Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: NTw259WpGRXQf1mn5PgDgfn2IW4WcTSXc8ICILJeDvM=
Subject key identifier: B0:06:2F:31:99:C5:B4:EE:8C:E3:4D:10:6E:76:F7:9F:A0:80:5D:92
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 019A4F9989034C3CE9F2D0062ED76D390981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 16:00:53 +0000
Manifest this update: Tue 04 Nov 2025 16:00:53 +0000
Manifest next update: Wed 05 Nov 2025 16:00:53 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: b0b59uzsHTtYwO4QpXAsnonNJz3PWM+kvkOamEQ0ma4=)
2: QYQzorGK1cakLmK4R7aZ_z5BtRk.roa (hash: K/JfnEYnWlRvZUne2cydti381OQHnxSabuUVM9ge064=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:89:03:4c:3c:e9:f2:d0:06:2e:d7:6d:39:09:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Nov 4 16:00:53 2025 GMT
Not After : Nov 5 16:00:53 2025 GMT
Subject: CN=b0062f3199c5b4ee8ce34d106e76f79fa0805d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7b:80:1c:4a:8b:0e:b3:c3:1a:cf:d7:da:dc:
19:70:ca:2b:48:4b:10:da:23:3b:e4:5f:c2:b6:21:
91:2e:78:b0:81:d4:8c:07:36:36:8b:c1:e9:c1:3c:
10:ac:9a:29:0e:93:d3:ec:15:74:1d:8d:ab:d4:c5:
40:a2:9c:ee:2e:73:29:a7:45:a8:40:4d:29:71:7c:
74:1c:7f:ae:44:57:74:67:62:6d:1a:8b:68:bc:77:
b5:ec:cf:5b:5c:0e:17:1f:de:b0:09:2d:b5:3d:c7:
47:80:99:0f:0e:09:df:31:7d:52:7e:1e:87:c8:28:
22:1d:fe:7c:9f:fb:3f:16:ab:5b:c6:f9:92:5e:74:
45:bc:ca:3f:30:e4:86:ee:8b:60:2e:08:b7:d2:5f:
79:2a:49:a9:17:35:9e:3b:bf:55:cf:ac:75:51:d7:
5d:0c:0b:89:81:5a:e0:a1:8d:bc:9c:4b:97:0e:13:
b0:47:f4:7b:51:0e:e9:39:88:dd:19:e3:d1:c5:41:
33:e6:79:bf:9b:c3:bb:2b:2f:8f:b7:f0:fd:d5:7e:
5f:c5:7c:3b:5a:ab:28:9f:d1:63:6b:70:2a:4b:48:
e9:26:88:ef:ad:fa:d5:92:0c:fa:54:c7:93:c9:1a:
73:e3:af:01:f7:4a:2b:4b:fa:df:d4:09:b4:f0:4a:
0d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:06:2F:31:99:C5:B4:EE:8C:E3:4D:10:6E:76:F7:9F:A0:80:5D:92
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:08:61:6e:a4:87:7b:11:16:1b:b0:a5:8c:c8:ae:01:c1:fb:
f2:d9:7d:ce:f5:12:9e:1c:83:4a:d4:2a:7d:d5:0e:3f:3f:69:
14:96:c8:48:bd:f5:47:0b:4c:c0:ff:84:f7:d8:df:a2:a7:6a:
87:1b:35:6c:fa:1f:83:54:73:5f:aa:d8:31:ac:f5:df:b5:b6:
31:0d:80:c4:26:08:e7:d5:dd:8c:9e:d6:d8:88:bd:67:71:cc:
1e:a5:07:1f:c7:dd:a4:17:9d:8d:41:24:61:45:c4:23:47:84:
4c:1a:89:81:af:ca:99:fd:70:ab:e4:f6:d4:a1:07:55:e8:89:
56:27:3c:d2:07:00:84:06:63:9f:df:2b:35:57:f2:d9:fb:84:
0c:f3:04:b8:83:69:1e:c5:39:8e:74:0b:6a:5c:8c:8d:74:de:
30:2b:11:60:60:8a:ff:8b:49:40:be:51:47:16:0c:05:3e:a0:
51:9c:71:0c:4d:da:54:41:42:cd:4b:dc:29:f0:9c:4b:be:52:
c6:3d:c2:f6:88:39:87:c2:32:90:dc:92:ef:d1:60:1c:fe:5c:
64:13:7f:d3:94:6b:68:6a:76:cb:2b:a0:ca:eb:35:8f:f9:b4:
a7:fd:bc:07:96:6e:66:ea:4e:1d:b8:9e:4a:dd:df:44:35:56:
fd:ce:b5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:23 2025 by rpki-client