Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
File: 3Hgh4by_bgdOpIFKqlxj47qBPF8.mft (raw, json)
Hash identifier: NLzThslq7VzhK51nsUn8DxfTv7tsE/yBGgWfHU+NpPM=
Subject key identifier: 20:FD:F7:8B:04:34:9A:90:D5:E9:02:56:64:D2:D5:61:88:3B:E8:16
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial: 019A5299DA66A44A04D625F3683AFDA5672C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
Manifest number: 171F
Signing time: Wed 05 Nov 2025 06:00:05 +0000
Manifest this update: Wed 05 Nov 2025 06:00:05 +0000
Manifest next update: Thu 06 Nov 2025 06:00:05 +0000
Files and hashes: 1: 3Hgh4by_bgdOpIFKqlxj47qBPF8.crl (hash: 7nZ5Bi5VhdBHzJuAPCsRVWY8rIqWIwQZ2TlawkQ96Xo=)
2: 4MXMdJWAndzkkiHFnmOxrlOkHIs.roa (hash: OiJ7+6r4bWAFN5vOHYBjk8U2TGkBpOBvwNxXY+Qb+To=)
3: FnxhJQ5jd2jBoCiaTZ0_b7pYcn4.roa (hash: YbjDITXwnNkMY1d8iM5sg8TPIw1q/oeZDc75wOKQiOE=)
4: L76bfs9TWWZl8Bl96EFZVlzxzoE.roa (hash: +NZoC7IOVINwP2lksSDULnc4emaNPZnnMnAXhFL6IOo=)
5: Rbk5PVjqlkpGo1SxsQ_tSeJLPbo.roa (hash: BRLtcU6d3bxk4bV/7KHF4XZmiUFqH8jja8emVx8VywY=)
6: biONUDB1iLS86N-lmaqB6_yoBtQ.roa (hash: 5maaRfHknlsWIxQOJIJbyzAegwgxyX3Q4OIbKY62ook=)
7: e8yyBy_WYk0MmiOF_-c6ZOE78e0.roa (hash: XCwVuTCuJ/Y/WAoLWIkeepq2X2E/4/mFMfojm79U0cM=)
8: uRWNqrl7lEtL4BdXY6zm3up7W9g.roa (hash: 5dZDwl/VQCf/bzBpVyR3+W+VZSdwG299LMVlDR4jvrU=)
9: w6y6tA7YYKjCRBu0w7S_pejO5kU.roa (hash: m4339RdE053FyeU5wm1JX9FNzAT+cE85Onp7E9j3YoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:99:da:66:a4:4a:04:d6:25:f3:68:3a:fd:a5:67:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Validity
Not Before: Nov 5 06:00:05 2025 GMT
Not After : Nov 6 06:00:05 2025 GMT
Subject: CN=20fdf78b04349a90d5e9025664d2d561883be816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:40:1e:3c:cc:c0:87:f6:0b:e9:91:ae:af:22:
9c:1b:5b:11:ba:2b:8b:6c:da:5f:1a:c3:75:ce:ea:
5b:74:74:2b:e0:36:09:86:9d:53:40:5a:8e:d9:52:
1b:92:0b:52:d2:64:41:42:3f:c9:c9:f2:12:bd:42:
e1:4c:22:0b:53:e8:8b:50:1c:1a:cf:19:00:89:86:
bf:c6:30:23:4c:66:94:78:eb:a2:aa:29:ba:a3:ec:
fa:0c:3c:f3:6f:4e:0a:bb:fc:d0:db:1f:f3:5e:85:
5e:86:48:15:a3:d2:04:4a:e5:82:8d:05:5a:98:9a:
19:ba:c6:c5:2d:73:ea:fd:cd:6d:d7:f2:3d:4b:ff:
6e:82:27:67:e4:0b:a8:af:9c:3c:32:3d:cc:d4:d7:
ed:04:a8:68:10:45:c9:79:13:28:63:12:9f:84:1c:
05:18:28:54:42:2d:2e:41:8a:01:21:e6:4b:fe:62:
d3:33:e0:1f:ad:e2:20:57:8e:3d:3e:83:f9:4b:54:
38:ba:6f:b9:dc:c9:98:8a:9b:1c:21:cf:fc:81:e9:
6e:7b:2f:21:a3:40:8c:8b:9c:8c:e2:74:a7:4a:51:
0b:8f:7a:cc:ca:bb:ff:3d:8f:79:2e:ad:54:d4:2f:
68:96:0f:0d:8f:1d:09:d3:55:2b:1d:a9:2a:41:c0:
6e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FD:F7:8B:04:34:9A:90:D5:E9:02:56:64:D2:D5:61:88:3B:E8:16
X509v3 Authority Key Identifier:
keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:dc:a6:44:ef:31:89:be:87:4e:f5:55:06:38:a1:86:1d:72:
93:1d:df:34:5c:cc:8c:79:8f:5a:0e:0d:83:2e:c1:b7:11:46:
5d:fd:a1:fe:b1:64:cb:ea:39:97:f0:cb:a7:9e:86:b6:a1:d8:
92:49:98:85:96:34:f0:72:ab:79:1e:73:5b:2b:6e:4a:3c:1b:
12:10:41:4f:09:00:76:9a:92:41:f3:2a:66:61:8a:82:c1:ba:
77:4b:9d:eb:3f:03:c6:ac:f1:8b:7c:dd:11:51:65:51:d9:71:
2f:cd:e7:8f:17:9c:6a:87:b4:d6:c4:1f:3f:29:35:32:02:d8:
ea:c6:03:b1:8f:38:0e:15:03:4e:18:3b:34:0e:c5:09:fc:e2:
06:08:08:2d:e7:ca:59:1e:9f:24:b9:e5:00:db:cd:d0:e8:d8:
02:06:ea:55:71:7d:76:93:ef:d0:d7:91:21:91:8d:1d:5e:28:
1f:38:2c:03:36:95:df:b5:da:11:01:ef:cb:ee:80:c4:12:a1:
ee:97:d7:bd:26:4a:89:e9:56:1c:9b:d2:79:46:0d:96:bf:8c:
bc:5a:d3:56:97:2a:ec:7a:46:c4:59:84:50:c6:1e:a8:8d:05:
4a:bc:05:21:59:d5:40:9d:30:f4:9e:29:69:96:77:30:1d:12:
34:27:b8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:52:41 2025 by rpki-client