Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
File: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft (raw, json)
Hash identifier: 1t9Mqgm/au50FG6CWkwymXK706PcljaDo6OSNJN+ock=
Subject key identifier: C6:46:58:41:77:05:4E:97:18:5B:DA:7A:19:B7:A3:3D:3B:5A:2A:AC
Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
Certificate issuer: /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Certificate serial: 019A4F2B37B13216A8B4BAA92E64819E1D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
Manifest number: 0A2B
Signing time: Tue 04 Nov 2025 14:00:23 +0000
Manifest this update: Tue 04 Nov 2025 14:00:23 +0000
Manifest next update: Wed 05 Nov 2025 14:00:23 +0000
Files and hashes: 1: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl (hash: i7sFAfsjGc3FPHnM8vQfrydHuEwuTd3gTUAioFMDBnQ=)
2: vrZbrmq-YLZHy_jTQFADJGPxi-I.roa (hash: SoRxaIEIcm9lF/KB/PtX621zexUgH5AtUpObYQIQZW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:37:b1:32:16:a8:b4:ba:a9:2e:64:81:9e:1d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Validity
Not Before: Nov 4 14:00:23 2025 GMT
Not After : Nov 5 14:00:23 2025 GMT
Subject: CN=c646584177054e97185bda7a19b7a33d3b5a2aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:3b:3e:a6:02:46:8a:f4:78:f2:a3:d3:79:
d2:60:38:fd:6e:ee:c9:e4:6a:88:06:ea:f0:80:f5:
d6:aa:d1:b7:3b:14:22:a8:be:02:8e:15:6e:14:72:
f9:68:21:e6:77:df:b5:f0:c0:f5:c5:8b:e1:c6:f3:
46:fe:c8:bd:a4:e5:a1:72:0f:a4:97:d8:99:d4:39:
a5:67:e6:cf:73:31:27:5c:47:2b:82:04:93:8f:29:
cf:63:0e:f9:ae:2b:41:5e:1f:50:51:08:75:80:d2:
81:0a:34:62:a0:91:a1:b1:1a:f2:d2:7a:14:0d:eb:
6d:63:a2:00:57:e2:d5:7a:3b:f3:bb:ef:13:61:04:
be:4f:bb:25:a5:59:70:d5:50:47:a5:c5:9b:52:d1:
1e:76:d2:76:1c:b2:c9:3e:ba:da:6f:49:fc:4b:43:
ea:65:6a:cf:67:11:44:b0:aa:0d:7a:0f:9e:f8:f2:
50:e4:3e:a2:f2:ee:70:1b:8e:09:74:8d:dd:32:cd:
5e:dd:cb:db:f4:af:3f:4a:ee:e1:02:43:5a:90:5b:
3f:ea:ee:41:d0:fe:d4:a4:6b:e5:a1:57:f0:24:fd:
63:df:2c:0d:f2:a4:7b:6d:19:11:97:51:29:7c:a3:
33:3a:fb:f4:bf:31:b3:d5:8a:77:75:fa:d4:43:1e:
65:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:46:58:41:77:05:4E:97:18:5B:DA:7A:19:B7:A3:3D:3B:5A:2A:AC
X509v3 Authority Key Identifier:
keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e4:93:91:a6:82:58:53:f1:b3:0f:e3:5d:d9:9d:ce:4e:99:
81:a0:9f:24:0d:68:be:a0:64:a9:3c:d1:18:c3:47:f1:94:1e:
47:0c:fe:41:e7:40:f5:9a:8f:88:ca:c4:e2:3c:c3:bd:4e:9e:
59:d7:51:d2:1f:f7:bd:ef:1b:a4:62:0b:8b:1e:1b:1d:08:43:
7a:91:a2:d2:71:f5:68:8c:b1:3a:46:3f:d0:68:9f:93:ec:5a:
63:65:78:f9:8d:75:ff:77:19:98:1b:65:50:8f:c6:63:e5:4c:
d7:01:ea:ab:b1:c6:a6:82:44:98:aa:47:d4:86:90:1a:db:8f:
0c:95:1d:10:c3:ae:5e:d7:3f:1f:20:09:d1:8d:a9:2a:f2:0b:
59:b4:b7:d5:de:9a:b4:69:80:ae:c1:9f:99:94:ce:6d:ae:4b:
86:d6:10:80:ad:61:1f:28:74:3e:d1:59:73:1f:dc:cf:c8:8a:
43:1b:b6:ab:65:30:31:a9:ef:61:1b:c1:4c:36:6b:77:7f:b9:
57:d1:81:33:d5:f6:96:b3:7d:c6:0f:12:a5:f7:ae:fd:02:ec:
b5:d6:31:34:a3:01:89:e8:ae:91:92:11:fd:42:6f:63:8f:a2:
e8:cb:07:d3:93:7a:ff:8e:8d:05:4a:65:8f:4a:7b:67:7c:3a:
18:62:59:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:51 2025 by rpki-client