Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File: 3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier: Vopl7WjHcNqb/CawSVOmqp33s+WLnrVLigb8aE10KIA=
Subject key identifier: 21:77:F6:DE:B9:A3:77:4F:04:C5:15:8C:A0:72:9A:42:43:0A:55:3D
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer: /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial: 019A4E18779CAB613A0812245F9D5150F65A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number: 08E2
Signing time: Tue 04 Nov 2025 09:00:17 +0000
Manifest this update: Tue 04 Nov 2025 09:00:17 +0000
Manifest next update: Wed 05 Nov 2025 09:00:17 +0000
Files and hashes: 1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: VrltMi6sMlO8OKdEq3VNTyiLjWu/iABcjnCUY2+/wzk=)
2: tmyLpJpJchhVaXtc4hY4-3-tLv0.roa (hash: ptDhwK/duydywl6VxB7EOOZhOpM1y3n5bCF72ET2KLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:77:9c:ab:61:3a:08:12:24:5f:9d:51:50:f6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Validity
Not Before: Nov 4 09:00:17 2025 GMT
Not After : Nov 5 09:00:17 2025 GMT
Subject: CN=2177f6deb9a3774f04c5158ca0729a42430a553d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:60:d7:2c:82:00:4b:f2:4c:52:6d:6b:4b:
27:f2:8a:7a:11:b9:ae:ca:cd:78:b6:c0:8e:46:2b:
53:80:15:5f:8c:f8:75:b9:48:27:c7:87:53:a1:a0:
06:fb:2b:af:72:7f:1f:2e:d4:30:7b:a0:f9:37:88:
00:e3:aa:4f:84:14:14:18:af:db:88:75:e0:65:50:
53:b4:de:e9:db:5b:1a:5e:f9:71:96:43:4a:06:38:
4b:cf:6b:be:69:93:98:14:fc:b9:60:e3:69:48:60:
87:d6:38:eb:97:0f:dd:19:61:c4:0e:3f:82:3e:8b:
41:7f:98:40:67:ee:3f:99:c1:5f:8f:76:8f:36:a9:
17:2b:5e:e1:a0:c6:32:cb:d9:a7:18:99:ac:19:4d:
cd:a3:5f:5f:56:0d:f3:bd:a7:e6:59:17:cb:28:7a:
0d:59:00:2a:b6:3c:e0:82:1b:36:a6:14:2d:99:60:
eb:6d:34:27:5e:81:23:77:5c:9d:7d:5c:17:1c:45:
07:9d:1a:57:db:b2:59:65:ef:6a:2c:bc:ce:d9:40:
67:ee:bb:0d:23:88:8a:35:2b:78:09:a5:c1:e6:a9:
3a:4f:4e:9b:2a:f1:1b:2d:a0:83:ca:4a:74:72:8e:
63:d6:60:fa:da:7b:68:08:ec:65:84:74:32:21:1d:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:77:F6:DE:B9:A3:77:4F:04:C5:15:8C:A0:72:9A:42:43:0A:55:3D
X509v3 Authority Key Identifier:
keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4f:95:48:c4:c7:f0:d0:30:1a:58:9a:35:2b:a8:25:6d:dc:
f0:6b:f6:a3:4c:d4:21:b1:51:b6:b3:96:3a:66:fc:e6:e9:29:
b6:24:50:3e:a0:59:be:b9:47:03:64:76:a8:2e:21:b7:71:37:
ba:71:fd:45:88:ce:16:f2:06:36:b6:f4:b0:5f:a0:2d:68:83:
f1:d6:09:92:23:9c:24:b2:ca:33:10:9d:03:ba:da:1a:3e:bf:
58:99:87:ff:e6:c7:be:8f:1a:66:e1:e8:3c:fc:0e:4e:31:39:
06:84:ac:d8:7e:36:1d:f2:01:bb:36:fb:f9:b3:df:7c:b1:a4:
e9:96:31:87:e6:db:ed:e1:b0:82:1d:2a:21:a8:3c:bd:4f:a6:
cb:e9:fd:10:dc:34:6e:67:d8:a4:79:66:ec:53:17:41:78:4f:
16:64:5b:45:9a:65:7e:93:6b:94:d2:75:5d:9b:32:18:2c:08:
09:8d:66:53:98:01:f8:71:89:71:ee:ba:7f:09:28:6a:46:15:
b2:7b:63:48:7e:08:0c:68:16:90:3b:63:93:0d:3b:c2:8e:3e:
98:7d:a1:12:7a:66:04:b4:73:f1:61:fe:4a:f6:95:69:f6:a0:
7c:96:a6:8a:97:b4:ed:2d:db:13:ff:82:2a:e2:eb:b8:14:23:
8e:0d:4b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:50 2025 by rpki-client