Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json)
Hash identifier: SRN+sL18R3ApeqMzfcX81zXev1cbFvzrX7b0E3FyIRY=
Subject key identifier: D2:6C:15:85:E3:A0:B2:13:2B:A4:E2:AE:FB:4A:0E:A0:B8:D9:F9:53
Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Certificate serial: 019A4DE1D36F04C5C07587E700210CB10421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
Manifest number: 1666
Signing time: Tue 04 Nov 2025 08:00:36 +0000
Manifest this update: Tue 04 Nov 2025 08:00:36 +0000
Manifest next update: Wed 05 Nov 2025 08:00:36 +0000
Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: 8zXg6MDkRGc1mFgkLuL1ozk9v758V8/BhcCCXmEBOYw=)
2: bPbl9DKxYJUxR3ZUVzukhGWYurM.roa (hash: FAnYMWhXeH8TjI8m2ivn5nzVc0hLKvZ4QbjQQh/aekU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d3:6f:04:c5:c0:75:87:e7:00:21:0c:b1:04:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Validity
Not Before: Nov 4 08:00:36 2025 GMT
Not After : Nov 5 08:00:36 2025 GMT
Subject: CN=d26c1585e3a0b2132ba4e2aefb4a0ea0b8d9f953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:eb:62:87:2c:ca:82:82:47:d2:f5:be:ae:99:
94:d8:99:b0:57:0b:be:54:2e:79:bb:5a:88:df:43:
be:b9:96:fe:d3:86:33:97:12:45:eb:52:43:a3:fe:
03:5f:50:fc:31:9f:3e:90:3a:8f:2a:67:a1:c7:67:
7d:f1:eb:b0:1b:82:22:79:c3:c2:df:06:5a:81:1d:
57:30:49:17:24:92:24:ce:5c:c9:0b:bc:01:2c:8e:
f4:38:9a:dc:39:c1:82:f6:35:dc:d9:82:ac:22:6c:
fa:20:f7:54:ef:54:6c:fa:6f:ce:d3:40:ca:cf:e1:
09:5b:5e:4a:01:1b:a0:61:1f:5c:8e:d5:d3:be:39:
5f:ea:aa:75:95:13:49:9d:70:08:01:24:3b:19:bd:
d6:8e:30:7f:aa:25:65:dc:c2:d3:77:6f:1c:b4:14:
a0:97:0b:f3:70:a4:94:31:62:5d:c0:ef:6a:da:d3:
07:3f:26:18:d6:40:87:5b:71:6d:4b:5e:aa:f7:16:
26:30:fe:cb:11:b6:b8:e4:bd:d6:02:45:2a:ce:8e:
aa:1a:8f:56:35:a8:81:8b:3d:8f:4f:56:45:6b:1a:
7a:19:4b:39:37:eb:bf:93:74:2a:1f:7d:6e:38:0d:
39:45:53:89:b2:c0:81:9a:2f:62:3a:3d:48:0f:60:
6c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6C:15:85:E3:A0:B2:13:2B:A4:E2:AE:FB:4A:0E:A0:B8:D9:F9:53
X509v3 Authority Key Identifier:
keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7f:6c:00:a7:ad:f4:32:c0:2f:e9:99:62:d3:26:4a:c5:3a:
4a:7a:19:f0:ab:4a:60:20:9f:a3:e2:ab:78:48:8c:e3:59:96:
c1:dd:a5:2c:7d:8c:8e:50:ee:36:69:1d:d1:48:90:c1:68:a1:
56:9d:04:01:58:f7:b7:2d:1d:7d:c1:27:46:72:4e:be:82:d5:
5e:38:25:2a:f4:cf:3e:66:12:8d:13:26:c6:c7:fc:a1:67:59:
67:dd:74:5f:86:d9:d1:96:4c:76:78:da:c0:64:61:ad:d6:7b:
53:74:f3:23:65:cf:a8:ac:3d:bf:1a:9d:c9:9d:80:43:a1:20:
73:98:98:cd:01:7a:7c:f4:88:a5:61:c0:48:5b:5c:e4:72:e1:
74:ae:7b:68:f4:0a:25:be:1c:07:ed:28:af:09:5f:a4:c6:d8:
d4:42:39:9d:c7:22:63:e4:71:ae:68:26:ab:a1:f7:5e:07:5b:
52:06:18:ef:33:7c:87:a7:7c:b7:a1:dc:1f:8e:01:50:1b:e9:
28:31:e1:fa:5a:a6:49:eb:15:17:c0:60:86:75:6c:f0:33:41:
ab:26:94:50:e0:c4:ae:82:f1:3d:39:1c:b6:81:85:38:f2:21:
09:67:d4:66:ed:7c:53:03:72:ec:af:8e:11:26:f9:b1:83:a1:
f2:99:55:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:30 2025 by rpki-client