Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
File: 3HbS9D7BffyAXNsF8AChV5ie1Eg.mft (raw, json)
Hash identifier: KpZiD5VRxzm2HFM8yhjXUn8/IqnzSzEAZ+jtcy+zjmw=
Subject key identifier: 71:D7:37:AF:22:2F:5F:C6:55:D7:D4:DC:E5:6F:64:28:D0:1B:4D:24
Authority key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
Certificate issuer: /CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Certificate serial: 019A4E864A36AFAC02946DBBA6428E8CAB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
Manifest number: 16A1
Signing time: Tue 04 Nov 2025 11:00:14 +0000
Manifest this update: Tue 04 Nov 2025 11:00:14 +0000
Manifest next update: Wed 05 Nov 2025 11:00:14 +0000
Files and hashes: 1: 3HbS9D7BffyAXNsF8AChV5ie1Eg.crl (hash: UuLpSvbYX3ZDHs4p+TdSWl4yScr9jyZUXgWtmFDSeR0=)
2: vMasAu2YCDgiGttPAAgT_LUqims.roa (hash: vZV6QUfnrQuKBHkkqaJTtSdtOrcdYKhNNa/gcjcEoTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:4a:36:af:ac:02:94:6d:bb:a6:42:8e:8c:ab:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Validity
Not Before: Nov 4 11:00:14 2025 GMT
Not After : Nov 5 11:00:14 2025 GMT
Subject: CN=71d737af222f5fc655d7d4dce56f6428d01b4d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:94:ad:3d:e2:c6:8a:b5:85:16:17:8c:1c:
d1:9b:42:71:94:eb:15:3c:c3:44:fd:a1:aa:c8:1c:
35:70:56:ed:1a:ac:92:13:40:cd:49:54:4f:db:4d:
80:87:f1:f6:0d:65:8f:54:36:b6:ee:70:99:ec:04:
f7:31:8e:7c:f4:39:f9:f2:f7:ff:a8:fa:95:51:5d:
03:de:5e:97:90:fc:5f:5b:ec:21:15:61:7a:ce:6f:
cd:37:e1:28:b0:39:0f:da:03:44:ee:b8:00:24:78:
a7:c5:f8:2d:16:43:c9:8f:4b:57:ad:59:f5:c7:bb:
a7:22:51:d8:3a:ac:d9:f5:25:5c:71:a9:65:02:2b:
24:b1:2e:2b:e4:81:c4:15:7f:56:40:bb:4d:e6:be:
9b:0d:bb:62:69:a3:bc:6b:35:10:30:a6:89:23:ad:
23:99:9b:7b:3e:b6:a8:4f:5e:5e:f3:4d:04:29:eb:
52:ed:9f:1f:56:ea:a3:b1:12:76:9c:f0:3d:64:74:
4e:57:f8:fe:d6:a6:b9:61:7b:19:53:a0:68:ca:a5:
eb:e4:4a:cd:42:14:9e:d1:a9:ac:f8:6d:b7:0b:53:
73:50:68:dc:2a:11:7f:48:d6:bc:0d:a6:cc:1c:f9:
77:45:85:c7:56:d9:8e:3c:53:38:96:0d:0d:40:e9:
12:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D7:37:AF:22:2F:5F:C6:55:D7:D4:DC:E5:6F:64:28:D0:1B:4D:24
X509v3 Authority Key Identifier:
keyid:DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4b:69:1d:d2:33:2a:42:bf:e0:bd:fc:d9:30:18:11:6b:82:
19:cf:29:ed:60:1e:2b:36:c7:dd:a6:83:bb:a2:ea:05:53:31:
c8:98:eb:4d:ef:b6:12:5f:c3:12:19:b9:dd:0b:dd:5c:f0:f1:
ba:2b:af:a8:2e:ea:54:99:a3:32:74:a6:22:bf:75:49:e5:f7:
c3:ae:d9:91:1b:f7:fb:30:6b:81:4d:4b:62:f4:bd:34:6f:75:
87:f7:1e:48:63:fc:e7:46:99:4d:54:be:83:2d:42:55:d2:0c:
14:15:78:5f:b6:3e:a2:2f:8a:ef:1b:f5:49:0d:14:5f:23:6c:
dd:77:92:2c:10:31:79:47:1b:51:96:f6:dd:40:9f:78:2d:81:
0f:d4:20:fb:6a:fc:d7:9e:08:14:34:60:a6:86:85:ae:5a:57:
1e:22:c4:a4:25:0c:44:38:a2:fc:c1:ca:b1:42:9e:de:ed:1e:
b1:75:f2:1e:e8:84:87:a5:79:2d:5a:f0:7e:b6:d9:4b:9e:f3:
fd:ac:e5:5d:47:1f:c6:d3:2d:e1:9e:bc:b1:8f:d8:cb:08:eb:
90:9b:5e:fb:57:6b:e4:16:8f:75:73:18:eb:10:53:39:58:70:
ee:66:48:39:2b:a1:43:7f:72:06:f0:aa:d7:49:b5:f6:6e:e0:
03:b1:92:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:38 2025 by rpki-client