Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File: 3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier: cArlsZeOQ9ni5sYk9A1WJkxzF5uO2DIuXZWGVW4gAwg=
Subject key identifier: 7F:7A:99:1E:8F:A1:FF:78:85:2E:CF:69:36:74:65:82:81:D5:AB:59
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial: 019A4EF4E979797B269A91A02CDED6CD930D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number: 0785
Signing time: Tue 04 Nov 2025 13:01:04 +0000
Manifest this update: Tue 04 Nov 2025 13:01:04 +0000
Manifest next update: Wed 05 Nov 2025 13:01:04 +0000
Files and hashes: 1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: 9cci4Lb8JJgatPcD6x+wnvL2Dx37siCKTvwlIAFmSg4=)
2: HrIwTwMD6cd99R3d7bEiTOryXZg.roa (hash: 1wrHqn0lkUk+GnZl+JBgqFqtnLiVA3gNpwduqpO2T9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:e9:79:79:7b:26:9a:91:a0:2c:de:d6:cd:93:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
Validity
Not Before: Nov 4 13:01:04 2025 GMT
Not After : Nov 5 13:01:04 2025 GMT
Subject: CN=7f7a991e8fa1ff78852ecf693674658281d5ab59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:5a:52:4e:17:db:5d:5d:3a:ba:e1:17:aa:
0e:b7:6d:4b:f1:7f:9f:81:d5:81:47:e7:21:03:35:
65:71:1a:7f:e0:d1:af:e1:2b:4a:49:ab:70:50:fd:
91:49:61:34:c1:8d:de:22:9a:43:f0:c7:e7:90:d5:
05:30:ba:df:1f:e9:d2:09:ea:95:fd:cc:78:9e:db:
ce:71:b1:af:34:56:a2:ca:70:35:ee:8d:54:f1:2b:
7c:a1:c3:d7:95:60:ca:a2:8c:ea:20:ad:1c:68:bd:
68:02:1a:db:93:53:ad:37:fa:0c:21:0c:03:84:33:
db:f4:2d:15:53:b3:c3:fa:79:e3:40:4f:f7:7e:00:
83:a5:54:5d:68:0f:6c:af:69:23:cc:11:8a:47:c9:
5f:0f:91:be:d3:3c:a9:04:3c:33:d6:e4:ef:91:d7:
1e:8a:4a:b1:38:96:df:8a:37:1e:d0:ed:af:7a:7c:
2e:dd:3d:58:1f:0f:10:a2:41:9e:f6:2b:25:86:b8:
da:cf:d4:63:0b:be:e0:98:aa:64:4a:70:b0:26:fc:
4e:fa:63:a1:ed:0f:d4:e6:11:da:03:9a:ae:45:a3:
32:7e:67:00:6e:96:c2:6b:e4:38:cb:87:e0:6a:56:
40:b2:6d:7f:eb:27:48:4f:5e:d8:b2:46:a3:7e:82:
81:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7A:99:1E:8F:A1:FF:78:85:2E:CF:69:36:74:65:82:81:D5:AB:59
X509v3 Authority Key Identifier:
keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c9:4d:bc:e0:68:b5:93:9c:0d:30:cf:cf:0f:ac:4b:6e:d9:
ef:fa:80:4f:58:e2:0c:3b:a5:42:c6:5b:5d:3d:3f:f1:58:0a:
5e:d3:a2:38:89:14:80:32:b6:b0:43:02:65:66:91:42:51:82:
67:e1:c3:bb:64:5c:cb:6d:5f:21:9b:0d:76:57:b2:8e:65:5f:
52:af:11:fe:c0:45:4e:74:1d:e2:bf:7f:7b:39:da:74:64:9d:
6a:54:70:63:53:8d:6a:21:e6:1c:89:b5:41:0e:e6:1a:07:ef:
bf:2f:2c:18:e7:b8:d6:a8:45:30:58:c5:74:2c:78:44:2b:9c:
84:e3:00:d1:b6:80:10:66:9d:dd:63:e1:15:dd:9f:7c:15:b8:
03:f2:c9:d4:b6:3b:8b:f9:86:84:f0:3d:fd:0a:f8:9a:89:aa:
d0:b4:1b:38:4d:90:d6:95:9d:06:c5:11:71:fa:90:36:1a:43:
2a:86:0b:d3:32:76:ef:22:9b:cb:17:42:8c:d0:05:9a:bb:11:
71:dd:d1:e7:3c:d9:57:48:88:78:ec:9f:a7:5e:bf:68:7b:cf:
29:8b:76:6c:a9:52:b2:8c:fd:4d:08:bb:51:aa:64:ab:2a:bb:
05:24:a5:d8:75:ba:a4:f3:5e:80:6a:83:68:34:7f:5a:3c:69:
1d:77:ff:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:47 2025 by rpki-client