Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
File: 3RWKDaAyZt8UTImntuNadhxJmPc.mft (raw, json)
Hash identifier: 94QMfrM3J3A/ELKMtCBfoGuhWglWU0zTnZQGfmRCwss=
Subject key identifier: A4:C6:46:D5:59:F1:B5:55:6D:FC:EF:80:C2:1C:72:85:83:28:44:41
Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
Certificate issuer: /CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Certificate serial: 019A4E86B4C2DC6547CA24DFAB559FEBDEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
Manifest number: 0406
Signing time: Tue 04 Nov 2025 11:00:42 +0000
Manifest this update: Tue 04 Nov 2025 11:00:42 +0000
Manifest next update: Wed 05 Nov 2025 11:00:42 +0000
Files and hashes: 1: 3RWKDaAyZt8UTImntuNadhxJmPc.crl (hash: wzAFizEPm0NxEWsWAdwfaAAkocqx5itG9pVF5KhbrHg=)
2: hjp9r4jkfdcWh8tb4IbJ8JLqvhg.roa (hash: rpnDBu2YggoyGIw/C4Ub9AMkAXEhq0st1VH7UXhjugk=)
3: oyehTC9fC3RxVNTxQ-3Nace4xCo.roa (hash: 6amsBM8Jkzid3Hbf3NCrvWV5lgaxarQNmZ7omOl4H1Y=)
4: tWWoO6Q9xW9qzxs1LTkk9o7qkwc.roa (hash: dIS2lAatvIYTUHXvxYqBBEq9rurmrnQiuE0cglSeBdY=)
5: zdvIB-MX7mBXxPXY9Gvkyg4DaIA.roa (hash: JzeLYwYOJtUYF4eEhrs8y3e0iaiCpHB7RqKZXjFT6qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:b4:c2:dc:65:47:ca:24:df:ab:55:9f:eb:de:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Validity
Not Before: Nov 4 11:00:42 2025 GMT
Not After : Nov 5 11:00:42 2025 GMT
Subject: CN=a4c646d559f1b5556dfcef80c21c728583284441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d9:f3:da:80:90:79:09:53:c0:eb:50:bc:c4:
3b:6a:8c:43:9a:4d:6e:2b:97:18:06:c3:45:41:7a:
2f:4f:69:88:ec:57:8f:83:68:89:c0:e1:9a:1b:0e:
0e:e3:57:16:ea:ec:f8:28:ce:55:3d:4b:25:da:d3:
0e:ce:b9:11:59:a8:28:1d:45:08:58:68:fd:77:e1:
88:80:16:fe:f2:45:fc:71:79:64:e1:d9:1a:18:a0:
65:49:0f:ff:7d:d8:24:55:26:d0:b2:89:4a:a1:62:
12:5d:b0:31:35:86:12:50:07:93:80:69:2d:ef:35:
17:00:e9:08:89:e9:05:aa:81:54:a2:3c:dc:aa:37:
3d:c8:e8:d0:73:d2:29:22:b2:5f:33:dd:9d:08:32:
ff:9c:c2:ef:9a:d7:0d:8c:b6:2e:c4:d4:15:66:1d:
c7:0a:c2:62:c8:9b:e9:1e:90:ef:05:1a:f6:ce:05:
66:75:94:04:5a:13:6b:18:00:d0:11:6a:ee:1d:30:
44:fc:6c:0a:92:56:26:e0:c9:90:22:98:a4:a3:41:
02:cc:44:2d:67:56:c5:bf:27:b5:b3:4b:8e:ce:84:
47:d9:e8:46:30:c2:17:c7:5d:f9:05:1b:83:5c:0f:
40:be:b9:13:07:07:8a:2e:96:08:ba:8a:f0:fd:cc:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C6:46:D5:59:F1:B5:55:6D:FC:EF:80:C2:1C:72:85:83:28:44:41
X509v3 Authority Key Identifier:
keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9f:05:b6:2f:c7:69:ba:56:19:ad:83:64:2d:11:85:88:fb:
9b:63:bf:2c:40:74:ab:46:b0:a7:9b:e2:ed:49:2b:12:1d:11:
bf:08:47:19:5d:7c:0b:6e:60:e2:99:e9:b4:5d:f1:f9:ec:16:
c3:be:75:48:cf:f3:67:50:4c:94:43:8b:67:ae:27:ee:99:9e:
a2:29:45:ac:d6:29:41:ac:66:79:13:c1:4d:c9:93:4e:66:5f:
90:30:47:9e:06:ae:e9:75:62:40:dc:ea:08:03:8e:a6:70:32:
80:13:50:d6:2d:70:fe:c6:f1:c0:a1:f7:7e:1d:10:7d:37:19:
45:3d:ad:7e:e7:cb:c5:a3:4a:89:36:20:25:64:1b:ad:43:ea:
74:3e:23:1b:5f:47:76:3c:c7:37:57:f9:02:31:27:c3:ce:b1:
29:68:00:1a:e7:1e:65:77:22:52:b4:cb:18:43:2e:d6:2b:b5:
55:c8:3a:a9:5d:33:8c:90:64:f2:60:18:d8:78:30:6c:96:47:
a2:0a:6d:42:66:7a:49:07:a5:fb:46:ec:8f:ff:62:3e:53:ad:
ad:6b:81:8e:64:e0:8e:c7:6a:fe:e4:75:41:e7:be:73:ed:18:
8a:ab:dd:28:9d:8e:34:2f:17:4d:f2:bf:ca:86:06:68:c4:de:
3d:03:e0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:40 2025 by rpki-client