Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
File: 3gr32Dxe6w1DStdTxqX0dUlpizc.mft (raw, json)
Hash identifier: 0Vp8b77rWA+C5iadTt2tQPaVkdVD14eq7Zuthi+ZLW0=
Subject key identifier: 4D:CA:A4:F3:D8:7A:FE:6F:80:F4:F6:79:3A:22:C5:70:76:A5:73:EE
Authority key identifier: DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
Certificate issuer: /CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Certificate serial: 019A4F2B96AB492B1B2DCB5671D0AFA554FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 14:00:47 +0000
Manifest this update: Tue 04 Nov 2025 14:00:47 +0000
Manifest next update: Wed 05 Nov 2025 14:00:47 +0000
Files and hashes: 1: 3gr32Dxe6w1DStdTxqX0dUlpizc.crl (hash: PYa3xJM/WfTVdGRh39KRlzsKpo/csiaIiEYVv2gVaB0=)
2: Aqgmt-0kmHhTxI4TNwO6CqQUAvI.roa (hash: OT3qKlUhR0guc2qzeYETLZJZRi9SFdXOekAamRFDQh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:96:ab:49:2b:1b:2d:cb:56:71:d0:af:a5:54:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Validity
Not Before: Nov 4 14:00:47 2025 GMT
Not After : Nov 5 14:00:47 2025 GMT
Subject: CN=4dcaa4f3d87afe6f80f4f6793a22c57076a573ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:60:8b:c1:f7:1c:4d:52:e1:14:ee:e8:29:
8b:96:86:ef:61:cf:c1:9c:e7:9c:19:84:6e:70:12:
5f:90:70:93:a5:cd:bf:08:bd:05:f2:bc:0c:1a:12:
a8:34:bd:c1:6a:46:44:50:48:72:69:ff:d3:25:e8:
fe:c3:7e:9e:6e:b5:76:83:99:b8:1b:42:eb:1e:41:
dd:ad:09:ae:9a:35:6b:8a:58:51:9d:19:3a:fc:81:
e0:78:0b:61:73:83:99:eb:28:8d:39:f2:ba:a4:b7:
e6:c2:bf:8d:eb:f0:4f:1c:f9:af:63:c2:72:12:6d:
4f:90:4e:d0:35:22:81:81:55:13:10:52:43:73:df:
7d:de:9e:21:0a:e4:2c:28:8b:8e:11:f3:d8:1f:9d:
8d:f2:e1:75:23:f9:3c:2c:6e:bf:fa:5c:96:c2:00:
9c:87:71:eb:9b:d0:aa:24:0d:c5:3b:87:96:fb:61:
eb:69:95:9d:5f:55:bd:e3:01:6b:fd:3e:de:63:ad:
ea:86:1f:08:60:9d:35:1f:02:62:83:30:1e:c3:1e:
c6:23:54:d1:b1:6d:c2:67:02:89:57:4f:3d:ca:e5:
06:3b:16:4f:f1:f3:a4:b2:57:43:a2:08:67:c2:4a:
1c:5b:8a:8b:cc:91:1c:44:6a:9e:f4:9e:68:48:85:
32:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CA:A4:F3:D8:7A:FE:6F:80:F4:F6:79:3A:22:C5:70:76:A5:73:EE
X509v3 Authority Key Identifier:
keyid:DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:12:37:0c:e8:1b:50:cb:73:da:1a:24:b7:7b:fc:46:72:63:
6e:0f:dc:2f:6c:b7:2d:15:c2:ab:2e:7b:85:2d:38:62:e0:c7:
0d:21:b0:4e:20:9c:08:44:5a:ba:86:90:b6:9c:a0:8f:a8:4a:
b2:bf:14:23:89:ad:20:29:11:b6:ff:49:09:a9:bb:5b:df:74:
fb:a8:eb:3e:7a:d9:5f:8c:93:7f:a6:cc:aa:49:b7:d9:51:89:
89:73:a7:08:37:56:9c:ec:21:84:4c:17:86:8c:c8:1c:e0:6f:
18:73:e8:5f:96:42:a6:3a:9f:e5:e6:3c:e6:54:44:db:30:00:
55:e0:bd:e4:5a:f3:ba:a1:fc:3c:02:a1:aa:f0:98:9d:dd:4e:
b9:84:52:2c:6c:29:99:ff:f1:56:c4:e4:db:5b:29:3f:cd:15:
db:03:0a:37:e4:c5:82:4f:62:2f:84:ad:d6:8a:8f:02:65:29:
97:69:f3:c1:f6:ec:d7:84:9f:37:24:b3:1e:17:e8:47:8b:6a:
63:27:4f:64:39:4c:f1:4a:d6:bd:41:76:09:33:fb:91:17:42:
ef:00:34:fb:e0:5e:f8:02:8c:ec:ec:a1:85:45:f3:fb:03:b0:
a7:f8:ac:01:f1:16:f9:ed:5b:2f:8a:dd:d3:5f:ef:2e:83:3b:
cd:ea:d1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:31 2025 by rpki-client