Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
File: 3kVs200UA0XD3K6_x2NNTnzcuRM.mft (raw, json)
Hash identifier: 8+n6m8LkTxwPLnQlO2THAilieTHkNrQexdygq9pSHCE=
Subject key identifier: 15:E5:7F:40:91:26:20:ED:EC:E5:76:E1:04:89:40:D9:E4:F1:FC:4D
Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
Certificate issuer: /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Certificate serial: 019A52D17ABD3F0749903098A97DCBBAE63D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
Manifest number: 1719
Signing time: Wed 05 Nov 2025 07:00:51 +0000
Manifest this update: Wed 05 Nov 2025 07:00:51 +0000
Manifest next update: Thu 06 Nov 2025 07:00:51 +0000
Files and hashes: 1: 0wxplS04ynQiI1r3ArdsiKBCEOI.roa (hash: WDNF73KtUANe5OGg5Z8hCbK6QAlz8jWNq6iQlKA1l4A=)
2: 3kVs200UA0XD3K6_x2NNTnzcuRM.crl (hash: X0stOMqCKFH53hmDkpUmu5hEqmZQ1kCSki/cx5t3rr0=)
3: JIEsiChTD9veiUWmlJ3B4QQpFuc.roa (hash: G8sz8HlJFis3zSSNKaXy4CKewTagYcW3tdUbj5SB5rw=)
4: erY5eOsE13MYDYGdz-7KiRAOTog.roa (hash: NmXI2cVM6emkr8oTXJbXMbKgJl7gRO9hnwaW3QZ2P/k=)
5: g4ZCPviGonmRGPJlO9nSng_S-lo.roa (hash: NBfLnaWFnRjJb4HXfFDgN4fD3VeUZZnkBAnPok8zBDM=)
6: pt0lS1m3NLfN-ZlG6LR_u92_6So.roa (hash: 5VENDpQR+7VNnLE+YBum+RFRq29jqQtAdKpAJMhSuxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:7a:bd:3f:07:49:90:30:98:a9:7d:cb:ba:e6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Validity
Not Before: Nov 5 07:00:51 2025 GMT
Not After : Nov 6 07:00:51 2025 GMT
Subject: CN=15e57f40912620edece576e1048940d9e4f1fc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:d2:ee:01:d6:6c:5f:aa:4e:66:a4:37:89:
13:52:6a:29:e2:ce:87:52:fa:0e:6a:84:5d:8a:91:
86:90:e4:99:4f:c9:08:8f:48:b9:ca:6a:dc:49:e0:
42:22:de:f4:3f:89:16:bf:73:bc:c3:fe:21:41:21:
fb:d3:79:cb:f8:27:31:76:91:bb:55:fc:19:a4:2a:
a2:e0:87:f5:be:e8:19:fb:ef:c9:e1:ed:7b:8e:eb:
4d:b1:08:84:3f:83:34:30:12:c2:0c:a7:0a:c7:d5:
6d:7c:91:18:a4:41:af:a9:63:fb:ea:84:4c:37:0e:
d3:cc:36:c7:ba:c2:53:db:58:58:c3:ae:52:97:87:
bc:f9:da:e2:d1:a1:68:60:7b:5d:8c:85:b0:36:13:
67:51:43:40:8b:f2:a3:77:20:ed:27:c0:9e:22:57:
8c:a5:1a:be:b0:46:03:3d:a4:af:35:14:57:46:f2:
39:ae:8e:e9:83:13:d9:0e:85:45:0b:b9:af:0e:50:
9a:3f:e1:49:aa:e8:bc:c8:6c:b1:22:f8:5f:18:26:
fb:e0:8f:cf:98:41:b4:d0:da:4e:ad:59:db:be:90:
73:5d:f2:a5:8f:37:4e:31:ac:a9:f1:da:a1:40:21:
19:aa:83:ce:0f:e4:ea:37:0f:52:a7:50:b2:26:b9:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E5:7F:40:91:26:20:ED:EC:E5:76:E1:04:89:40:D9:E4:F1:FC:4D
X509v3 Authority Key Identifier:
keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f1:3a:e5:8b:ed:d1:41:76:c8:25:f5:db:81:73:e1:44:00:
fe:1a:ca:de:9a:d8:e0:e6:09:f7:58:e9:d0:cc:dd:06:f6:79:
ab:8a:e7:e5:06:1e:ba:0a:9e:7f:da:5c:6b:f4:83:67:90:7f:
2b:11:1e:bf:f2:2d:25:b3:30:15:01:1d:8e:5a:f2:d5:52:9e:
19:0f:0d:fc:07:73:10:41:b9:9b:77:29:e3:af:f3:9c:77:75:
c6:84:45:da:ef:7c:06:d9:5c:43:a7:7c:63:85:d7:bb:63:ba:
93:1e:54:e8:cf:65:c6:52:d1:cb:84:00:56:be:28:e9:16:b9:
31:ed:11:d2:de:41:5a:77:a3:50:d7:30:46:74:b9:23:ad:9a:
05:83:2f:c9:fa:11:95:36:4a:b7:6e:0e:58:75:91:ea:e2:d7:
3a:1e:bc:28:ba:71:d7:07:5f:4b:05:5f:54:73:c8:91:82:3d:
e8:f8:5a:48:fa:e1:6e:12:a8:22:ee:7e:51:ab:af:ca:c4:86:
6d:32:66:6f:9d:33:de:ae:c2:ae:f7:99:f3:7a:85:70:26:7d:
fc:74:35:5e:ed:c6:35:5e:0a:e4:3a:72:2e:b7:30:f2:bf:ee:
e5:60:28:8b:78:f8:fb:48:1d:d4:43:0e:f6:ef:17:ba:26:22:
17:9d:5c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:31:21 2025 by rpki-client