0e23waKBVaik+zvz/TyQ=)
3: yll503ISaq2wNzfEAk_Qb_MtGbg.roa (hash: LYtS+Gvc0u0aK5E+MP2oP4ZNnIbSc6rSwiTMseFfpYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:18:7b:4c:e5:f0:49:48:0f:ee:63:26:66:af:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: Nov 4 06:00:45 2025 GMT
Not After : Nov 5 06:00:45 2025 GMT
Subject: CN=0795fd1ffb3d262ca8e9f148cbc219e8d1889895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:aa:d4:96:50:ed:0a:17:fe:68:c1:c4:d0:fd:
72:99:c3:1d:c2:0a:2b:ed:55:c1:a5:31:03:c6:38:
40:40:f2:da:97:26:20:ec:a5:0d:8c:45:1d:c7:91:
45:9d:97:33:40:7a:22:d7:88:8b:10:37:2f:c8:2e:
da:b1:09:6e:34:9c:40:5a:ab:1b:9d:2a:56:c6:b0:
4d:73:93:ab:db:07:e2:c3:0f:c1:5c:f1:27:ab:fc:
83:2e:f7:fd:06:a9:b7:22:f0:0b:84:d5:8f:4b:40:
83:b6:e0:50:45:1e:55:ca:03:67:c7:5e:5a:f4:ef:
59:ae:2d:9c:13:15:cd:4f:bc:f9:66:3b:d7:c6:8d:
fb:22:fd:c0:e7:5f:2f:38:e7:9a:65:74:77:5d:c1:
96:bd:dc:cb:f2:ef:60:7d:4d:88:43:17:cc:f7:39:
9e:3c:cf:e8:c5:00:2a:a6:5d:b9:80:43:a0:ca:71:
b9:1a:26:b4:67:46:ea:2b:31:90:75:e6:b9:f9:50:
b9:7a:f4:ac:22:ed:5e:54:a9:bb:7e:8e:fc:53:a0:
9d:99:93:19:79:32:cf:21:37:3c:f0:84:18:58:51:
83:80:2f:9f:71:3c:e7:47:8c:ec:e2:16:7a:b0:cc:
45:f3:cf:d3:be:43:9a:67:f9:1a:f9:ec:c0:1c:ff:
cf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:95:FD:1F:FB:3D:26:2C:A8:E9:F1:48:CB:C2:19:E8:D1:88:98:95
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4a:95:70:03:a3:9e:b2:24:60:45:6d:db:47:17:71:fb:f1:
e7:c1:2d:f6:25:f0:19:60:a1:bc:6d:99:71:c2:18:d3:a3:79:
e3:ce:bf:08:d5:0e:5c:83:38:2f:f1:2f:ce:a0:f9:17:7b:4e:
fe:a6:db:7d:dc:c4:d4:d4:67:e2:b8:b3:a4:64:fe:7c:54:f6:
1d:f7:14:0a:25:a3:48:10:66:6e:ae:14:29:fa:a0:a3:f2:a1:
b7:e0:7b:09:2a:b5:ab:67:11:25:9c:db:e4:84:1b:71:98:8f:
38:32:2d:04:0c:8e:7a:e4:d7:73:b3:e9:5c:c5:c6:5e:8e:5a:
0f:64:48:0a:44:63:0f:fe:b3:f7:e0:12:2f:54:50:c8:59:16:
50:0b:be:68:88:12:2b:f8:d1:46:c8:80:c2:33:3e:f9:13:9f:
92:1f:d8:c3:9c:57:dc:70:86:fa:35:b0:75:99:b5:f6:eb:ff:
41:b1:8c:5f:36:57:76:4c:b6:13:74:33:be:5d:fb:f2:06:92:
62:4c:b7:3f:56:88:8e:31:40:26:18:32:c7:34:4a:ea:76:45:
09:6e:c9:53:97:3f:28:74:ed:cf:1c:06:79:88:3a:ca:54:d9:
f3:0e:dc:c9:f2:5d:da:9d:c0:24:d9:47:e5:78:80:7f:35:82:
aa:8f:58:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:51 2025 by rpki-client