Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
File: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json)
Hash identifier: HL9mqBS2rxntw3sl648R8voYbgoHYJWWRXVXOntCSqw=
Subject key identifier: 13:EB:86:80:AB:5B:22:77:88:D5:69:A9:E3:6A:AC:45:EC:50:55:18
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 019A4EF40344540B4672D73AC921885C1B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
Manifest number: 14D8
Signing time: Tue 04 Nov 2025 13:00:05 +0000
Manifest this update: Tue 04 Nov 2025 13:00:05 +0000
Manifest next update: Wed 05 Nov 2025 13:00:05 +0000
Files and hashes: 1: 29TbMLufIPxRE020kIvBxrijcXE.roa (hash: yaWCKyUE+f0tiisSqvZhHpxJTfa3UwVcLIOHWKNCXpA=)
2: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: PCOdxyMRezfWwxZT+9jORMYuU1zWM5pOCREksxQqm4g=)
3: EpG6DN4aBjhttZAw1Q1XQqE7-1s.roa (hash: l6KmPb3Emr7cpoLQVZzViHX9jNPkSHPfBrkC7M4zEOg=)
4: bCHjuq-GwNDHZjsTd3pAyP2Si4w.roa (hash: M+Njn6Jry+REmQlQYvUz0vQnUhP0EbBt8o0lYes6W+o=)
5: hn5_PzzfTec18eIUGShu0x__N3w.roa (hash: +8CUvj+aURe4BOcdllxHMI3BGLO88+PbI/02n/kq4Ik=)
6: pYZCrMGmxkKgeeR3OB7Sabq_PhY.roa (hash: xXgcQpyaaoiy7n7zCgLujfBrckf/0cL3u4clvozeQMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:03:44:54:0b:46:72:d7:3a:c9:21:88:5c:1b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Nov 4 13:00:05 2025 GMT
Not After : Nov 5 13:00:05 2025 GMT
Subject: CN=13eb8680ab5b227788d569a9e36aac45ec505518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e7:18:31:7f:40:72:b8:6a:5d:8b:75:41:e8:
d1:54:5c:15:78:c1:38:9e:83:92:06:4b:d8:f7:fa:
07:0d:f4:8b:09:c7:70:16:b7:e6:0f:21:94:b2:ed:
e3:39:04:7e:aa:78:4d:13:b4:be:31:d6:07:7b:ef:
36:79:9c:d0:ac:9a:22:d2:23:a5:f1:f7:06:86:28:
bc:ba:c3:63:5e:9b:a4:64:66:ff:c4:03:91:77:31:
6f:10:93:c7:ef:bf:d3:cd:d8:30:14:48:33:cc:3d:
e3:2b:9c:54:87:e2:a4:ef:3b:5e:c8:ad:53:c5:d9:
f2:fc:d4:a7:4e:d8:a7:6d:87:6b:de:b6:47:53:1c:
4f:80:a5:f2:e2:45:00:65:ab:ae:b8:a9:cc:51:3a:
a8:b4:6a:d5:28:30:f7:d5:ec:ea:95:bb:54:09:4f:
d2:f2:a1:eb:6a:ff:d8:ad:f3:a0:06:5d:2a:99:bb:
64:dc:b7:e4:78:3f:98:ac:cd:15:bc:3e:4e:b6:22:
60:1b:a0:4b:bb:2f:1d:c1:2e:03:1b:73:cf:87:81:
58:0a:e1:21:5e:d1:44:04:4f:7a:58:5e:47:4a:86:
75:59:b4:b2:9a:21:60:37:14:1e:86:6f:65:15:42:
73:48:6e:08:12:79:7d:fb:17:a3:25:1d:7b:ee:e6:
fe:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EB:86:80:AB:5B:22:77:88:D5:69:A9:E3:6A:AC:45:EC:50:55:18
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d9:33:56:21:fa:54:05:be:59:be:25:d0:ff:25:ab:00:fa:
f4:75:a6:22:c1:c5:d8:64:ec:59:6e:48:ea:f1:ad:7e:81:31:
0a:0f:68:c7:fe:4e:b2:93:00:b0:ba:c6:ab:1a:4c:3e:d8:95:
5f:57:78:50:32:6a:54:74:20:3c:90:2c:0d:4d:44:c7:4c:f2:
81:a1:7b:14:f5:63:05:73:fb:a0:b4:88:44:7d:02:20:06:9e:
fa:b5:ec:14:75:3b:c5:41:fc:f3:3a:89:6a:43:e0:e2:f3:bc:
71:ed:61:6b:57:0f:f4:36:89:03:09:9e:33:ea:80:ae:75:96:
42:8d:0e:ca:e5:73:6e:29:06:ea:e7:52:c3:cd:5d:4f:c4:55:
bb:ac:7c:93:b8:35:52:d0:9d:da:d9:6e:85:10:bd:bc:aa:8d:
1a:3b:9a:d1:91:a9:c0:d9:a1:81:1f:cd:64:05:25:59:53:6e:
0a:78:c0:3a:32:21:cb:dd:ea:4a:01:0f:f0:a9:bb:d6:40:ff:
9c:fb:58:ec:5f:85:d9:0a:e2:f1:03:c9:f0:50:bc:04:5b:bf:
2e:a1:f1:cd:cf:f2:08:cc:67:30:1f:ec:f0:6a:38:fb:fb:fb:
76:78:a9:c7:03:c8:27:90:34:28:60:32:fb:4f:27:20:8d:83:
6d:36:ce:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:54 2025 by rpki-client