Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: WytSffa3+r65TvltiqC4zoY5D1IXYwOfkSujdouNv3g=
Subject key identifier: CC:69:70:B5:08:0F:6D:4B:07:35:41:39:C0:AF:0E:5C:06:63:58:1E
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 019A54519A437A1B050A82D957A7194E52F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 14:00:25 +0000
Manifest this update: Wed 05 Nov 2025 14:00:25 +0000
Manifest next update: Thu 06 Nov 2025 14:00:25 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: BMknDLa2bpUtbcHsZ2XFIleaJJ+t9296bDlo3X7dge0=)
2: TWCQBg2-t-jrjyzWp02-IpHykDE.roa (hash: OzxPmG/iv0ZxRaIlS2kwO8RCX9n3cTZki/wmozkxxLc=)
3: w-Jga3ncDiQpUhbU2MQ6dRKRInQ.roa (hash: 5XUytb4Y6hE0gSnX9zthe9SyxMsKZ/nIOoxPG8EDHcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:9a:43:7a:1b:05:0a:82:d9:57:a7:19:4e:52:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Nov 5 14:00:25 2025 GMT
Not After : Nov 6 14:00:25 2025 GMT
Subject: CN=cc6970b5080f6d4b07354139c0af0e5c0663581e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:e5:6d:23:c1:7b:35:74:b6:83:5b:ff:56:
a1:7d:13:08:4e:db:31:b5:bd:0e:23:70:e9:70:29:
ee:55:97:54:db:f2:81:08:c0:bc:68:05:56:e7:7d:
27:36:cd:dc:90:d8:23:91:06:97:e9:d1:e1:d1:5c:
25:73:8a:e6:c3:d3:cb:c7:61:bd:c6:d4:55:27:12:
fb:31:fd:27:b7:54:d5:9b:33:7f:c0:17:05:88:0e:
c4:0b:de:43:c1:67:5c:d2:60:ff:74:44:31:2b:c8:
fb:c1:35:72:bf:67:45:13:a0:28:8c:79:6d:53:49:
54:63:c8:ba:1d:fb:31:35:df:d6:1c:c2:7b:02:df:
dd:05:5a:82:61:b9:36:2f:da:6a:7a:69:7f:e1:a3:
d5:58:18:4a:33:ab:3c:13:54:09:b0:af:b6:d5:06:
7a:19:59:a0:13:b2:ff:19:d0:99:54:3d:9b:03:f4:
31:81:bd:a2:8a:8f:ff:ee:9f:6f:45:70:0c:5b:db:
d2:cf:18:88:b5:08:68:8f:0c:ab:a5:ee:ca:0a:c9:
19:88:0a:18:b1:58:18:b0:a5:f0:80:2c:0e:97:b9:
66:79:10:67:43:d7:15:de:87:47:e5:4e:f5:6b:93:
74:77:f9:79:ae:16:1b:ed:b7:67:a4:58:4a:ef:16:
0d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:69:70:B5:08:0F:6D:4B:07:35:41:39:C0:AF:0E:5C:06:63:58:1E
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:62:ad:d6:b3:08:44:f4:45:40:3d:0d:b8:77:36:5d:8e:37:
6c:be:32:c6:24:95:a8:a0:42:56:64:80:aa:71:88:0b:ee:81:
1b:bd:6e:5f:4a:fb:87:12:98:5d:db:e5:22:01:58:f3:ef:47:
4a:c2:8f:e8:87:da:b2:29:c6:50:0d:d6:be:ad:73:b6:0e:fc:
00:b0:55:28:17:1f:d9:21:12:a0:48:d6:78:34:2f:86:87:50:
ea:e5:64:d4:17:67:9b:2f:6a:32:0f:ae:1a:69:d5:cc:ff:76:
20:79:66:1a:c6:0c:db:f5:29:b8:b5:c8:17:0d:3c:f9:04:03:
78:cb:81:7b:f5:c2:61:f2:c9:e8:a0:eb:7e:ed:3b:a1:49:86:
f1:41:d0:33:d2:61:80:c2:cc:70:b1:e6:17:1d:d0:0f:55:a0:
2f:26:14:fd:0c:4e:56:78:90:56:06:d5:e6:2b:d0:e2:f2:74:
de:8e:06:da:2e:a9:11:9a:91:8b:c8:da:9f:0d:47:82:65:60:
25:77:a4:e0:db:df:ef:0a:62:15:ef:12:1e:ef:5c:dd:20:ed:
18:87:6b:1f:02:f6:5e:7c:f7:04:13:fa:29:9a:59:62:bf:c9:
64:0a:d2:9c:69:0a:79:82:13:a9:19:f2:83:63:52:58:6b:7d:
06:77:26:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:45:24 2025 by rpki-client