Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
File: 3BsrDhzng-t6Ljk__dEoxqnAIjk.mft (raw, json)
Hash identifier: 756FPnwYHPl3cWFNEqz3JsdizWBvaOXBkCaOJaGuf4E=
Subject key identifier: D6:B0:A4:9B:53:02:A9:A3:72:CA:89:AD:9F:D1:46:11:12:A0:B8:AD
Authority key identifier: DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
Certificate issuer: /CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Certificate serial: 019A51F5A10BB40DE853232DD9CD8974DA83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
Manifest number: 0467
Signing time: Wed 05 Nov 2025 03:00:43 +0000
Manifest this update: Wed 05 Nov 2025 03:00:43 +0000
Manifest next update: Thu 06 Nov 2025 03:00:43 +0000
Files and hashes: 1: 3BsrDhzng-t6Ljk__dEoxqnAIjk.crl (hash: yjjgbfoY46cg3s8ssopQ1rwOS8zyYZ22UkOofh8SRpY=)
2: b4tFKCMFhyngaw1LlIGrAjikYiE.roa (hash: zlYQxGhdtm2zm501rwjVL8YUyfYWJBRUvSyMolHaDtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:a1:0b:b4:0d:e8:53:23:2d:d9:cd:89:74:da:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Validity
Not Before: Nov 5 03:00:43 2025 GMT
Not After : Nov 6 03:00:43 2025 GMT
Subject: CN=d6b0a49b5302a9a372ca89ad9fd1461112a0b8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:b9:90:5a:f8:86:77:38:ac:de:be:20:e0:
6d:e0:30:da:d7:69:48:f9:d1:25:ee:a3:a6:b9:4d:
c8:4c:17:28:9b:2e:c7:5f:36:40:62:ff:e5:1c:42:
a5:31:1c:8b:18:1e:4d:11:18:96:ab:6e:b0:bd:af:
2f:1b:07:4c:85:95:18:25:48:b2:ce:7d:bf:6d:34:
17:ac:a2:f6:c2:1d:10:fb:bb:23:a1:4c:68:e3:a2:
9a:0f:ac:bb:68:18:b2:a6:87:de:b7:19:b3:e1:ec:
18:c9:12:cc:d4:0b:fb:cc:06:5f:71:6e:2e:e4:05:
eb:3c:62:fe:62:4d:8f:e1:48:63:0c:11:6f:19:e9:
4f:b4:c8:b1:f2:59:f5:76:41:43:7a:32:5b:6b:84:
22:31:45:79:0d:7d:d9:cf:11:a3:96:18:b8:b8:c7:
b0:30:47:48:68:2e:5e:e0:c5:6d:72:86:51:d7:f9:
5d:f1:2c:aa:91:ee:1c:15:6b:aa:34:b7:33:bb:8b:
30:fe:7a:c4:6d:cb:a9:08:a7:45:90:8c:ed:69:f7:
98:50:6d:17:83:e4:0a:67:fd:51:29:c2:24:5b:4f:
03:7b:8d:95:80:0c:39:b7:a8:cd:ee:a1:26:b6:0f:
9d:f0:b3:c6:c6:a8:e8:37:21:df:ab:3b:bd:2e:b3:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B0:A4:9B:53:02:A9:A3:72:CA:89:AD:9F:D1:46:11:12:A0:B8:AD
X509v3 Authority Key Identifier:
keyid:DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:dc:c2:b6:ca:ab:80:fd:76:47:2f:dd:4c:33:98:bc:2a:c9:
52:c9:17:fb:63:c6:df:e7:cf:16:29:bd:db:c1:91:db:02:81:
01:b0:73:8d:90:55:ba:b9:3d:c9:41:9a:b2:0b:e6:46:33:75:
1f:60:af:65:b2:f5:33:3a:dc:d5:3a:6c:3f:6d:43:74:e7:4e:
17:50:da:3f:73:ef:de:af:d7:59:49:a8:4d:cb:25:4f:4f:8b:
4e:22:bc:0a:cd:a7:a8:99:af:2a:42:fe:40:d2:c9:b9:c4:9e:
ab:c6:35:7c:e5:ef:d7:a9:5f:f6:7b:40:77:69:0b:3f:b1:d8:
b2:7d:be:c2:40:8f:b2:ba:7b:00:d9:e3:33:7c:a9:b3:52:f3:
6a:8b:c5:84:9a:fd:6e:84:99:3a:0a:54:67:a8:40:25:22:dc:
99:63:f8:a7:10:42:0d:48:6f:73:bb:2d:13:0e:25:24:1a:c8:
be:c3:1a:06:f8:c6:41:1c:e8:9b:b3:a7:34:1a:12:ba:0d:74:
63:b9:32:ae:8e:b9:16:1d:29:91:bf:17:56:b4:53:64:f2:db:
35:31:87:40:4b:2a:7a:23:69:bf:d6:5b:a5:e3:07:99:fe:3f:
9b:19:46:75:7a:df:7f:96:5e:e1:e8:2c:f1:6a:5a:03:44:73:
3b:50:62:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:20:30 2025 by rpki-client