Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
File: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft (raw, json)
Hash identifier: /z5OgT+/oxoLCxRu0vEGA0ycjfv7e1tILI7+uVjBk0g=
Subject key identifier: 4A:EA:3C:F5:7E:36:AF:4F:13:7C:3E:44:53:FF:33:60:24:EE:9A:F8
Authority key identifier: AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64
Certificate issuer: /CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
Certificate serial: 019A50749061D52E6CBAC4BDDDE9DC083D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
Manifest number: 12D3
Signing time: Tue 04 Nov 2025 20:00:07 +0000
Manifest this update: Tue 04 Nov 2025 20:00:07 +0000
Manifest next update: Wed 05 Nov 2025 20:00:07 +0000
Files and hashes: 1: TImGbHFcysH3yKCENp7I2KDKakw.roa (hash: wV738mzWH7BpaMNjeVJLX60iXYrXwr7zU2chvPIlwaE=)
2: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl (hash: EK+bHgpRDbgl4Tmf3OWjVvaBviu0HH9Y9swoobQ0GzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:90:61:d5:2e:6c:ba:c4:bd:dd:e9:dc:08:3d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
Validity
Not Before: Nov 4 20:00:07 2025 GMT
Not After : Nov 5 20:00:07 2025 GMT
Subject: CN=4aea3cf57e36af4f137c3e4453ff336024ee9af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:55:47:19:ac:3e:43:35:66:ec:14:bf:dc:39:
14:e7:1b:ee:10:13:d6:d0:55:35:c8:66:09:ae:81:
fd:63:d6:e3:c8:95:51:37:e0:99:0d:bd:fb:f9:96:
92:de:dd:8f:45:67:a9:04:52:0c:21:a7:2e:30:b7:
c4:4f:cd:a4:97:77:34:22:63:87:2a:e9:c7:9a:08:
2d:65:f0:3b:61:04:86:80:c5:36:12:27:61:63:d9:
ed:b7:81:99:aa:40:e1:3c:59:48:c0:4b:82:53:c1:
f3:03:f8:c7:08:3f:7e:67:3d:87:b7:fa:f6:67:ce:
42:59:69:ef:ce:42:4d:95:ee:b3:fa:bc:be:10:c4:
5c:0d:e5:e0:51:a6:ab:50:7c:57:fd:70:3b:fd:ae:
6b:ad:bf:fb:4f:05:f4:fc:01:9e:04:f2:af:5d:1a:
8f:56:fa:90:ab:f2:65:71:29:08:92:cc:dd:b1:34:
5e:e5:90:7c:aa:63:f4:4b:2c:33:24:4f:f7:49:34:
f8:bf:d2:7f:7f:62:00:81:76:c3:ef:c0:8a:8b:32:
e3:61:b4:e1:16:24:85:db:28:16:66:98:04:a2:26:
84:e9:36:14:65:c2:c7:39:07:e3:99:23:8b:29:94:
68:6b:8d:d2:c8:cf:0a:cd:42:97:5b:77:bb:25:b3:
72:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EA:3C:F5:7E:36:AF:4F:13:7C:3E:44:53:FF:33:60:24:EE:9A:F8
X509v3 Authority Key Identifier:
keyid:AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6c:58:fa:c5:a3:b2:dc:ad:e5:83:b7:3c:ea:98:7d:00:9f:
5f:cd:b1:e0:ab:74:df:97:03:70:80:e1:72:3c:c6:7d:ff:00:
61:f0:32:4a:0b:cb:3f:2f:16:70:5f:18:50:6b:27:d9:4b:b4:
de:0d:7c:17:bb:01:0c:79:91:02:92:1b:b0:a8:01:dd:c3:bf:
2a:f9:d6:65:e4:14:8e:8a:94:45:f6:de:69:90:6e:01:70:16:
65:c8:97:ce:fe:32:4d:8b:b7:bd:b1:ac:1c:88:0c:44:b1:4d:
95:68:fc:f9:e1:01:74:65:cd:df:2d:bc:53:26:35:6e:42:1a:
44:6e:0f:7c:c8:c1:22:5e:55:ef:02:f3:d7:75:47:e0:e7:23:
6d:54:11:97:eb:04:89:da:6d:7f:eb:eb:a2:b0:8e:6d:e5:2e:
ed:79:05:20:1c:d6:c3:5b:67:29:6e:aa:18:9a:25:80:6c:50:
2f:8d:f7:7e:40:3f:d6:28:3f:0f:87:3c:a9:38:72:0d:62:57:
da:ef:c7:b3:d7:c0:32:9e:f5:fa:ef:b2:9d:2c:9d:e3:70:d6:
05:19:f8:08:f0:d9:28:d5:b0:3b:9e:28:74:1b:12:78:21:48:
31:ba:4c:b8:fa:74:ee:34:39:b5:4b:a8:c0:a0:4d:dc:08:3b:
4d:48:10:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:47 2025 by rpki-client