Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier: aTsU/JVNmWUX1tkMEhrOKCNomt8d0WxU686pPydioXs=
Subject key identifier: 92:5A:9C:CA:B3:AE:D7:3C:66:FA:C0:FC:76:9B:9D:A4:8D:E6:5C:73
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 019A4F2B954E85043745F79B510ACFA21EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 14:00:47 +0000
Manifest this update: Tue 04 Nov 2025 14:00:47 +0000
Manifest next update: Wed 05 Nov 2025 14:00:47 +0000
Files and hashes: 1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: lT/MvHkF+9n/FZcAUWQ/mPDv1nsqYY7k7a+Ea7nMgAY=)
2: aUaxmc4yn8DWQgssucohLW2GTOs.roa (hash: SOdn4BM+lJeHsX2EdSBfNJjI/S1sYp7gdR+GcCunEpg=)
3: v8c3Ww_Eihi-LvyDOVvXBJwo9F8.roa (hash: 0sTmm1OvDNHW8cfRGw9gOppSFK5VfYqSrXVw8T0yJBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:95:4e:85:04:37:45:f7:9b:51:0a:cf:a2:1e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Nov 4 14:00:47 2025 GMT
Not After : Nov 5 14:00:47 2025 GMT
Subject: CN=925a9ccab3aed73c66fac0fc769b9da48de65c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:2e:4f:71:da:9c:b0:7c:ff:d9:ac:b4:27:
c5:11:ac:71:43:b5:30:53:12:85:f1:d4:c8:40:4d:
b2:56:9c:24:24:32:d0:51:e9:63:9d:fe:b5:e3:73:
58:ee:c5:91:7c:8e:ae:aa:9c:83:cb:26:fa:c6:30:
fa:31:32:2d:1b:0b:ec:2f:7d:9e:88:52:20:10:8c:
d5:1b:b8:a8:b2:5e:96:bc:4a:8c:11:e5:9a:c3:b3:
2e:e1:01:4e:36:8a:e7:a7:79:89:a7:e9:2d:15:bc:
7f:f8:0a:87:fe:d1:f0:37:07:6a:d2:36:39:f2:17:
61:7d:fd:ea:0c:0a:d2:a9:f6:f8:77:d2:d7:7c:e4:
0a:36:0d:ee:e9:f0:04:d8:96:ec:a2:69:79:6e:13:
80:43:0f:ea:16:04:6c:2e:31:11:df:81:9f:ff:f8:
a5:25:28:1f:7d:86:ea:4d:69:51:f5:04:ee:e4:6d:
e6:e5:2c:a2:52:93:4a:19:e3:ad:ef:ce:52:59:9b:
34:b0:08:57:2c:9e:30:42:07:6b:7d:f8:2a:2f:35:
68:1f:00:3f:d3:78:29:23:78:0c:23:6c:e4:37:70:
2b:72:8f:e8:4a:cf:cc:99:c9:61:04:59:6d:2e:a6:
28:16:69:99:34:db:4b:ea:78:a1:28:61:c6:24:9b:
66:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5A:9C:CA:B3:AE:D7:3C:66:FA:C0:FC:76:9B:9D:A4:8D:E6:5C:73
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:26:da:aa:b5:00:69:d7:ac:53:4a:21:51:02:6a:17:4f:83:
9e:13:1b:bc:0d:41:d8:28:82:5f:fa:c4:cd:d2:5b:76:4c:2b:
41:f5:3e:e8:9a:06:0a:3f:24:e5:53:85:32:89:c4:6c:a6:10:
78:e5:d0:24:36:df:08:06:56:1b:87:fa:8b:51:6f:99:87:fb:
67:65:38:e6:6c:42:a4:54:05:55:88:94:45:c2:8a:21:c3:7c:
bb:49:38:04:9f:14:ab:56:c0:85:82:e1:a7:8c:24:7b:e1:22:
a6:0f:91:37:0f:3e:bf:d1:2a:b9:71:ee:2a:24:9f:ac:09:b7:
44:32:b7:2a:7d:f2:cd:2a:c4:4e:9b:7d:0d:cb:94:63:ea:9b:
9d:4c:24:7c:94:f8:8a:15:f8:75:77:af:82:30:14:dc:00:af:
57:39:4b:17:0b:08:19:18:36:fe:37:d8:cf:10:24:f7:d9:15:
43:3d:20:8c:22:5f:a3:45:63:d5:b6:fe:85:8b:27:8b:e5:bf:
66:2b:46:ec:49:78:b5:99:bd:3e:78:ba:dc:a8:4a:f6:50:bd:
5d:b4:1f:f7:8f:a5:93:22:30:65:4c:c5:0e:3d:f0:b6:63:ce:
6b:f3:a6:ef:4f:44:33:e0:79:fa:82:ad:d9:7e:b0:8d:60:bb:
d0:35:12:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:21 2025 by rpki-client