Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
File: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft (raw, json)
Hash identifier: 3M1pBUT8UC+lNw+Bhf/PR93eM5YHkUEFr7OZ6ryJrmM=
Subject key identifier: A1:58:FD:E7:9F:60:E9:2A:85:76:F9:F3:32:EB:A6:D9:CF:8C:E2:BD
Authority key identifier: DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
Certificate issuer: /CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Certificate serial: 019A4F6248DF99FB5E9D6E2077E10EF07A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
Manifest number: 0F8E
Signing time: Tue 04 Nov 2025 15:00:32 +0000
Manifest this update: Tue 04 Nov 2025 15:00:32 +0000
Manifest next update: Wed 05 Nov 2025 15:00:32 +0000
Files and hashes: 1: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl (hash: bDnLrZnefxtLTwy5hkDJn946QItBEiuLg2rUdic4pwc=)
2: Kw550ydpOki0PWOYy-6z5BR-VIE.roa (hash: DJKKlAPQ1FQMVESwtaTdBMt71sNwkspOh/dlMgsjkTY=)
3: fcEpjbgKYOO71SWou3_dCE-kLKk.roa (hash: zROet63WRPPKV6TiwIGdua33aTn4W6zOjjUbs9hhWRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:48:df:99:fb:5e:9d:6e:20:77:e1:0e:f0:7a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Validity
Not Before: Nov 4 15:00:32 2025 GMT
Not After : Nov 5 15:00:32 2025 GMT
Subject: CN=a158fde79f60e92a8576f9f332eba6d9cf8ce2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:0b:71:de:18:9e:00:9d:85:9e:c6:9a:f4:
21:d4:f8:5f:9c:c8:f0:ce:03:a2:5d:26:be:b4:76:
0c:ff:12:d9:e5:cc:1e:af:0a:b6:5e:9f:de:f6:70:
92:7e:d6:bb:dc:4b:54:f5:71:66:d9:87:84:cd:e6:
77:70:a9:81:48:83:13:d1:b5:8c:ca:b6:14:69:b6:
cc:e8:72:4e:2c:43:da:b2:03:2a:44:22:c9:fd:a7:
be:7c:e2:fe:da:e6:75:a6:1b:54:cb:ec:bc:e9:2d:
5b:fa:81:93:00:3f:c6:1d:b7:1f:fc:25:59:52:e8:
e4:16:32:7a:8d:22:dd:d9:86:19:49:f1:90:b8:cf:
95:4f:36:2b:40:0b:b1:20:60:98:5c:9a:2c:10:06:
9a:f0:d7:03:51:52:70:9e:da:6a:16:f9:eb:9c:f4:
82:aa:7a:6c:48:63:7a:c9:be:12:cc:07:84:48:63:
26:97:2b:e0:6d:2b:28:89:37:fe:00:ea:c8:b0:d7:
6b:2f:71:79:c5:0e:c8:78:92:d6:8d:fc:fb:ac:01:
66:05:2a:bf:60:43:55:c1:34:bb:3b:37:23:81:c4:
5c:f2:27:e9:21:95:54:0f:d3:f8:69:5c:5b:5c:69:
f2:dd:f0:b9:00:99:fc:a9:8e:c5:d4:f8:d8:59:a5:
04:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:58:FD:E7:9F:60:E9:2A:85:76:F9:F3:32:EB:A6:D9:CF:8C:E2:BD
X509v3 Authority Key Identifier:
keyid:DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:55:74:95:06:27:88:3a:0b:9b:f7:be:99:f3:60:62:e7:24:
65:0a:9e:2d:10:2f:4a:7a:a4:38:90:c5:d3:ff:97:82:94:30:
a2:2c:31:34:2e:b8:29:7d:fa:e2:4c:e3:67:3b:87:fe:1a:58:
f6:e5:6d:89:3d:b8:60:c2:86:30:a9:0c:88:e8:1f:99:04:16:
f8:ea:a3:7f:04:94:1c:87:ca:a7:1d:8e:d7:7b:ef:62:fb:fb:
6a:1c:69:cf:40:d9:87:17:c1:ec:64:5f:dc:98:7b:49:f4:74:
48:2a:f2:0a:0d:02:5a:7e:8b:b0:41:43:6f:35:95:78:9f:4d:
64:e9:8f:0b:ba:0b:a6:31:f8:79:d3:c5:0c:bb:29:6b:1a:f4:
73:92:5d:ff:05:06:5d:f8:f0:de:11:fa:d8:5c:db:c7:99:b2:
e9:55:3f:ee:4d:9d:eb:25:bf:9a:58:b3:3d:a5:8d:1c:22:de:
32:5b:41:e4:99:68:31:7d:94:e7:a8:15:a0:a1:a2:78:19:5e:
bc:94:6c:a7:5a:f9:e3:e7:5b:70:0b:80:48:d6:48:3b:e6:91:
c7:19:39:35:ee:f1:6d:20:2f:74:69:96:d6:76:ca:e5:c8:76:
54:5f:18:ec:ea:79:82:b3:36:9f:87:e5:25:4e:ca:c4:41:e4:
55:b4:05:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:37:55 2025 by rpki-client