Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
File: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json)
Hash identifier: uW2ODwx/BgBR/6tCi4tOyf5QyuVaLk7z7+IHROWIu44=
Subject key identifier: B7:08:93:DA:F9:D4:3D:A7:01:12:0A:1B:39:1B:5C:F7:93:6D:44:A5
Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
Certificate issuer: /CN=dceb548762c7d4caccb616d819ce95cf627b2021
Certificate serial: 019A50072F2CFFA138ECD01A55AF87E3047A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
Manifest number: 1350
Signing time: Tue 04 Nov 2025 18:00:39 +0000
Manifest this update: Tue 04 Nov 2025 18:00:39 +0000
Manifest next update: Wed 05 Nov 2025 18:00:39 +0000
Files and hashes: 1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: J2vi6pJGCYibzQnRE2CrwC8aoqPSNRIB1B/jRoZc3uU=)
2: yvHmtz-vd__QGyK6PoEkr_n-Dok.roa (hash: K4rgADfkHdT22x5s6vfWG3HXGINmJUAubhmd+BDk2vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:2f:2c:ff:a1:38:ec:d0:1a:55:af:87:e3:04:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021
Validity
Not Before: Nov 4 18:00:39 2025 GMT
Not After : Nov 5 18:00:39 2025 GMT
Subject: CN=b70893daf9d43da701120a1b391b5cf7936d44a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:83:d0:89:e8:41:7c:90:9b:db:59:c7:b8:
c7:34:42:d9:e7:b8:12:2b:81:b7:5a:0b:37:db:48:
31:81:c5:3b:71:af:55:81:62:17:26:9d:be:76:e6:
c3:07:84:fe:56:be:6c:5a:59:02:27:eb:c6:4b:55:
f5:8c:e0:5a:f4:50:6e:28:f3:f6:94:bf:5f:d5:ac:
cf:99:57:5f:ea:5e:ad:71:2c:9a:83:6e:b0:f2:2e:
63:2d:8c:1d:10:5e:4d:15:cb:3d:32:5a:a8:2d:27:
74:07:02:83:51:bd:94:02:ec:31:b7:08:31:e9:eb:
42:5f:17:8d:4f:29:18:6b:29:2b:02:5a:67:94:41:
2c:fc:0d:21:ce:b9:5e:5a:b2:79:58:ad:41:a0:c9:
9c:3d:a9:01:2b:66:3c:8c:43:64:8b:6c:54:cf:a8:
00:c5:70:a4:43:11:b4:77:27:06:f8:27:52:e9:9b:
ca:5e:7d:17:0e:ec:61:b6:08:1b:87:c7:97:83:3f:
43:4b:e7:b5:e3:cd:db:11:a5:1f:4e:fd:d3:12:e3:
4c:10:1c:7c:6c:01:d7:ba:b4:f0:fd:49:49:34:24:
74:79:7d:02:05:f4:7f:30:bc:86:3b:48:f6:74:2f:
d9:4d:69:4a:3b:dc:ba:77:8a:64:ab:79:34:b6:e5:
49:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:08:93:DA:F9:D4:3D:A7:01:12:0A:1B:39:1B:5C:F7:93:6D:44:A5
X509v3 Authority Key Identifier:
keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b9:06:94:1c:43:16:b4:f4:91:c7:3c:49:cf:4e:68:d1:6c:
dc:6e:c4:07:99:2e:49:4a:43:c4:22:18:58:88:95:f8:c8:82:
4a:03:eb:51:f1:03:3b:f7:46:0d:ff:15:13:76:b8:88:dd:79:
3b:12:37:18:83:4e:65:99:77:f4:08:3e:33:9c:a9:18:82:ea:
f8:c3:fa:a8:66:02:bc:71:41:af:9c:c3:9d:f4:cf:1e:71:27:
dc:54:2c:1a:09:a4:48:79:42:80:68:c2:43:a7:a9:5a:e9:97:
0f:25:a4:74:9e:3b:08:88:81:d8:ce:6a:bd:3b:5c:88:ab:dd:
7e:68:71:8f:2b:9c:ad:eb:4c:bd:eb:90:3c:fc:e1:9d:a6:e2:
b6:d6:0c:df:74:2a:d6:22:7d:b5:d6:fa:a7:03:73:2d:19:f3:
7b:86:b0:1e:16:31:0c:4e:bf:89:36:7a:25:2c:4e:6a:53:35:
db:ac:0c:b0:7f:5d:05:7a:6d:4e:42:ba:c9:0e:98:27:8e:7b:
91:7f:70:b2:06:09:7c:d2:7a:ed:b8:e3:cf:4e:73:d4:9b:de:
0d:91:a1:aa:90:8e:48:e5:bf:f6:eb:e8:71:d8:76:31:40:07:
05:e7:2a:59:9b:6b:cd:26:40:02:88:17:e3:f6:70:b6:e9:d7:
c5:a4:3c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:38 2025 by rpki-client