Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
File: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft (raw, json)
Hash identifier: TyUOX79q02zomrsbjX4e8nnwfq/ipDBN28rU3wfxFQM=
Subject key identifier: 5A:AC:F5:CC:54:4C:F3:CF:63:58:BA:93:B4:35:88:45:06:88:F7:9F
Authority key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
Certificate issuer: /CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Certificate serial: 019A4E869C16CA0D118521BFAD8754F6FA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:35 +0000
Manifest this update: Tue 04 Nov 2025 11:00:35 +0000
Manifest next update: Wed 05 Nov 2025 11:00:35 +0000
Files and hashes: 1: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl (hash: qqk3rLWNTi8m+YXiMbknJWcfo2Ev9IbcXsVkNITdqI4=)
2: 5gG_Zi7UzMpPtarM4YgRPE41P0Y.roa (hash: h4U+fDKpUfUkNJ413pa9utTlvK0hGY5RmFrs2JwFVFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:9c:16:ca:0d:11:85:21:bf:ad:87:54:f6:fa:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Validity
Not Before: Nov 4 11:00:35 2025 GMT
Not After : Nov 5 11:00:35 2025 GMT
Subject: CN=5aacf5cc544cf3cf6358ba93b43588450688f79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:35:67:ef:ce:93:21:01:eb:c5:9f:19:05:
17:1d:40:81:7f:60:99:49:59:19:15:78:38:ae:4d:
8b:c5:a5:b7:a7:27:16:fc:72:38:b4:5d:c1:09:98:
5c:5b:1d:a0:c1:09:78:04:ef:cc:a1:4a:64:90:9d:
01:3d:31:9c:ff:3d:dd:4b:c0:64:2b:cf:34:9c:d0:
49:c0:31:32:79:69:07:91:57:65:3d:bf:85:97:f4:
b7:06:5b:16:a8:c5:91:95:b1:0c:e7:c2:c4:f1:8e:
d6:44:e2:f9:03:64:16:b6:ec:7f:74:65:45:d2:76:
77:2d:88:7b:31:5b:0f:50:a5:94:93:a3:0f:52:c3:
69:97:bb:c3:ed:6b:0a:e3:68:1f:43:13:13:cb:b8:
8c:ac:3e:1a:ef:32:51:63:48:f0:b1:6d:ab:bb:b3:
aa:50:25:13:a3:cb:6b:56:2e:fb:4d:86:69:9e:b1:
60:ef:5e:b9:e6:b1:e9:ff:5f:02:f8:19:67:b8:89:
99:74:db:a3:54:85:92:eb:06:76:4d:17:0e:25:a2:
0b:a7:57:c4:b1:a8:ef:73:87:c2:6e:3c:c7:e8:61:
c0:f3:85:7a:25:9e:0e:9b:81:4e:05:69:36:02:ce:
0d:bb:92:65:cf:cf:ba:3e:be:fb:2b:03:57:af:09:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AC:F5:CC:54:4C:F3:CF:63:58:BA:93:B4:35:88:45:06:88:F7:9F
X509v3 Authority Key Identifier:
keyid:DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f9:1f:e6:6c:30:5b:e7:29:e5:d4:76:b4:3e:7d:af:df:87:
31:47:2c:81:3f:8f:be:0a:24:a3:e8:bc:16:0f:e9:34:37:d4:
48:e9:33:1a:22:68:13:31:c7:96:30:fa:e0:4c:00:af:26:c6:
4e:26:bd:9a:e1:f5:2a:8a:b8:c1:a4:eb:77:d2:86:e5:e3:2e:
2e:41:ad:eb:ff:f5:ab:1b:1e:cf:4c:4b:74:2d:d5:b1:b0:aa:
93:60:d9:d9:f7:15:55:37:79:da:22:67:04:cd:2c:95:52:c7:
68:fb:c2:0a:0d:aa:7b:59:66:dd:7d:f2:98:e0:dc:d1:76:57:
18:69:fa:55:e6:45:54:9f:b5:72:57:68:d1:88:d8:92:8b:bd:
54:f7:9f:7a:6c:3e:cd:20:11:d6:f6:20:2f:ad:63:78:2d:9a:
48:67:22:a0:54:46:9c:ce:3a:0c:b6:3c:e2:26:aa:cd:1c:98:
fc:32:13:29:df:9a:a3:6c:db:37:18:b6:97:00:7d:54:5c:72:
d0:01:7b:ab:38:4d:52:18:ff:df:be:1b:3a:02:33:36:d7:57:
e0:60:9a:93:cd:7f:9a:10:47:4f:4b:db:cc:8b:82:85:20:cc:
4c:de:83:d8:4f:7e:a2:e9:b8:c1:61:4c:4b:8f:1b:63:d2:8b:
c4:c0:6d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:32 2025 by rpki-client