Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
File: 3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json)
Hash identifier: Vc/cJvRVEnxrgcQjJ6SpY4EU3P49uvha3d9o6Hl6kUw=
Subject key identifier: 4C:83:84:DC:E7:D9:09:27:64:6C:5F:37:76:42:E2:7B:09:7A:74:39
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 019A4F2B23769D84D2A162B8457D041AD1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
Manifest number: 16E9
Signing time: Tue 04 Nov 2025 14:00:18 +0000
Manifest this update: Tue 04 Nov 2025 14:00:18 +0000
Manifest next update: Wed 05 Nov 2025 14:00:18 +0000
Files and hashes: 1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: 8BnXYvWVeg8diYyitwgOZ6ZGzo6MJr3bq9+cA7mkhME=)
2: EsL5vRvD6Hsz2Ac1BO5dG0iZtiE.roa (hash: 6YJicTgp9qVMpWAlIAbPHHma7brtZhgeBhN6tMg/gfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:23:76:9d:84:d2:a1:62:b8:45:7d:04:1a:d1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Nov 4 14:00:18 2025 GMT
Not After : Nov 5 14:00:18 2025 GMT
Subject: CN=4c8384dce7d90927646c5f377642e27b097a7439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:5d:22:4f:f0:c6:13:cb:76:dc:10:65:01:
41:80:a5:fb:7f:3a:9d:e4:54:0f:67:47:3e:94:a5:
48:3a:27:20:08:87:e0:17:ae:c4:69:fb:04:db:c7:
44:4c:bf:39:b6:b3:37:39:6d:63:f5:cd:a1:fb:36:
48:78:0b:93:75:ca:b4:6a:bb:e8:2d:0c:db:e7:20:
87:da:3d:89:cd:11:93:0f:13:db:c2:dd:40:3b:78:
9d:ea:d3:8a:34:3d:7c:e7:d9:72:60:c2:06:81:9c:
52:d7:29:3c:ca:4e:f9:1c:36:96:8a:ae:13:bb:7c:
8d:d6:09:da:b0:84:fe:9c:54:78:82:7e:74:2a:1a:
5e:80:e9:83:2c:d3:73:fc:9e:e6:23:54:36:fc:a5:
ef:66:45:ec:c5:9a:1c:58:da:8b:6f:0c:69:65:92:
a8:32:5e:d9:dd:62:2d:35:3b:98:bc:63:59:26:8d:
0d:66:5a:33:b2:8b:a9:5b:5d:b7:c4:b5:1d:e6:bf:
82:9e:c2:e1:40:06:6b:b3:bd:8e:e0:38:e2:ad:cc:
be:dd:68:b4:b0:e5:a5:4f:15:38:ec:78:96:29:2b:
ba:4f:c6:fb:33:29:fa:06:63:3a:7d:db:67:d2:18:
f2:d8:b6:8e:13:10:73:7f:a6:3b:78:89:79:8a:82:
17:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:83:84:DC:E7:D9:09:27:64:6C:5F:37:76:42:E2:7B:09:7A:74:39
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0f:20:35:27:48:7d:bd:28:d6:22:ea:9b:20:e0:1b:1c:73:
fa:90:1f:e0:fa:cf:e1:3c:ac:f4:c5:20:7b:ce:76:e5:49:5b:
fb:11:a2:ef:58:2d:2f:83:fa:5e:73:e6:be:81:ea:ce:b8:09:
bc:52:49:fe:c6:cb:12:75:fd:81:bd:86:f1:d7:88:fb:61:5d:
4f:98:c8:2f:ad:12:2d:6c:ee:87:df:be:52:ab:d9:23:96:2a:
43:76:f2:48:1a:76:e8:45:31:de:78:fa:31:9a:a2:76:d8:59:
c9:79:41:f4:a3:da:b2:bf:bd:78:d5:41:59:33:f6:53:3e:68:
65:69:b5:48:f1:19:9e:66:23:68:41:7f:ae:ce:98:56:16:12:
04:45:12:7b:ee:a9:ba:a8:c9:fa:de:eb:dc:ec:a3:2d:6b:7d:
dc:79:7b:72:63:9e:86:74:5f:45:05:5d:2b:70:50:23:06:29:
04:ee:a3:b8:82:66:2a:b8:38:28:58:65:2f:67:39:d0:9b:6d:
ce:5c:f3:46:25:52:eb:27:4e:33:92:72:c9:62:a5:f9:30:30:
d5:10:02:38:f7:0e:b4:02:df:80:80:35:1e:8e:f4:67:f5:e3:
db:a0:40:a9:62:9d:c8:70:67:ed:73:94:4d:1e:87:c5:48:ab:
73:e0:b8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:14 2025 by rpki-client