Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: F5DbOl9haayQLUZO/9KxMor3XZHRwNKapgknA9HT9pE=
Subject key identifier: 50:2A:45:C2:51:02:21:32:68:24:65:20:50:77:1D:3A:2C:BB:84:8F
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 019A4E866A2BDA2440192459D7518671E2F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 172A
Signing time: Tue 04 Nov 2025 11:00:23 +0000
Manifest this update: Tue 04 Nov 2025 11:00:23 +0000
Manifest next update: Wed 05 Nov 2025 11:00:23 +0000
Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: 186qC4imNcJOvy/fmJ7pi/dMnhYefXXDj+Jb8fc4bS8=)
2: 6vn0S84Of3Am641RtQSWgEcI8LQ.roa (hash: liXU+EaS34eLz4h7mt5PwqdMf8bXjU0VdoViqn9V7yA=)
3: 8CNNYBbzQiDFPTM1tjqp5lUESM8.roa (hash: FKMYJ+6HiuRFIY6sbk4LB3mHseE0YsFT5neIU8ZSV0A=)
4: SgwPvwknub36baQ9KcDiF10XVjg.roa (hash: AqBX/OOtLCRwId7Bx3Diq3oyJG6vd4oLaGxEgTaatfA=)
5: VajIGedTAEjBNV3b8yhI3Gm_wwY.roa (hash: zWXkCVS1+asFBr2Z3nZVK8HEU5fThFspnuVO3DjbBl4=)
6: YJiS4qGuwLN_Sg41RSYko6CqAYU.roa (hash: 2h4yWiYaNQUsbtMp+bAg/Hr+KrDeiT3A2mqFfxK9yew=)
7: goC_YpQrwJcU48WyzOg3OlsUAbY.roa (hash: OHpeanfXRy8bamPYQwO5dLykWIe4C63dtCxwNHxZdBc=)
8: lXMs99__wPFL_tQdoxzgPhccZK0.roa (hash: OuWROGz9NUYwdhgN+POUZ2OWYBha2GAUM0PW+Sf4wFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:6a:2b:da:24:40:19:24:59:d7:51:86:71:e2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Nov 4 11:00:23 2025 GMT
Not After : Nov 5 11:00:23 2025 GMT
Subject: CN=502a45c2510221326824652050771d3a2cbb848f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:d0:09:cc:fa:74:8e:1a:a5:90:dd:a5:b1:
95:08:74:e3:74:d4:fb:6b:5e:e8:3c:3e:cb:39:45:
a7:09:0b:83:b9:d6:a9:6c:d2:89:2f:a5:15:5f:51:
69:4f:66:3e:94:2e:c6:7c:7c:a7:a3:f4:0b:3f:43:
9d:bf:81:8b:d5:55:0a:e4:4d:70:8e:ba:74:b6:40:
23:d5:87:10:55:01:74:21:f8:d9:9c:25:d2:6f:be:
3b:17:b4:c9:bf:9d:57:78:31:27:24:6a:46:4c:b0:
1a:d6:39:55:ea:ba:90:d7:5a:60:78:a7:69:42:48:
ec:c4:1b:23:98:5c:1a:62:5c:7a:2d:a1:2e:19:ae:
f1:cc:ef:8e:12:e9:50:30:d0:17:5d:ce:0f:03:e0:
67:59:02:51:2c:e9:5d:6b:8b:a4:42:a7:7a:4a:19:
b8:4d:8c:cd:b6:6b:fb:76:26:48:74:b3:25:00:65:
24:81:94:b4:c8:38:f3:48:93:96:97:cd:6d:2b:64:
78:61:35:9e:e6:60:30:1d:55:42:53:fc:b3:38:fa:
7e:c3:6b:29:49:37:5b:7d:7f:50:83:32:b4:b0:11:
18:3c:4a:39:19:9d:7f:50:d2:92:e9:d5:da:d8:0a:
e8:c0:c1:95:cd:f3:92:6f:2b:dd:cb:aa:e8:d5:6c:
6a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2A:45:C2:51:02:21:32:68:24:65:20:50:77:1D:3A:2C:BB:84:8F
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:84:40:bf:1f:3e:52:d4:d8:10:1b:1c:ee:54:a6:63:64:3d:
da:16:ed:ac:f5:87:75:db:87:d6:3c:c1:18:ae:0d:7d:a5:8b:
19:6a:e1:b2:4b:20:0a:0e:1c:a5:a6:13:72:75:0c:3a:3e:3b:
df:e1:04:3b:6a:56:95:50:7d:b6:ba:68:a0:5d:3f:d0:b6:34:
dc:58:68:b9:63:eb:9f:f6:65:1a:e9:17:6b:19:ee:15:9a:ea:
22:1e:db:db:e4:9d:82:aa:fc:c3:c5:2b:58:ef:08:b6:dc:e6:
fa:0e:d0:dc:62:53:ff:05:50:d1:a8:e7:42:a7:53:dd:aa:22:
14:4f:aa:05:59:1d:ab:e7:49:4d:c4:d7:e2:2e:93:01:2e:b9:
68:dd:19:6b:df:20:ee:3b:a7:af:68:0e:7d:bf:9b:5d:47:d1:
4c:ee:d0:18:34:53:20:85:1d:0f:b1:e1:8d:db:34:72:c2:f9:
37:30:41:17:dc:56:11:49:33:58:4f:b8:72:f1:f1:b6:8d:07:
a6:98:82:76:aa:c1:00:a9:be:04:df:e6:cd:d1:41:2d:16:ae:
f9:ca:cf:ef:18:d5:4a:91:c6:b2:6e:6e:aa:f4:fa:97:87:44:
b8:4e:dd:8c:ad:f2:c3:ad:05:3c:ad:1e:dc:6f:82:ce:c6:0a:
a2:35:41:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:36:17 2025 by rpki-client