Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
File: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json)
Hash identifier: ef+m9SwbKsNpsHkzq2ZQN5Z3ddpwx3w1c71OuuIVAcw=
Subject key identifier: FD:76:2E:01:5F:43:AD:73:33:27:BA:30:45:6A:67:E6:01:13:F7:60
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Certificate issuer: /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial: 019A4EF48E31EE71D1E1D58CFA2494A90DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
Manifest number: 13E3
Signing time: Tue 04 Nov 2025 13:00:41 +0000
Manifest this update: Tue 04 Nov 2025 13:00:41 +0000
Manifest next update: Wed 05 Nov 2025 13:00:41 +0000
Files and hashes: 1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: pZC3MuO0sLVKmoW85crfmjstYs+bUfvx/FAckGNFLz4=)
2: K668RnN8R9Zt_BhcvITxrQRhBNs.roa (hash: 8wo0Wz+L+phQUblwdU8c4kneYF4uQyTcefZ7CpD7SsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:8e:31:ee:71:d1:e1:d5:8c:fa:24:94:a9:0d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
Validity
Not Before: Nov 4 13:00:41 2025 GMT
Not After : Nov 5 13:00:41 2025 GMT
Subject: CN=fd762e015f43ad733327ba30456a67e60113f760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:2b:33:e3:69:92:bd:21:da:27:56:50:0b:
81:f6:5e:65:e3:6b:6e:1b:f9:07:4b:7e:06:04:01:
7b:bb:7d:59:0a:f4:fa:e1:28:2f:98:ec:58:c7:8e:
83:c1:1a:d8:10:72:9c:cc:a9:76:8b:d1:da:b0:6a:
cf:07:21:88:cc:15:dd:a9:0e:96:93:53:0f:0c:f7:
83:02:c3:ab:c0:a6:d5:66:45:b6:c7:04:37:65:89:
c3:e3:57:4d:3a:ad:b4:85:ac:48:eb:3f:4d:16:ee:
db:fb:2a:d1:c8:a8:96:46:9f:aa:53:fe:c0:2c:29:
25:31:c4:05:da:1b:58:0e:dc:6e:0e:f5:87:d7:98:
da:9e:f3:6a:db:c9:af:69:fd:ef:ec:19:1f:ab:e7:
ad:b5:05:8e:a6:02:15:df:06:82:55:da:69:c8:14:
72:9b:fd:f2:5a:1f:6e:54:94:6d:76:2f:e3:bf:0d:
90:97:e1:ba:a1:38:ab:19:21:58:76:89:81:06:c1:
45:a4:fe:5b:18:5e:df:2f:cc:b7:d3:2c:14:c7:9b:
7b:45:8d:aa:5a:bb:32:66:d4:92:39:09:db:b9:5e:
5c:b8:e6:0e:37:40:54:86:64:35:12:05:ee:87:b9:
b9:a1:a0:c4:0d:e7:c7:fb:b2:ae:89:ad:a3:50:21:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:76:2E:01:5F:43:AD:73:33:27:BA:30:45:6A:67:E6:01:13:F7:60
X509v3 Authority Key Identifier:
keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5b:d0:2a:01:1f:c7:23:c6:4d:79:d8:41:5f:17:6e:a3:25:
92:e9:dd:3d:50:71:d3:5a:eb:0d:5e:bd:f8:76:00:66:78:94:
ae:d3:4a:0f:8e:ed:3b:ec:55:34:c3:e8:2f:e1:1e:a3:6c:15:
ab:a6:a6:b8:52:ed:5a:5f:8b:0d:c6:ba:4a:e6:48:05:ac:9a:
c3:f0:93:e1:01:1c:19:e9:87:b8:bc:a8:69:6e:d8:51:c4:af:
46:4e:34:46:d5:20:96:93:68:a6:50:4e:b7:d1:07:50:2e:2a:
da:d2:73:14:d6:68:9c:84:9a:3b:54:73:21:42:96:78:73:d1:
f5:3c:41:85:c6:cc:6c:36:25:a1:35:55:f9:9e:8e:52:4f:b1:
5c:a7:52:1f:af:8f:5b:e8:45:ea:d8:81:50:59:f2:98:75:b6:
2c:19:ab:8d:f7:18:11:6b:19:50:cc:7a:fb:38:e0:b1:1c:38:
c3:ef:e2:34:70:0d:41:0f:97:24:90:e0:93:f5:4e:1c:28:5e:
c0:54:58:50:e5:6a:2f:a2:ab:2f:51:78:5b:66:9d:eb:58:a1:
c5:8b:f2:15:47:b5:bd:a2:f1:c7:ad:7d:0a:a0:4a:fe:68:f8:
f0:11:46:b4:cf:85:33:8d:11:a4:9b:1d:17:a5:73:f6:b3:3b:
2b:7c:7e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:12 2025 by rpki-client