Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: XaZG7t/CBT2BQyIMf5K50hbiyebipo1XBNME+6g9O8U=
Subject key identifier: 13:ED:9A:C6:BF:64:E7:F6:B1:98:6E:C5:3D:0D:72:CE:26:C8:0F:6F
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 019A4E4FB1EC8C66C9C95B6F22E06F34246A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 069F
Signing time: Tue 04 Nov 2025 10:00:37 +0000
Manifest this update: Tue 04 Nov 2025 10:00:37 +0000
Manifest next update: Wed 05 Nov 2025 10:00:37 +0000
Files and hashes: 1: 1eJwg5skWWcGDXFLNTcOwNfaXOs.roa (hash: 7FGDI31rrxDDlErzYzWSkDOB2c3i2HKAdvNrAxAMr8I=)
2: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: V3pa6iKAECp5KQHd/1RUY8a/Wk1ksFa1AUuzK/hA1Jk=)
3: Pu9BTwuj73Y1OYZEEjY0ZHH4Hw0.roa (hash: wFwRyxZLAd3FNxCgO3OSOt8i3+YrAeILPNwkW0awCVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:b1:ec:8c:66:c9:c9:5b:6f:22:e0:6f:34:24:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Nov 4 10:00:37 2025 GMT
Not After : Nov 5 10:00:37 2025 GMT
Subject: CN=13ed9ac6bf64e7f6b1986ec53d0d72ce26c80f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:e2:33:36:cf:ee:86:c8:16:92:3f:0f:10:
9c:08:1a:15:c8:3c:c5:34:df:12:d4:0c:10:dd:11:
4b:ad:20:d4:7b:97:e0:93:ec:fb:81:3f:9f:d0:05:
0d:c2:f9:5a:89:7e:9d:60:91:f2:0a:ce:77:0e:5b:
6f:6e:1f:38:b7:e8:17:97:e4:90:85:bf:d6:f0:fb:
22:17:f8:59:2c:0e:34:58:d4:5b:d6:d5:90:1f:e9:
a0:19:25:b4:5c:79:58:e2:0b:4b:21:a2:bf:9e:98:
62:de:48:aa:18:ae:9c:20:ec:8e:f7:f0:94:b7:f4:
6e:b2:7f:0b:25:a8:75:48:1b:f2:65:81:87:34:f1:
b0:85:a3:23:de:f3:9f:06:fe:8c:7b:3d:9f:3b:04:
04:c1:82:16:30:43:9c:7d:d8:4a:19:34:c6:bd:f6:
b4:50:a3:5d:4a:47:50:2e:5b:26:e1:81:e5:a8:7a:
88:eb:60:cf:6f:80:dc:c6:8e:2a:20:46:61:7a:1c:
3c:b7:b1:0e:8a:9b:f7:12:b3:8d:7a:90:17:51:87:
25:1d:75:0f:09:3d:29:df:e2:61:d0:d7:ee:ba:c8:
69:a9:27:ed:f6:8b:23:b0:e0:71:69:71:b8:4d:71:
6a:a7:49:23:a6:af:74:e1:5d:ab:b0:28:51:f6:c9:
67:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:ED:9A:C6:BF:64:E7:F6:B1:98:6E:C5:3D:0D:72:CE:26:C8:0F:6F
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:26:62:cc:ad:25:73:a3:1d:2b:20:eb:07:59:2d:84:70:d3:
b5:40:fa:5c:b0:b8:19:3f:c1:e2:47:c0:4b:00:3a:61:22:f0:
ce:da:aa:86:68:be:83:4d:d7:1a:39:5c:2d:38:9f:ee:84:71:
1a:dc:d1:9e:80:b5:07:7b:8a:e2:9d:40:41:ab:62:28:45:87:
2a:91:a9:21:66:a0:16:16:96:44:34:65:28:eb:f2:df:af:89:
76:db:c8:f9:76:e2:7f:fb:81:5b:9a:ab:20:f0:67:a6:fd:95:
95:46:66:dd:70:cf:9a:ff:c2:0d:86:6f:f9:c4:41:80:57:9b:
31:aa:a7:40:cb:bb:d0:63:66:82:19:af:76:9f:8d:a8:97:e5:
67:18:e0:3d:20:f7:dc:0b:0d:f7:e3:a7:0b:f8:8c:96:40:c2:
ce:19:7f:29:58:f9:cd:b1:a7:eb:d3:03:08:1c:07:ac:0d:1a:
32:21:6e:fa:d9:c6:93:e1:47:08:d0:b8:27:83:dc:bd:22:f3:
cd:9d:e2:3c:13:4f:73:c9:3f:f0:14:1c:e6:ec:2e:84:c1:1f:
5a:53:51:61:c8:e7:28:e2:ec:9e:e3:96:b3:87:e1:25:ab:94:
d1:fb:6a:0e:5c:18:36:d8:ab:22:78:58:57:4e:c4:5d:42:4a:
23:1e:fc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:58 2025 by rpki-client