Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
File: 3YpOHe5bseZXmxFhypEsqcA7Ru0.mft (raw, json)
Hash identifier: DKetZm+MYqpetvtbozy3QWeeWmEW3F86I2p8q6on0fQ=
Subject key identifier: D4:AB:FC:FC:F3:0E:29:C2:FF:A2:97:74:5A:30:1B:C3:04:41:B6:E0
Authority key identifier: DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
Certificate issuer: /CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Certificate serial: 019A50E39F27535F4798804A1D0AACD19CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
Manifest number: 1061
Signing time: Tue 04 Nov 2025 22:01:25 +0000
Manifest this update: Tue 04 Nov 2025 22:01:25 +0000
Manifest next update: Wed 05 Nov 2025 22:01:25 +0000
Files and hashes: 1: 1-hdiWMY5l0xAZuqxRKYMnls1-tQ.roa (hash: T86Jb9a9Ub4X+hYRFQtCytnDevJ3Vo4p0E2BCYldVL4=)
2: 3YpOHe5bseZXmxFhypEsqcA7Ru0.crl (hash: M9CAtKA8yTCXuSawSzWaFaYRqqEYT2U4gV5awoj5JFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:9f:27:53:5f:47:98:80:4a:1d:0a:ac:d1:9c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Validity
Not Before: Nov 4 22:01:25 2025 GMT
Not After : Nov 5 22:01:25 2025 GMT
Subject: CN=d4abfcfcf30e29c2ffa297745a301bc30441b6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:f6:a2:bc:fa:6a:89:e3:86:88:8b:aa:01:
e5:f6:2e:08:8c:29:4e:f9:6c:b3:7e:97:75:7f:50:
8f:47:3d:90:25:d0:87:90:e2:87:6b:83:9f:4c:09:
ef:5e:de:84:af:29:9f:0a:6c:b1:7f:65:46:f0:06:
b9:01:dc:f6:a4:de:cc:4f:ff:b4:c0:12:4c:6e:ba:
1d:df:30:a4:40:79:75:3d:2b:47:80:7f:33:5c:55:
27:df:06:99:c1:3c:4b:67:e5:de:d5:96:32:3d:04:
fb:b0:6d:88:bb:9a:81:c6:c6:42:fe:14:9c:73:fb:
2a:1c:fc:af:ca:bb:75:f1:eb:18:e9:8e:60:4b:06:
4b:4c:52:f9:f3:d2:a5:65:5f:99:01:d1:24:b3:05:
4a:51:4c:2c:fa:0c:aa:bc:29:8b:05:a1:9a:83:c7:
27:d6:0a:24:f1:ab:f2:2c:a0:84:13:4e:42:dd:35:
b5:9f:cd:45:c8:9e:5e:23:61:4e:73:b0:97:a5:da:
d1:97:05:e3:84:b5:0a:67:d5:d7:44:ef:8a:27:23:
e2:69:d1:29:27:e6:b0:7a:49:f3:51:c5:9d:7d:6e:
da:73:f6:5f:d1:29:2c:53:b4:07:8e:21:e2:7b:21:
b7:b7:86:4b:29:af:30:92:5a:5c:02:fe:6f:4c:b6:
9a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AB:FC:FC:F3:0E:29:C2:FF:A2:97:74:5A:30:1B:C3:04:41:B6:E0
X509v3 Authority Key Identifier:
keyid:DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:43:f9:1a:ce:84:6a:1c:d8:ca:f5:1b:5f:37:9a:1e:53:ff:
10:d6:2b:67:fe:b1:9e:bd:02:94:01:91:b0:4c:db:3f:dc:e9:
10:cd:38:c4:7b:29:e8:df:0b:85:25:e0:5b:93:e7:01:fa:20:
e3:3b:0a:e0:b7:96:43:44:b7:54:bd:57:57:08:e2:45:40:31:
85:c6:42:8e:2c:14:df:e4:45:31:4d:be:8f:cb:63:e0:82:a2:
b2:36:30:90:42:25:3c:b7:f1:b3:5d:cf:f4:8b:8e:a4:db:f1:
f8:b3:52:4c:f6:b6:36:68:7b:c2:bd:64:e3:09:a0:db:10:f3:
0e:e5:cb:83:6d:93:5b:68:74:00:f9:08:95:5e:4c:75:bf:d9:
1d:60:df:d9:68:8d:63:f2:e2:b6:06:6a:77:32:93:6a:e7:c2:
4f:e7:6e:17:16:16:86:40:cd:64:59:98:8f:91:f6:9a:7d:00:
d1:f2:d9:ca:44:c5:68:0e:a0:c4:2b:46:ad:50:c8:0d:05:c0:
58:50:e8:d6:1a:46:54:45:64:54:d5:fd:c8:df:8e:c2:b5:bb:
3e:5b:71:f6:45:0a:33:6f:cd:ce:2f:7e:eb:a5:f6:ff:de:3d:
eb:b2:58:a8:fe:be:f0:4f:45:f7:1a:46:e3:bb:b3:56:96:c0:
9d:fc:1f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:07:25 2025 by rpki-client