Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: Md8fp8GKzHW/kVVPEzgq1O0b56AGyJJJdnCQQVtZ2xw=
Subject key identifier: DF:E5:EC:AF:58:33:70:83:EE:07:E9:71:CF:D8:39:0E:F6:6F:70:79
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 019A4D73CAFA5C85635A99DED7AF527B41E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 10C0
Signing time: Tue 04 Nov 2025 06:00:25 +0000
Manifest this update: Tue 04 Nov 2025 06:00:25 +0000
Manifest next update: Wed 05 Nov 2025 06:00:25 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: zE7Jy4FU7fDbwAsYNFN14RwMUKIVqEEQdPvZiKEwdXE=)
2: c9o5omZ6L0iy-4hOihQzK8OPns4.roa (hash: 1kJZAp6d0yNMzeCujPn+gVtlVbLTFpBiKQFw2wsKEIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ca:fa:5c:85:63:5a:99:de:d7:af:52:7b:41:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Nov 4 06:00:25 2025 GMT
Not After : Nov 5 06:00:25 2025 GMT
Subject: CN=dfe5ecaf58337083ee07e971cfd8390ef66f7079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:52:44:97:a7:9c:96:90:b9:1c:57:2a:86:
7f:d5:20:da:9a:91:4b:97:e0:34:a9:38:f6:d2:11:
ba:b3:f8:54:22:72:2e:5f:ea:bc:b2:d8:7f:07:0e:
c8:f3:ba:f9:ff:e3:fe:35:03:ba:38:7b:ee:bd:49:
2f:92:a6:72:f5:62:02:2f:da:b8:f3:09:e5:e9:d8:
d5:d5:b0:c0:30:a4:14:6e:56:dd:ba:3b:f3:8e:d1:
4c:a3:16:46:cb:12:51:8a:69:e7:28:e9:5a:c1:0e:
20:69:7d:1d:5c:a4:dd:19:a3:f5:e6:10:8a:3f:d9:
71:15:99:56:33:ee:31:df:51:78:6e:a1:2d:f4:3a:
56:f3:14:fb:02:40:5f:23:09:2f:dd:e5:15:58:77:
6e:f9:c7:25:18:02:f0:da:91:e1:7b:db:5c:99:d1:
52:9d:46:83:ee:37:21:12:eb:29:32:b9:5f:32:eb:
71:24:b3:18:05:8c:5c:9a:34:91:d3:5b:62:72:18:
8d:41:50:65:4e:33:d6:a1:32:cf:75:36:f0:d2:f0:
6d:b2:0a:38:b6:44:82:45:70:85:4d:0e:b0:f5:54:
7b:52:59:6a:be:6e:7a:ee:e7:b2:7e:85:83:03:5b:
7e:fd:34:2a:5a:35:3f:cb:43:c2:93:67:b4:11:e7:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E5:EC:AF:58:33:70:83:EE:07:E9:71:CF:D8:39:0E:F6:6F:70:79
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:22:4b:67:4f:7d:7f:82:fa:93:74:5d:e9:57:aa:c7:c3:a9:
08:64:c2:51:44:19:62:bb:f9:30:25:05:cc:5c:ad:59:3f:c0:
10:e8:6e:88:50:47:4e:a3:4d:c4:a5:75:59:c3:de:58:75:37:
86:b1:49:d8:64:09:d4:11:00:09:d0:85:52:6f:5e:e1:b6:97:
aa:1c:c4:64:37:5d:39:c4:18:ab:5e:01:e5:42:a8:64:42:7d:
da:dd:9b:d8:5f:dc:03:c5:4a:da:66:4d:c2:76:cc:86:53:8f:
b2:d2:f4:9b:62:c0:03:be:82:07:eb:03:1d:a3:ae:8a:78:70:
ae:f4:46:22:df:e3:16:36:81:20:4b:0e:bd:07:34:f9:7f:a5:
0f:6c:38:f0:a7:de:8a:21:2e:29:b8:33:ba:e0:7a:73:ce:73:
b5:6f:9e:42:77:00:67:f6:b7:9d:e4:3d:dc:3a:e5:fc:2f:51:
de:33:15:38:1c:8d:2d:7c:24:8b:6f:ca:20:d8:b7:89:26:05:
17:18:c8:8e:f2:b1:e8:f2:8a:be:5f:65:87:b5:07:95:6b:69:
83:e5:a0:f3:e2:ea:f7:74:85:78:be:f5:08:ab:ba:8b:bd:78:
b0:de:4a:51:17:98:b1:ab:0d:3f:e6:7b:f1:0d:27:ea:cc:5a:
40:74:76:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:53 2025 by rpki-client