Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: nhlZuNOOMFdtsKjKfnruMNwwK0d8IJjSaPZdrVEYdlk=
Subject key identifier: FF:1C:26:13:BC:D4:CC:99:4D:0E:72:D0:48:01:B2:6E:9A:3A:63:74
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 019A4EF51264BAEC7F8EE19C19A5FEF307DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:14 +0000
Manifest this update: Tue 04 Nov 2025 13:01:14 +0000
Manifest next update: Wed 05 Nov 2025 13:01:14 +0000
Files and hashes: 1: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: cOtACE5JZlH+js3e3mjIKUjzqTXiK4VeV6JrDw7CDBM=)
2: KW800OmJGIdT7uikc0QcQ975IG4.roa (hash: dwHKNqVSICACPiCia+yUDPbsR26gug+E9f0Pra0zV6s=)
3: cEC9bPBmfz9Z43qJKU1IUGSC0lI.roa (hash: 4mEdeYIHzDK/DCJ4cVdrdS7DkgcRn2OeioiYgUbofOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:12:64:ba:ec:7f:8e:e1:9c:19:a5:fe:f3:07:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Nov 4 13:01:14 2025 GMT
Not After : Nov 5 13:01:14 2025 GMT
Subject: CN=ff1c2613bcd4cc994d0e72d04801b26e9a3a6374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:49:11:11:69:2a:10:99:75:8d:fb:3f:f2:37:
9a:fd:d2:bb:d3:3a:d5:d4:2d:33:b8:4c:fa:6f:74:
04:dd:71:52:0a:e2:19:6c:51:cd:f5:09:00:36:a6:
9c:45:a8:4d:04:df:30:21:76:fd:8b:75:f2:35:22:
d5:ea:2b:49:b1:c6:02:6f:bb:25:12:ea:cc:39:fa:
6b:34:38:62:d6:46:56:7a:84:59:06:7f:8e:e1:a9:
7e:5b:4a:db:37:d6:51:7a:82:41:67:d1:54:a6:58:
60:82:c5:ae:c7:3b:2b:e9:20:b7:de:6a:98:d5:b4:
68:36:e4:cb:d6:4d:e3:86:ef:f6:99:3c:3f:d7:fa:
02:fc:6e:ba:ce:a0:af:83:da:04:81:2e:a9:bd:40:
30:d2:84:8a:cb:d9:70:eb:71:65:62:c9:47:fd:6c:
99:10:0a:4f:eb:e7:37:cd:3e:ae:76:04:38:11:70:
75:b5:43:13:25:a4:f7:82:8a:70:3a:c2:9a:7f:1c:
97:32:9b:fe:40:96:aa:36:60:27:95:74:d8:b8:a1:
bf:54:00:1a:c4:31:14:60:4c:3f:8f:17:35:f1:df:
50:02:ec:d6:a1:b1:8a:4e:f1:e3:b7:3d:37:81:4d:
33:62:c1:c2:94:87:0b:eb:3f:57:eb:2c:a2:10:a6:
ae:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1C:26:13:BC:D4:CC:99:4D:0E:72:D0:48:01:B2:6E:9A:3A:63:74
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:93:ea:67:82:f8:14:f7:9f:00:fb:31:55:ec:92:da:36:83:
70:b0:88:b7:0e:6c:0f:7d:9a:31:b7:a2:1b:d9:f5:bd:b4:c4:
d5:5c:fe:fd:a0:22:b6:28:f0:37:44:e7:3c:3e:83:ff:e4:df:
62:79:12:4a:df:51:30:9d:93:e4:a6:17:14:6c:4a:8f:b8:aa:
6b:f1:6e:62:36:47:d2:17:ea:3b:fe:9c:3b:3a:80:8e:2d:1d:
e5:3d:f5:6b:8d:cc:f6:ff:a4:3e:d0:45:41:2c:d8:21:71:05:
b0:0b:74:03:f7:5c:68:01:eb:70:93:83:5e:68:d1:ff:e9:70:
19:b9:eb:4f:0a:33:5c:1a:7f:7d:0b:6c:54:71:5d:98:bd:fd:
3a:37:66:82:7f:ed:da:60:10:2c:71:98:79:1e:e1:c0:ce:dc:
b6:42:65:85:b2:c5:1c:dd:f5:a5:6f:52:0c:8a:28:30:65:21:
96:83:7a:5e:e5:31:ec:ea:a2:ba:a2:5e:73:81:77:68:f9:93:
14:ea:70:33:eb:43:c9:77:07:f3:94:46:19:20:21:32:1f:59:
7e:9b:6d:98:3e:41:93:76:9c:b2:9b:9c:d6:f8:32:d5:f3:2f:
3c:a3:e2:72:b1:86:51:8d:6c:ca:de:fe:8e:a1:df:05:62:d8:
f8:7d:1b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:11:37 2025 by rpki-client