Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier: NukQNwErZ6hFHYbmn6gl2W3Ct3OQ2czIra4+r/ZkJdo=
Subject key identifier: 05:52:19:E5:61:C8:B7:36:D4:D6:F2:8E:AC:0D:F2:8F:F9:D1:43:71
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial: 019A4D3CD163764D55F32D7D4B5148ACEABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number: 0C32
Signing time: Tue 04 Nov 2025 05:00:22 +0000
Manifest this update: Tue 04 Nov 2025 05:00:22 +0000
Manifest next update: Wed 05 Nov 2025 05:00:22 +0000
Files and hashes: 1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: w7byHWpjT7NgUEanWtjd3GjLZ1f72Ume+IsOHYPczME=)
2: GTryjErQ-QvKOHELwraRwqDQoQ4.roa (hash: GN3kBbzA5jk8ZVZGy0p/hEuJ6JzyB6iMj6OE8Sf6qCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:d1:63:76:4d:55:f3:2d:7d:4b:51:48:ac:ea:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec756af77dafebca10684d68556baacd7173617
Validity
Not Before: Nov 4 05:00:22 2025 GMT
Not After : Nov 5 05:00:22 2025 GMT
Subject: CN=055219e561c8b736d4d6f28eac0df28ff9d14371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cc:9c:ba:4b:fd:d1:18:48:15:0a:39:c3:cf:
c2:4c:77:99:42:ea:30:ac:29:d1:c3:49:bb:da:2c:
d4:f0:2f:12:85:f2:9b:f2:5a:e3:45:83:d0:5e:e8:
a2:61:af:87:50:23:5a:b8:94:10:ac:b8:4a:23:3b:
a3:d8:30:a0:6e:33:05:02:9b:4c:ea:f9:d7:af:5f:
24:3d:5a:c2:d5:02:b1:fc:b0:ae:ae:c9:8f:e0:67:
2e:60:ea:1c:38:80:9e:ac:e8:96:05:0e:17:c4:cc:
ce:63:b9:29:c7:24:47:c5:79:ea:e6:a4:81:17:0c:
57:33:37:f4:88:87:14:81:c8:13:8f:74:af:cf:19:
8e:05:b4:d3:56:88:46:dc:81:09:6b:bb:c9:c4:6a:
91:50:1d:4a:8f:2a:9d:16:6c:ca:d0:a4:7b:9b:bc:
b8:34:e0:6e:47:57:aa:ac:81:7a:3f:98:e0:d3:b2:
9a:0a:f9:4a:19:c1:77:d3:f1:87:6f:4b:df:e5:c7:
33:b5:d8:3a:d4:c1:78:d8:4e:c0:d3:14:0e:61:95:
09:63:dd:53:b1:97:d9:91:49:01:58:13:61:23:d2:
02:bc:c5:c9:c1:75:1d:e4:84:a1:e8:55:24:04:8c:
b5:f7:22:d7:b9:36:2d:ac:e1:d0:84:3f:b0:f1:9c:
f0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:52:19:E5:61:C8:B7:36:D4:D6:F2:8E:AC:0D:F2:8F:F9:D1:43:71
X509v3 Authority Key Identifier:
keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:52:fd:03:92:f3:b0:cd:91:d1:a3:8d:3b:16:65:47:c1:c9:
d6:17:6f:c3:cd:2b:23:c2:a5:e5:fc:36:e1:6f:0b:db:85:70:
aa:f1:b3:ad:61:00:5d:d3:54:2f:e2:36:03:87:89:35:57:3c:
8c:86:d8:d5:4f:38:de:6c:f2:9f:b8:46:f4:37:13:0b:76:20:
31:57:bb:53:70:a3:c2:59:64:df:56:90:c7:42:69:df:27:6f:
c1:e1:c0:ad:02:aa:0b:64:7a:01:97:5a:c9:5c:7e:21:26:e4:
a7:1d:3e:01:24:b5:e5:94:27:d0:44:83:fa:31:6e:b1:2c:1e:
f9:09:19:ed:58:9d:86:13:b0:bd:ab:14:d7:b2:ad:ee:07:d9:
9d:cf:30:3e:b5:68:bb:61:e8:4c:d2:50:d1:26:28:44:f7:cd:
93:4a:68:82:c1:6c:72:a7:30:ce:73:c6:2f:40:7a:53:fa:a2:
47:50:42:9d:a8:19:a0:a7:4f:a1:54:de:e3:d3:e3:18:a9:12:
ae:4f:d0:81:bb:64:bc:a1:72:13:9a:c8:1e:3d:de:d0:e2:e8:
40:8a:11:b0:5c:75:f6:fb:72:b2:f5:04:af:4a:37:20:cd:a8:
94:ef:07:8d:c9:e0:83:0e:a5:d3:b0:95:4f:dd:76:1c:e6:a4:
71:7b:ba:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:22 2025 by rpki-client