Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
File: 3ciCMsB94s3Llur551FVC6pmxYg.mft (raw, json)
Hash identifier: nO8I4NfsJsbId4/7eT/rqom2YNJibf/ul9NesEYkwp0=
Subject key identifier: F3:0E:5B:63:E4:DD:93:ED:2A:92:46:5F:8F:A4:2E:FF:6E:A4:B5:98
Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
Certificate issuer: /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Certificate serial: 019A5262E53B7643FD22423DCCBB9E246ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
Manifest number: 0E71
Signing time: Wed 05 Nov 2025 05:00:04 +0000
Manifest this update: Wed 05 Nov 2025 05:00:04 +0000
Manifest next update: Thu 06 Nov 2025 05:00:04 +0000
Files and hashes: 1: 3ciCMsB94s3Llur551FVC6pmxYg.crl (hash: hpSDWPVFnN8cNo28lPSUU0ASV4Usfz0WqpvnTv4fbBE=)
2: OK60eEXoBVz15pEwVmX0yYULZbk.roa (hash: irOuBXNJpmhp7Bb40BZggz4rGVp00h/PvH1AyeAmbL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:62:e5:3b:76:43:fd:22:42:3d:cc:bb:9e:24:6a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Validity
Not Before: Nov 5 05:00:04 2025 GMT
Not After : Nov 6 05:00:04 2025 GMT
Subject: CN=f30e5b63e4dd93ed2a92465f8fa42eff6ea4b598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cd:f8:c6:5e:6a:bc:8e:e2:c6:12:7e:3d:1f:
e4:bf:80:fd:d3:f0:20:c2:4a:f6:fd:2f:9a:b8:f3:
1d:7d:7b:a6:3c:ad:f8:ff:95:cf:28:e0:88:51:89:
46:b0:df:48:aa:cf:58:3b:c6:ff:10:eb:33:d5:ea:
3d:f6:ba:3e:f4:97:c1:a0:52:78:45:88:63:64:e8:
7b:8e:37:8d:2b:39:13:f4:73:64:50:7d:c0:ca:75:
86:36:9e:7d:11:c0:15:d1:f0:32:ee:f3:63:0f:38:
a6:b4:a6:a4:43:da:ae:94:c6:7b:71:05:31:77:35:
ef:27:71:7c:32:6c:6b:69:cd:6c:d6:44:c0:31:03:
19:c4:b3:08:28:fb:37:6a:8b:f3:c4:03:0d:82:97:
a9:f9:32:1b:c9:26:5e:c7:cf:02:84:31:f8:f8:8c:
09:c7:7f:cf:82:b5:d1:f3:ab:33:33:c5:d4:67:4d:
11:78:d7:43:fd:47:a1:bb:63:38:dd:f2:ea:9a:2e:
45:14:7d:f6:e5:9e:1d:d0:ef:16:cb:ba:93:08:9c:
a0:87:2a:85:69:57:f3:84:53:35:d4:ac:ad:d6:92:
49:1f:cb:03:df:e7:1b:96:44:ff:14:8b:d3:05:75:
23:29:43:60:c0:ec:5a:51:2a:75:d7:b2:9c:08:f7:
49:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0E:5B:63:E4:DD:93:ED:2A:92:46:5F:8F:A4:2E:FF:6E:A4:B5:98
X509v3 Authority Key Identifier:
keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ec:10:c3:34:21:37:08:f1:73:0d:8f:8b:75:fb:9f:1a:c7:
ba:b7:44:eb:60:f1:5b:f5:43:1c:49:d1:c7:64:fa:ba:41:46:
a9:56:f1:56:e3:0c:2e:ae:d2:c2:d1:53:f3:ae:77:53:94:b9:
45:79:e5:05:55:5e:b3:fc:12:58:b9:7f:bb:8e:05:8f:c5:7b:
05:27:ff:02:45:5f:4b:1d:e1:f3:79:70:01:70:2f:98:95:7d:
75:c3:3d:42:8b:28:e0:10:55:da:09:7b:18:bb:cb:b3:d2:07:
63:27:2a:5a:84:fb:b3:95:9c:d0:ae:06:29:bf:ee:69:1b:ea:
a5:1c:ac:ea:1c:32:98:8b:d7:06:31:0b:99:58:f7:f8:6d:a7:
fc:d8:23:e0:3c:ac:21:6b:47:8c:28:dd:e5:73:4b:5f:42:b5:
22:03:04:42:0e:bc:fb:7e:63:80:8f:84:33:3c:f9:15:e6:b5:
3f:32:dd:ca:1b:2a:8e:7f:25:4e:c2:e0:78:00:59:bd:6b:ff:
b5:c5:61:02:57:33:bb:c6:9b:91:d4:69:39:35:5f:84:f7:7e:
f2:32:1a:89:2a:12:13:6b:ad:8d:d0:44:ee:5c:0a:2e:03:62:
56:52:9a:65:32:ac:ba:92:c6:3d:00:40:b5:45:62:79:67:86:
45:a1:75:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:25:55 2025 by rpki-client