Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
File: 3iuimqARP6_TcNhl-0REmHtHMIo.mft (raw, json)
Hash identifier: +J0C1Udle+vBzB+aEv0P/kiOgrKqGaCUvt0djbgSj7Q=
Subject key identifier: A2:59:FA:9D:E1:99:A4:09:88:13:26:11:34:30:30:2A:30:CC:A1:B7
Authority key identifier: DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
Certificate issuer: /CN=de2ba29aa0113fafd370d865fb4444987b47308a
Certificate serial: 019A5006F0E02D09EA4E8415E232D237E291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
Manifest number: 0B79
Signing time: Tue 04 Nov 2025 18:00:23 +0000
Manifest this update: Tue 04 Nov 2025 18:00:23 +0000
Manifest next update: Wed 05 Nov 2025 18:00:23 +0000
Files and hashes: 1: 3iuimqARP6_TcNhl-0REmHtHMIo.crl (hash: LKWJfXSx4gqj0QXNJCYSg7OyqSmh6g3+tG9S4l5igsE=)
2: PMD1GlDLGk7gMbwF-9_w1YlsV4M.roa (hash: yxn0bsBf+yoGp2ebzQpXlOvhqAaQoPdbhmTGHyH8IaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:f0:e0:2d:09:ea:4e:84:15:e2:32:d2:37:e2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2ba29aa0113fafd370d865fb4444987b47308a
Validity
Not Before: Nov 4 18:00:23 2025 GMT
Not After : Nov 5 18:00:23 2025 GMT
Subject: CN=a259fa9de199a409881326113430302a30cca1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:d6:80:a4:25:86:2c:b5:64:ea:86:b0:c2:
c8:ad:5c:fb:26:6c:50:38:67:ed:55:26:1b:d6:bb:
5c:91:55:d8:24:a6:55:52:75:2e:26:97:4d:9d:a1:
46:e4:e1:78:5a:68:66:8e:97:01:6f:bc:94:08:ab:
d0:ad:72:d2:ee:d7:89:f5:ec:86:08:b5:9f:a8:fe:
27:97:bf:54:ea:01:7f:81:db:71:39:e0:83:a8:a0:
70:d6:5f:16:30:0e:50:e6:d0:87:41:a2:6f:99:5e:
ee:7b:ce:83:a7:6c:34:b2:a0:90:65:9d:ff:13:3c:
58:2f:bc:3f:34:e5:9b:c2:2d:24:cb:04:a1:32:63:
ea:ec:33:f9:9a:ae:40:3b:02:80:14:31:f4:ee:7c:
38:a3:8d:e9:7c:61:d5:19:39:38:7e:62:70:6e:12:
81:70:61:cb:df:ea:88:91:59:54:45:33:66:db:0c:
82:c0:24:32:87:d1:df:3b:a3:52:e0:b5:37:05:40:
c1:40:39:a8:20:18:12:76:3e:b8:1a:dc:75:ed:31:
ee:fd:b2:8b:9d:0c:e3:73:93:cd:76:1c:5f:d9:a6:
68:6a:72:e2:bc:a1:cd:23:d8:c2:4c:69:42:02:3b:
a6:0d:5b:66:af:0a:b0:aa:82:19:9f:99:d7:d8:ab:
4b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:59:FA:9D:E1:99:A4:09:88:13:26:11:34:30:30:2A:30:CC:A1:B7
X509v3 Authority Key Identifier:
keyid:DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:68:ff:73:01:d1:f2:d8:ca:3a:55:0d:c5:63:7e:af:51:60:
fe:d0:13:5d:5e:b6:f5:e9:4f:fc:96:0f:c1:17:98:1b:05:2c:
1e:d8:ff:0d:90:3f:9e:3a:34:78:e9:ab:d3:30:e1:5c:1b:9b:
43:da:e5:46:bf:30:c9:f0:5a:2a:51:66:f4:f3:72:09:b1:aa:
20:62:3b:e2:ae:eb:54:40:0d:9a:96:74:7d:b7:e9:d5:bc:6f:
5d:d8:f4:88:a9:36:b3:ab:81:07:31:20:a3:3b:0d:2c:ef:68:
c9:7b:4f:bf:5b:85:7b:80:3c:94:a4:54:0a:aa:ba:7a:d2:5a:
9f:bf:f6:06:bc:8f:0d:67:d9:26:64:f4:09:bf:7f:d6:80:31:
12:b5:61:f6:b4:50:1d:a5:6a:2d:3b:9b:43:1a:8d:58:fc:09:
64:20:5a:1e:91:0a:4d:0e:e9:50:69:3f:27:22:94:89:fe:e1:
88:45:bb:91:a8:2d:c8:95:01:d8:f7:0f:c6:29:9d:b8:f4:4a:
e5:c8:89:ff:61:39:b5:0c:23:cb:ae:96:65:c3:1e:dc:a6:f3:
e8:8a:af:b4:76:6b:b4:27:bd:e8:8a:bd:31:09:01:bb:3a:14:
df:ca:de:0d:a6:38:01:5b:82:65:48:25:f2:c9:c2:66:25:50:
64:e6:0b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:26:07 2025 by rpki-client