Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
File: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft (raw, json)
Hash identifier: SLCJTvzCZApIHVzflezBmw3oMu2jglQUr53teKkfS6o=
Subject key identifier: 94:89:74:E0:2F:39:38:64:09:B1:21:CE:E0:BB:31:F5:D9:A8:9F:C8
Authority key identifier: DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
Certificate issuer: /CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Certificate serial: 019A4EF56785CD96C9AE65A288BFB6CD20F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:36 +0000
Manifest this update: Tue 04 Nov 2025 13:01:36 +0000
Manifest next update: Wed 05 Nov 2025 13:01:36 +0000
Files and hashes: 1: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl (hash: IPCudh8/x9IcGGxqpkQZ2068nXvmG0DpgFxCz6sWDfc=)
2: XQd1c0isqEth9h07f_gdrmhW6kM.roa (hash: WoVAodjsDqf5sS0K6LPcCANkMFHDsRKs5Hf+/9kb228=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:67:85:cd:96:c9:ae:65:a2:88:bf:b6:cd:20:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Validity
Not Before: Nov 4 13:01:36 2025 GMT
Not After : Nov 5 13:01:36 2025 GMT
Subject: CN=948974e02f39386409b121cee0bb31f5d9a89fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b2:07:cf:12:ce:5b:55:c8:a1:e6:b3:65:59:
61:db:9a:e4:85:43:d1:f3:d1:89:71:22:67:4f:12:
8c:c6:f3:59:ae:2e:0f:ca:7f:72:a7:03:24:a7:5c:
d0:a3:a2:fa:85:bf:ca:fc:81:44:27:ae:fd:4b:e4:
72:de:8c:70:ae:05:7b:ea:f0:58:78:41:52:0e:26:
a6:b7:56:74:81:7c:ca:5a:29:91:41:78:c1:3b:b2:
7a:23:4e:e2:93:c5:d1:6b:35:d1:35:12:91:77:22:
ce:e9:1c:4b:fe:cf:5c:a6:b0:c0:19:c6:b8:c9:7c:
24:bb:d1:a5:f7:3b:d2:0a:ae:c4:15:b5:3d:30:08:
29:9d:ad:6f:7b:20:3a:54:6c:19:d9:a6:9d:74:2e:
4e:b3:4f:0e:58:29:71:0e:c2:5a:f9:13:eb:d0:dc:
fe:d7:c5:b0:ea:49:45:06:67:7f:7d:ed:51:10:81:
c9:8f:7f:de:b2:d6:20:38:a8:e9:4d:32:ea:17:03:
44:5e:4c:3d:91:d0:4b:b1:eb:fa:dd:90:15:f3:38:
9b:2f:b4:57:96:81:95:00:39:1a:89:4d:92:b1:5e:
f7:c5:f1:65:8d:04:b5:ee:d3:00:2a:8c:32:0e:e5:
74:a3:1f:fd:3c:57:f0:a8:6d:85:92:9d:d1:12:ff:
af:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:89:74:E0:2F:39:38:64:09:B1:21:CE:E0:BB:31:F5:D9:A8:9F:C8
X509v3 Authority Key Identifier:
keyid:DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:08:ac:49:53:c4:51:d4:05:8a:a1:77:a7:d0:88:0e:a4:3c:
f6:57:1f:30:56:1c:ab:9f:18:6a:da:06:4b:1c:3e:3b:bf:6d:
3a:b9:20:f6:00:2d:6f:9a:42:32:94:a6:65:d8:6a:6f:d7:a5:
00:8c:93:f2:2e:81:3c:43:43:8e:b8:1b:3a:c9:c3:72:15:5b:
65:17:bf:2b:6c:b3:20:a3:43:38:54:4c:39:81:21:71:b4:33:
47:db:82:e7:00:ca:a2:16:ad:6a:83:7d:d3:c5:2e:bf:64:5d:
e0:8b:ac:46:9e:43:ed:6e:15:2f:2f:f3:16:21:0c:67:6b:0d:
6a:e7:7d:03:0f:eb:0b:92:e8:fc:59:8c:20:f0:d5:79:b8:b2:
ae:2a:7a:3c:60:fe:21:ea:58:59:3c:74:8b:b6:3b:bb:06:e6:
37:b2:bb:aa:be:c5:21:55:23:8b:3b:80:19:39:fd:1d:25:61:
fa:c7:f8:87:d2:a7:4a:3b:b1:24:24:88:b0:f5:ce:2f:a2:71:
a8:26:c9:a2:4a:3a:03:0d:f9:50:c0:6b:28:02:3c:b2:17:bb:
8b:dc:63:f0:ba:a3:e9:b9:5d:c3:04:0f:e9:8f:3e:5f:71:ef:
31:cd:91:a5:6a:74:10:41:e3:10:4b:51:53:65:0c:41:10:18:
31:9f:ca:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:53 2025 by rpki-client