Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File: 3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier: CnLtN4/7klKBaQSPBInR/AtWnbV1J8Zd3sGDC2UfuWQ=
Subject key identifier: 9B:65:DF:F3:D1:8D:F9:95:D8:80:EE:FC:AE:D2:2C:51:02:E3:20:64
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer: /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial: 019A533EDE46E13B5CE214EFDF2FEA4752D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 09:00:20 +0000
Manifest this update: Wed 05 Nov 2025 09:00:20 +0000
Manifest next update: Thu 06 Nov 2025 09:00:20 +0000
Files and hashes: 1: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: ZWwTWH9x68bdaZPcLd3CN6FyqNF00U3u7EvE3R5Aruo=)
2: JiXA3NEuZkH0QXN05zeuUA5jMwY.roa (hash: YFDd4vweHXAu3AFKCBPOWScIToP/BlFEZooHjiGGKLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:de:46:e1:3b:5c:e2:14:ef:df:2f:ea:47:52:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Validity
Not Before: Nov 5 09:00:20 2025 GMT
Not After : Nov 6 09:00:20 2025 GMT
Subject: CN=9b65dff3d18df995d880eefcaed22c5102e32064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:91:44:3d:73:af:2c:81:1a:50:03:3e:ec:
6c:d2:17:31:d9:9f:fa:0b:62:80:1d:d8:8e:2f:66:
c1:ff:e3:be:ad:78:a1:1d:00:b5:d9:d3:f3:28:2f:
f9:87:ed:f7:f5:23:9b:bc:e1:07:6a:c7:6a:c0:fd:
c1:9c:10:1c:a8:fb:34:ae:b0:b9:86:6e:24:8a:20:
e2:65:72:bd:b4:c6:35:2d:cf:84:5c:cc:26:62:12:
29:c7:13:1e:72:14:ce:db:35:73:1a:35:20:0d:d9:
cb:82:39:88:65:a1:fc:d7:31:4b:6a:be:e6:1c:d0:
41:8a:4c:fe:59:73:bf:3e:b0:56:d2:1e:99:66:8b:
4d:7c:2d:9e:cc:63:49:a7:01:aa:96:8f:40:39:cb:
c1:e0:ff:cc:e5:91:5b:30:96:61:72:03:be:48:fb:
ce:11:b7:7f:59:72:08:c9:8e:4b:2b:8e:8c:63:11:
e1:71:7b:a5:63:08:58:e6:cb:e3:10:a7:04:9c:0c:
08:60:53:cf:4f:bc:da:b3:4c:8e:ba:84:ee:fd:09:
e8:a9:29:73:ac:8a:fe:3b:fd:02:70:a9:00:61:e8:
3d:3e:bb:fc:19:39:e1:23:b4:c0:cf:5b:6d:49:bb:
1a:c3:ee:09:b3:7e:63:7c:c3:89:1a:81:51:62:a4:
4b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:65:DF:F3:D1:8D:F9:95:D8:80:EE:FC:AE:D2:2C:51:02:E3:20:64
X509v3 Authority Key Identifier:
keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fa:57:4d:13:29:f4:89:ca:30:c5:76:5b:20:6e:cf:8a:43:
bb:1c:9e:e3:09:4b:ae:fd:78:45:28:dd:bd:04:14:1e:36:94:
c0:58:b4:57:c7:5b:70:39:71:96:46:0a:f9:fe:17:1f:02:3e:
b0:45:78:c7:1c:6f:c2:74:f7:a6:16:ea:5b:b1:e7:8b:2e:30:
16:59:04:dc:fd:74:1e:11:0d:89:f9:48:9b:a7:d3:17:1b:3a:
ed:7e:b4:c2:65:7f:dd:d9:3c:0d:df:2a:ca:15:89:93:b6:af:
b2:41:27:74:ee:49:ab:73:30:fe:51:22:3e:a2:2d:50:23:85:
0e:85:a8:57:8e:74:a1:4b:dc:ba:11:e6:ca:08:bf:de:9a:ae:
94:f8:20:04:6f:4e:49:0c:77:2d:01:6d:c7:92:b0:60:4b:37:
fa:9f:45:a0:28:a5:6d:04:27:cc:21:e3:57:d7:c2:86:fa:b1:
45:fa:d3:53:2a:fe:f6:e9:e2:bb:8c:c9:e2:4b:31:eb:8a:fe:
a0:fe:68:10:29:8d:e6:3a:9f:d6:69:90:a7:a3:bc:a2:1f:4f:
cb:fc:fb:7a:72:d4:9d:5b:08:69:66:ee:37:9c:53:ce:f7:8a:
1c:69:02:5c:4f:52:f3:cf:c1:63:5f:5a:89:88:dc:fb:7a:6e:
55:48:78:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:26:00 2025 by rpki-client