Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: y0UBJAKqOM6ts6sGw8y5Z3TeWyMfMPLH4MZeV+Ahgwk=
Subject key identifier: 68:F6:B3:E9:7A:EC:6A:D3:24:04:4D:B4:0B:73:70:41:93:60:93:65
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 019A4E19066CA5CBAC534DEAB31A5C2928F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 09:00:54 +0000
Manifest this update: Tue 04 Nov 2025 09:00:54 +0000
Manifest next update: Wed 05 Nov 2025 09:00:54 +0000
Files and hashes: 1: 1-r8ngTnAMIWnigi3kZKRlPxzAEg.roa (hash: 4upInjfh8BMDhZW1GMRFLRcUKFy4sgss61UjVbuCcN4=)
2: 3bHFI98fNrO-AI7iYMdoY6Cy4Ec.roa (hash: jNavEGcWKNfNKB84/MmKoUJXT5oHj4PAQhOkM5ErTv4=)
3: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: wVwED0l7gBKh7USMHG2Lb+qbpTNlAmrqjriZhmQRAdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:06:6c:a5:cb:ac:53:4d:ea:b3:1a:5c:29:28:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Nov 4 09:00:54 2025 GMT
Not After : Nov 5 09:00:54 2025 GMT
Subject: CN=68f6b3e97aec6ad324044db40b73704193609365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ba:05:c5:19:4f:91:83:ad:9a:c8:3a:a7:71:
01:11:30:e8:4e:d4:f7:e3:c6:28:01:87:20:44:c6:
f6:19:9c:78:0e:b2:c3:f5:50:b7:9c:6b:90:c6:e7:
48:73:9e:29:cd:85:f4:4a:19:98:4c:2d:fa:03:f2:
19:7a:a3:2c:90:78:82:87:08:3f:d0:dc:56:54:37:
d5:a1:53:21:9c:b3:4a:2c:8d:c8:60:de:f0:77:5d:
aa:ef:61:25:e2:7a:50:2f:85:40:71:3b:0d:2d:68:
c2:f0:dc:4e:ef:79:dd:68:0c:29:e0:4b:ee:9a:ee:
bb:ba:7c:2a:bc:72:20:35:c4:23:c0:1f:84:94:9f:
92:6e:e0:21:ef:cb:97:1a:ce:6c:f2:bd:ad:5a:53:
af:02:57:fb:9f:f3:df:14:6f:21:f3:a3:0e:50:9e:
11:9e:cd:53:6b:df:ae:44:78:27:f0:e5:cf:be:3a:
ef:70:9e:b7:c3:8d:26:3b:f3:49:11:66:fc:00:39:
2b:a3:9d:62:d5:11:c9:59:ad:a0:eb:4a:b2:33:65:
68:07:b3:a3:3a:b9:f3:9c:bc:5a:ed:de:84:03:5c:
93:a5:ce:9e:ba:13:f1:50:f2:1e:23:ca:bf:88:df:
66:dc:e9:3e:ec:a2:fa:67:59:55:03:af:ec:d4:fa:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F6:B3:E9:7A:EC:6A:D3:24:04:4D:B4:0B:73:70:41:93:60:93:65
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:af:5a:d3:a9:c7:5b:aa:6c:df:fa:ac:d0:92:2c:5b:a6:df:
8f:85:8b:c4:39:7d:4c:6e:a8:01:e0:dc:2b:cd:15:a0:56:b0:
d7:95:75:40:f7:c8:24:82:9a:43:84:12:46:38:55:ac:67:32:
9e:f9:2e:6d:3d:83:bd:ad:24:7d:cb:b4:8f:cb:36:24:c9:b8:
c2:b8:02:d8:df:63:12:35:d9:ac:44:ff:a4:5f:85:06:7a:32:
3b:27:ae:ab:4a:ca:81:c6:34:40:d8:4b:b8:c9:cf:6e:00:f3:
1d:83:e9:64:ea:f5:85:b2:d3:ca:48:c2:b6:56:57:a9:25:8d:
13:ef:39:82:82:0c:31:1a:ca:a6:5e:15:59:8d:c0:4e:ac:70:
b0:39:95:b2:b7:90:3c:e1:8a:2c:0c:26:56:2c:5e:18:82:81:
45:41:cb:d3:fe:a7:4a:3c:81:66:62:47:f3:2a:f8:3a:04:b5:
52:a5:12:31:7a:34:91:9e:5d:94:2f:bb:d5:88:1f:7a:ad:80:
ba:53:cb:e7:c0:3e:3b:4b:14:18:5c:5f:4a:f9:99:76:8f:94:
99:3f:0d:59:a4:bf:de:a4:10:3f:e1:e5:eb:c8:d6:fd:07:f6:
df:7c:01:3e:19:bf:bf:8a:3d:28:bd:1e:28:f2:af:8d:3c:d2:
e8:22:96:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:54 2025 by rpki-client