Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
File: 3Zgvl5otJeuy2rJlS4wnySjPWsc.mft (raw, json)
Hash identifier: SxB3xtFzbVX1Ts+3CdPZo75pnv/VPzj6T3H2CRx+S80=
Subject key identifier: 4F:A2:B1:DE:F1:72:3C:32:DE:F7:64:91:F3:DF:5F:83:FA:DE:E9:DA
Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
Certificate issuer: /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Certificate serial: 019A4C981B0DF37000DBFB9E3E1C6279D4D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
Manifest number: 16B8
Signing time: Tue 04 Nov 2025 02:00:27 +0000
Manifest this update: Tue 04 Nov 2025 02:00:27 +0000
Manifest next update: Wed 05 Nov 2025 02:00:27 +0000
Files and hashes: 1: 3Zgvl5otJeuy2rJlS4wnySjPWsc.crl (hash: a9lk7AHcaD+rENbNoInl/L5jraQZxIAUmUeuPA9Hcmo=)
2: 6BKOzeR_jkv8Td7naSCpGwK2cbo.roa (hash: NdsdWgq7FNtTGsjv+sGoOHpLX3rHnRlY3SsmvrWzKc4=)
3: gTmhFIzM7If-kzl01cWeEzcqqns.roa (hash: lUpkvjKsmC5D6MNw62q7fvgUR6asOsGbY3c+E0HzKW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:1b:0d:f3:70:00:db:fb:9e:3e:1c:62:79:d4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Validity
Not Before: Nov 4 02:00:27 2025 GMT
Not After : Nov 5 02:00:27 2025 GMT
Subject: CN=4fa2b1def1723c32def76491f3df5f83fadee9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:9e:3a:71:82:5b:21:4b:89:51:10:84:4d:
09:38:e6:84:22:3c:0a:68:2d:dd:c8:ef:7a:b0:38:
31:73:73:2a:52:55:7f:c3:36:25:42:f1:ae:0e:ec:
86:8d:70:91:be:90:00:61:9b:5d:bf:78:3a:65:a6:
aa:68:ce:cc:79:f0:d9:32:f1:7f:cf:a2:9d:62:83:
68:7d:39:24:2e:8c:d4:9f:15:2c:c4:c6:dd:8f:af:
1d:4b:99:be:e4:cb:1b:ad:1e:c7:b5:3d:09:c2:e9:
9b:4f:ff:5a:74:0d:28:74:f9:8a:09:4a:71:27:f6:
a9:0d:9c:e9:0e:ea:db:68:e0:94:e1:b4:c9:14:0b:
eb:dc:be:6e:25:b1:da:73:63:fa:45:0f:5e:90:3a:
0a:b8:13:c1:b1:77:3d:dc:21:c5:37:c9:7c:f1:8e:
34:2f:61:3a:20:ec:b8:8b:1e:4a:93:2d:86:42:ce:
28:b0:85:b2:14:e1:5e:71:0f:51:1e:b4:56:9d:d0:
5d:25:69:5c:f1:13:45:cd:1a:53:c7:59:52:3e:10:
d6:73:06:b5:a2:52:b5:05:09:8a:97:32:66:db:be:
20:96:94:01:fc:05:e4:33:23:ed:88:ab:3a:50:5e:
a5:32:b1:eb:13:c7:36:57:63:3a:ba:52:a4:24:ed:
1e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A2:B1:DE:F1:72:3C:32:DE:F7:64:91:F3:DF:5F:83:FA:DE:E9:DA
X509v3 Authority Key Identifier:
keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ad:93:78:f3:84:21:ca:7d:3e:93:06:20:72:75:fa:85:87:
42:85:b7:61:96:52:8a:37:c8:7a:13:31:40:7d:02:69:6c:00:
34:40:7d:5e:c6:41:3b:34:db:c7:26:b3:df:65:fd:50:29:41:
9c:bc:09:b1:b1:99:8d:6c:f7:a1:ed:28:94:ba:8d:3d:d5:fe:
d6:0c:b9:65:23:ba:9a:07:8a:3a:17:8f:72:2c:c3:30:f8:dc:
af:cf:17:b5:54:18:b6:0c:1a:cc:40:87:af:8b:fe:57:64:40:
d1:25:f2:ac:58:f3:64:ec:31:30:78:e7:3b:0d:78:7c:97:a3:
f7:0a:c2:57:d6:4a:3b:36:87:51:c5:7d:57:8a:59:a0:32:b1:
2d:c8:e1:a9:3e:15:11:b4:15:c4:10:c9:cb:30:b1:06:bf:2d:
60:43:36:00:8f:be:bc:62:ba:58:05:62:fe:62:be:2d:7e:a9:
94:e0:bb:04:3f:16:e5:4f:12:ee:fa:06:24:58:d6:92:a4:20:
6a:77:4a:16:09:c2:61:b7:9c:b3:48:2d:7e:6e:5a:a1:a3:1e:
a7:79:04:ef:48:c9:af:82:d7:20:0a:37:2e:19:9b:c2:49:c4:
10:d5:c4:51:87:73:b9:40:a4:82:86:ec:71:ac:a1:73:62:ff:
f1:11:e3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:50 2025 by rpki-client