Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
File: 3keU2fyrI-wF3d1QSKP8cgQAKio.mft (raw, json)
Hash identifier: 6I7orMSB2JtZPwfkdJc92aT5E6HUsd5F+1HHPxdpJy4=
Subject key identifier: 14:14:61:78:05:E4:CA:A1:33:21:64:4E:01:FF:6D:1B:2B:71:D2:21
Authority key identifier: DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
Certificate issuer: /CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Certificate serial: 019A4E866AE8B28DE93A63846B9C909C837B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
Manifest number: 103C
Signing time: Tue 04 Nov 2025 11:00:23 +0000
Manifest this update: Tue 04 Nov 2025 11:00:23 +0000
Manifest next update: Wed 05 Nov 2025 11:00:23 +0000
Files and hashes: 1: 3keU2fyrI-wF3d1QSKP8cgQAKio.crl (hash: zgQSo2AeEA6PyvJ2iLlkN45pjIzUX2f2ErxjYy9/MTk=)
2: ZK9gU4FBN8KUQTPHGhgGaXPIWjk.roa (hash: YFHfAWvmuV1pyKRAlUfEUWxi+ZLKrTZD/d9TC0Av1JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:6a:e8:b2:8d:e9:3a:63:84:6b:9c:90:9c:83:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Validity
Not Before: Nov 4 11:00:23 2025 GMT
Not After : Nov 5 11:00:23 2025 GMT
Subject: CN=1414617805e4caa13321644e01ff6d1b2b71d221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ac:bc:80:7f:32:0f:45:74:dd:95:0f:51:a3:
34:cb:19:ae:f7:84:a4:86:df:fa:23:c8:3b:ca:7f:
1d:41:f0:bd:f9:bf:d3:0d:b3:5b:68:4f:e9:e4:4d:
b3:a7:59:6a:ae:c6:b7:01:08:67:10:b2:16:e4:4c:
63:6f:4b:03:85:24:48:c0:b8:ca:92:23:17:fc:57:
d7:59:fc:73:80:97:8f:81:1c:fe:7c:d1:50:ca:21:
c7:80:b4:ae:db:2b:1d:76:b9:90:f4:02:e5:42:0e:
05:cd:8c:3a:d3:8d:d6:f6:4e:a3:19:ec:63:91:9c:
38:d0:01:a0:c1:42:62:b8:cb:6d:1d:02:bd:3c:dd:
96:bd:ce:40:19:fb:cd:b5:53:ae:4c:33:e3:0a:3c:
f7:c9:bf:97:a0:a6:39:bd:23:f6:13:49:42:13:f6:
4d:b1:8c:1e:21:db:7c:9a:ac:e8:bf:26:c7:ba:01:
7d:d8:a2:40:54:37:bf:5b:0d:ec:62:39:d5:96:5b:
df:20:e8:e0:a6:a3:dd:a7:f8:bb:7f:e9:5d:dc:a7:
64:48:e1:a2:7b:cb:de:ad:00:16:e3:a6:0a:a9:57:
ac:f8:b9:9f:a2:aa:72:64:e3:0a:01:eb:f1:8c:2f:
30:c9:ff:9d:40:34:90:0f:0d:8e:88:3e:8f:60:bd:
31:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:14:61:78:05:E4:CA:A1:33:21:64:4E:01:FF:6D:1B:2B:71:D2:21
X509v3 Authority Key Identifier:
keyid:DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:95:e4:cf:ca:6f:95:66:fb:a6:b7:d5:03:58:58:f2:db:b8:
62:1d:46:ec:b0:6d:9a:80:af:44:ec:6f:d6:02:3e:f2:fa:55:
28:9b:f0:f0:bf:01:69:8e:cd:d0:94:71:32:7b:0c:7e:99:77:
ba:ea:41:01:75:1e:ab:ab:50:a5:3d:4d:b3:41:7c:fe:29:34:
e4:e3:a1:22:9e:52:e6:99:fd:7c:63:2a:32:97:e9:d0:d4:bd:
b8:66:44:76:8d:36:6b:5b:38:a4:f2:1b:7e:d5:ea:80:f3:f8:
0e:81:3b:71:f8:6b:92:fa:61:32:fb:aa:b0:80:0e:c7:62:fc:
5d:5d:b8:9c:9a:13:a1:67:3a:e2:48:d3:f0:26:3d:db:f5:bf:
10:72:a5:b4:7f:a0:05:d4:59:f4:a4:ff:58:e0:c9:6f:25:fb:
8f:f0:3d:73:9e:74:5e:b7:3a:fd:8c:17:77:ab:40:dd:ae:ef:
63:f5:46:4e:bc:be:b9:fd:ca:c9:ab:89:a2:a5:65:8b:75:64:
19:f7:b9:f2:40:63:c0:e2:46:f0:fb:fe:ee:4d:0b:ca:3f:12:
20:12:40:3e:38:06:9f:45:c9:3b:2d:71:1c:30:11:68:11:6f:
be:33:af:31:8d:7e:52:08:83:17:6f:e4:97:5a:d8:23:d5:28:
56:51:96:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:36 2025 by rpki-client