Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
File: 3ofTW9yrEjr_wakdFzaGeWlwmiM.mft (raw, json)
Hash identifier: sbauOj4BOtwqmwIWRrCyGly33HkErBl6iPLox1hX02U=
Subject key identifier: 12:C8:A6:82:81:9B:9A:A4:8A:01:68:B4:5A:31:A8:FB:00:40:B3:0F
Authority key identifier: DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
Certificate issuer: /CN=de87d35bdcab123affc1a91d1736867969709a23
Certificate serial: 019A52D12F6101BCE04685A801966D5D9BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
Manifest number: 0E5B
Signing time: Wed 05 Nov 2025 07:00:32 +0000
Manifest this update: Wed 05 Nov 2025 07:00:32 +0000
Manifest next update: Thu 06 Nov 2025 07:00:32 +0000
Files and hashes: 1: 3ofTW9yrEjr_wakdFzaGeWlwmiM.crl (hash: SGDhte5UFi8e888kU6eBj8mlFJyel+TMw8eUCIKTHDw=)
2: 6QLt8gn6308YVRHTv77skONgyv0.roa (hash: WOVtEt3WWdPmMOLnSpBdtQecprDqkDjMDowLpoTrLSs=)
3: BlrozZPONvKYEp2UEAlnW_YzHI4.roa (hash: L9GHrxzoIcunUF/HHDD1IUg78PGRjvbme0vJn+zzCvE=)
4: CyRu--zwDhYd5zhamEbAkFcQBvQ.roa (hash: sO2VoYkxgTRufknOOSGAsTFVUrBvzkN0qo3ZnwDHlpE=)
5: m2FaQjqwdirKnIXjWYvZqBXz6X8.roa (hash: T2eJCXBDxAgsoT/g2qbdU7r93yFYU14KBtRd6n9GR68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:2f:61:01:bc:e0:46:85:a8:01:96:6d:5d:9b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de87d35bdcab123affc1a91d1736867969709a23
Validity
Not Before: Nov 5 07:00:32 2025 GMT
Not After : Nov 6 07:00:32 2025 GMT
Subject: CN=12c8a682819b9aa48a0168b45a31a8fb0040b30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:97:ca:14:9a:8c:92:ff:24:9a:ac:89:3d:
23:77:e7:7a:2b:8a:7c:0f:c4:3b:40:b8:23:ac:56:
1e:fc:1b:f5:38:e8:fd:00:20:f8:44:18:5c:25:64:
00:15:ea:76:c5:73:48:43:20:3f:05:94:bc:e2:17:
34:07:7a:e9:74:7f:9e:47:0b:a5:4d:dd:06:52:27:
28:91:c9:00:ec:78:91:ce:bf:70:b1:15:5a:0d:97:
2a:0e:23:0d:d7:91:fb:1d:50:df:f1:61:1b:17:07:
98:a6:ab:45:8d:f5:04:92:36:d9:ea:48:95:47:58:
2b:90:a1:42:3f:bd:f1:ab:05:0c:a5:0d:c4:65:b6:
2f:20:7b:e1:29:c5:1f:6e:7c:4b:d2:f5:7d:f6:cb:
cd:f7:72:3d:34:10:7b:5a:b0:f8:c0:68:76:4b:d8:
d4:9b:f3:07:d6:13:16:0a:54:f3:74:bd:df:28:8c:
a4:f2:d2:e8:4c:a3:6c:03:ee:e8:25:07:aa:13:54:
d6:46:c3:8e:52:2e:26:56:fc:29:38:79:5b:77:1f:
03:cd:3c:14:51:db:6b:05:5d:19:a9:55:a3:63:2d:
73:30:35:ed:f4:2f:6c:a5:a3:80:ed:8e:02:af:97:
b8:88:69:10:de:a6:4f:19:7f:27:d1:ef:46:3c:c7:
37:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C8:A6:82:81:9B:9A:A4:8A:01:68:B4:5A:31:A8:FB:00:40:B3:0F
X509v3 Authority Key Identifier:
keyid:DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:86:b6:29:64:ab:5a:c0:97:f7:66:41:a2:95:2b:77:77:e9:
d8:e2:63:fb:59:4d:f0:8c:6c:d9:fd:d1:f1:bf:19:0e:38:4e:
36:74:f1:02:71:87:76:6e:e3:bb:51:f7:77:47:11:f6:80:d7:
49:c3:48:2a:60:5d:f9:08:1a:e7:1a:59:bc:b6:f6:f1:99:34:
b5:fe:18:9b:98:3a:98:59:dd:a1:87:c4:75:ff:70:9e:08:fa:
3e:55:d2:4f:7c:0e:d4:c1:f6:6d:83:6d:b4:60:94:20:6a:d2:
0e:e2:5f:81:4f:b4:42:fe:47:76:ca:91:c5:9e:cd:92:d3:75:
36:63:dd:f2:08:73:33:d9:c3:30:a1:f9:5f:c5:33:86:53:d5:
81:82:42:a4:78:9c:45:3f:58:89:0b:e9:28:72:b3:dd:06:7c:
cc:89:0c:0b:16:e5:e9:dd:c2:3f:92:76:43:79:a9:30:97:b7:
bf:04:45:2f:a9:12:12:e8:13:04:3e:24:91:99:be:17:67:cf:
35:cc:0a:b0:d0:c9:bc:9e:16:83:e7:f4:ac:eb:66:62:58:bb:
e0:d8:ec:b9:ab:4a:39:39:d7:e3:cf:57:60:90:f1:0c:e7:17:
8d:25:0c:25:d2:79:d2:f3:47:21:49:68:bd:69:a6:c1:d9:93:
8f:ec:00:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:04:58 2025 by rpki-client