Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: HmGvCllfB0/Ef2HDLJf9N8DTCU1KRlPhNXJeopdqdys=
Subject key identifier: 09:85:CF:EE:5A:59:AE:10:C8:EB:97:7E:5A:B3:3B:FA:53:A0:55:2C
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 019A4F621390D925A95DC07920C4497D7CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 1214
Signing time: Tue 04 Nov 2025 15:00:18 +0000
Manifest this update: Tue 04 Nov 2025 15:00:18 +0000
Manifest next update: Wed 05 Nov 2025 15:00:18 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: pEpipe/22aO+ShUsEmjM68RuFtpLvtBv65etoH9ON+8=)
2: _eQTxfZZbwefhXlLKHO7CEbeNzo.roa (hash: XwbhtEsqMzoTs493oAMc1WoC+bVurXPqsNp3fAtN59M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:13:90:d9:25:a9:5d:c0:79:20:c4:49:7d:7c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Nov 4 15:00:18 2025 GMT
Not After : Nov 5 15:00:18 2025 GMT
Subject: CN=0985cfee5a59ae10c8eb977e5ab33bfa53a0552c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:60:be:20:16:8c:be:2e:d2:f2:3f:dd:b2:71:
48:94:2d:a2:7b:b0:09:08:e4:9c:d4:85:61:c2:56:
d1:9c:be:a8:f8:e9:86:d9:a5:b5:90:a9:b5:e5:81:
51:79:b8:ab:3b:32:a2:bf:22:eb:ae:b8:c2:4e:1d:
2e:a7:df:13:2b:36:e4:5a:1a:4f:bf:3d:74:10:9a:
c8:12:37:cb:cc:5b:ad:e3:18:cc:6e:58:72:de:1c:
b0:62:16:42:86:1e:40:16:ec:a2:6a:f7:ee:3b:5c:
b4:a1:b4:06:c4:86:23:c5:19:59:2b:ef:94:b7:17:
fb:15:36:44:72:e0:6f:02:4f:f7:8a:15:85:f5:b4:
16:e5:1c:52:b2:0a:c6:00:64:7f:88:f9:30:9f:62:
17:91:a6:ca:fc:88:e2:31:55:f4:41:60:d3:77:dd:
da:07:a5:f9:03:98:25:89:ee:49:88:66:fa:e9:98:
0a:cd:44:1f:c2:cb:b6:dd:40:f1:11:91:97:3c:c3:
bc:fe:88:44:e0:6c:d8:aa:9f:8f:60:ab:72:98:b1:
78:65:ce:b5:e0:bb:d6:45:b7:0f:61:1b:42:7d:7f:
2c:7e:51:4d:4e:e3:7e:b5:a3:d5:31:36:56:4f:ac:
b7:ae:27:24:7c:af:62:31:a2:0c:8a:18:28:73:49:
7b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:85:CF:EE:5A:59:AE:10:C8:EB:97:7E:5A:B3:3B:FA:53:A0:55:2C
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:db:78:83:a6:8e:4b:98:dc:9b:29:2a:23:45:dc:44:92:cc:
7a:db:0b:67:cd:94:22:82:a9:b7:ef:ca:e2:36:9e:94:48:1d:
90:2b:62:b6:84:10:6d:5d:86:5d:ff:ef:8c:41:35:a3:9a:54:
1a:6c:11:d2:30:e2:bb:91:33:37:24:5a:48:92:86:9c:f3:6f:
d0:5f:2c:94:a2:35:9b:14:7a:fe:21:c9:05:35:fb:bc:35:bd:
48:56:0f:da:12:86:0c:b4:51:1e:f5:1f:16:3f:15:f3:61:83:
27:db:dd:74:25:09:a9:fa:9f:8d:88:68:af:36:4d:76:f1:53:
78:74:d5:39:88:61:c5:5e:36:3a:f2:af:48:1d:c8:37:db:7e:
5a:d2:da:2e:b8:0b:69:96:d3:8a:a3:16:57:46:98:75:09:0a:
1a:3e:aa:cb:5b:b8:cd:0b:03:b9:b2:ef:88:c3:e2:f9:5d:16:
d7:be:e1:4b:87:0a:3b:15:b0:ab:35:7f:8f:5f:85:d3:ac:2c:
09:89:88:a9:89:b0:2f:65:da:35:e6:b6:0d:58:d5:01:2c:28:
21:a9:6c:55:41:87:5b:db:1e:44:2b:01:03:37:ea:91:b5:65:
5b:14:40:81:b0:07:be:c2:17:59:50:dc:bf:a4:f2:cd:d5:45:
f9:f4:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:49:39 2025 by rpki-client