Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
File: 3UftWIupBpRXoqiY_HoMuXfR-B4.mft (raw, json)
Hash identifier: IXu3vQ9ptlbRe1/YFa5KWmkEl9U+EBrUsZR6MGI7fTw=
Subject key identifier: 0C:1A:F1:85:1F:FD:D8:27:C9:31:D5:16:36:7C:15:36:14:F4:3F:CB
Authority key identifier: DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
Certificate issuer: /CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Certificate serial: 019A507524078431EDAF70A9B49E7712297D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 20:00:45 +0000
Manifest this update: Tue 04 Nov 2025 20:00:45 +0000
Manifest next update: Wed 05 Nov 2025 20:00:45 +0000
Files and hashes: 1: 3UftWIupBpRXoqiY_HoMuXfR-B4.crl (hash: nzzz+Xzr3oKz2yoWCOfqbnwZZ7JwOI2PWsA/NIpJeLI=)
2: NjNc1F_noFOuVoizuwyNmIiyikg.roa (hash: IrtAGIN7Mq5Prcg2l/Rn0ppsqJX7JmRhzfI5wRDO3Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:24:07:84:31:ed:af:70:a9:b4:9e:77:12:29:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Validity
Not Before: Nov 4 20:00:45 2025 GMT
Not After : Nov 5 20:00:45 2025 GMT
Subject: CN=0c1af1851ffdd827c931d516367c153614f43fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:50:82:93:82:c7:98:31:c5:4b:cc:20:78:1a:
97:69:81:3c:89:b7:59:7d:f7:fc:e9:d0:8e:1d:60:
66:b1:50:95:1b:8c:44:08:db:45:b9:9a:bd:43:55:
96:5d:a7:5a:b7:8e:01:a0:da:cd:24:1c:12:7d:bd:
74:57:22:22:5b:71:ed:6f:35:a5:04:67:c9:73:b4:
4e:28:fc:06:3e:d5:aa:66:03:79:ad:28:0c:f4:c2:
af:9a:26:74:f2:90:22:fa:af:45:78:ad:ff:45:c7:
41:ea:12:31:d7:ef:f2:7e:d7:dc:47:90:1c:d4:5d:
59:00:b0:96:5f:9c:45:47:8c:f0:54:21:93:e7:cc:
f5:d8:6d:b5:e2:03:a2:12:fb:b6:40:a9:77:95:b4:
cb:f0:46:dc:99:f6:01:9b:69:57:2a:0d:3c:34:66:
80:39:f5:be:0d:99:fe:89:a8:94:06:56:26:82:06:
cf:fd:35:92:27:24:ff:ef:24:68:2b:70:f9:00:29:
bb:7c:05:68:11:df:8c:91:7c:63:97:de:d5:84:dd:
22:a2:46:7c:50:c1:28:7c:ad:d0:28:5d:34:4d:77:
fb:58:84:49:05:5f:fb:56:f5:10:57:78:1e:a1:7d:
68:f9:8a:0c:9e:7a:d8:c9:bc:de:29:5b:3b:d9:69:
9f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1A:F1:85:1F:FD:D8:27:C9:31:D5:16:36:7C:15:36:14:F4:3F:CB
X509v3 Authority Key Identifier:
keyid:DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:65:e0:ea:68:be:c5:53:a5:2a:5f:1b:88:b0:71:7a:58:4e:
c8:16:ca:36:74:b4:8a:e2:3a:34:8c:64:9b:c9:63:90:d9:53:
85:cd:66:1f:25:4d:f9:9d:b8:9a:be:13:8c:3a:82:65:7e:7a:
d5:92:53:c2:a1:3f:71:56:67:ed:de:ed:11:08:25:7f:ff:ac:
77:e3:b9:cb:8a:9d:44:20:f0:40:50:4e:00:9c:1f:35:37:0d:
5b:ec:db:3f:ff:90:d0:7d:33:0a:18:f5:86:ee:be:5f:cc:3a:
84:1a:29:28:f2:9a:5f:af:77:82:c6:5d:bc:10:8c:9b:e6:74:
ec:f0:ce:96:82:31:96:c0:d7:32:30:29:7e:09:7d:80:3e:e5:
40:e1:f9:de:6b:2f:75:c8:61:7c:fc:2b:53:c8:a6:af:ef:0c:
dd:2f:9e:33:cc:90:c0:23:04:82:a6:b2:ce:38:a2:fe:77:25:
0a:0f:49:d9:5d:5e:aa:48:11:75:48:db:22:2c:98:3f:1e:f6:
c3:f6:eb:08:80:23:e3:ab:50:cc:46:7e:03:ed:a5:bf:ff:04:
d4:44:2d:d4:20:0f:ee:8c:6d:77:ac:c9:91:96:e6:11:da:2f:
db:51:b2:5c:65:f2:c6:f6:2f:b9:db:df:2a:6c:f4:99:20:16:
f1:ca:ff:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:16:58 2025 by rpki-client