Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: +dI4ps9odqnTaKcf7hCi0egMYZjSngGzs1zZflTYPCA=
Subject key identifier: 35:18:AE:1C:8D:45:12:7E:D7:24:08:AC:9A:9C:48:3C:97:82:6C:36
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 019A4C61579FB72E3E65AFF282884E987CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 10F5
Signing time: Tue 04 Nov 2025 01:00:39 +0000
Manifest this update: Tue 04 Nov 2025 01:00:39 +0000
Manifest next update: Wed 05 Nov 2025 01:00:39 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: X8n2qkbKWxYY58NLOQBsh5KwEfCXSgvUp+mm92c4VFk=)
2: 3UIDKEFXJEmxMbGydMkXkbNNCTY.roa (hash: pgCRcX9iheRr/OCGNJKjSelNy2YviytvLV7qgkrg4cw=)
3: 63KLq4xWCCCiZXA-wVIdQJ4PdKc.roa (hash: WWbZVpPXaQ4lgKGhfzlX90xgl3LD+KyLy9eYy0r99WI=)
4: DED9vt3vinq5uo7W8xf1qKgQoDQ.roa (hash: 4ofAOFKN04CoU+Upz0jkwmu0l7yf9aj6OLtWjSx3Wtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:57:9f:b7:2e:3e:65:af:f2:82:88:4e:98:7c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Nov 4 01:00:39 2025 GMT
Not After : Nov 5 01:00:39 2025 GMT
Subject: CN=3518ae1c8d45127ed72408ac9a9c483c97826c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:84:03:8d:7b:57:77:55:09:4a:3f:de:db:e8:
76:7c:11:25:3c:96:e1:fb:17:7d:26:be:17:0f:0c:
5d:50:02:38:5b:81:28:4b:5b:25:42:55:58:5c:e2:
ef:bb:88:3f:e2:a1:62:2a:1c:2e:07:34:61:7f:75:
4c:29:bf:81:07:ea:58:27:ca:d9:e7:85:af:56:31:
f1:1d:09:39:9e:7d:ae:7e:9f:88:ec:9b:15:45:9e:
29:94:d1:16:6e:00:0a:62:83:1a:5f:8f:e6:7e:ae:
46:06:0d:dd:b3:18:46:d9:f1:99:f1:a2:4c:56:4f:
f0:a7:29:10:34:cf:69:74:52:8a:25:a6:47:79:55:
2d:32:97:fe:01:ce:c3:c0:f2:f4:2d:ca:40:b8:e2:
1f:1e:05:dc:63:32:37:28:9c:77:2a:8b:9e:19:52:
9b:bf:4e:72:aa:4b:71:e7:c1:5a:8c:15:c6:48:fc:
11:3e:24:73:e9:91:f5:d8:d8:7a:9e:d9:44:ee:7c:
22:0a:7f:3f:93:1c:7c:22:31:17:bf:55:01:1f:e8:
ae:35:6f:5b:ba:a5:51:d2:99:27:d6:af:14:91:fa:
66:78:bc:9e:e8:cf:8d:5b:22:d3:69:35:1c:e6:62:
35:dd:48:20:2a:7c:c8:21:5a:eb:74:f8:d7:88:2b:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:18:AE:1C:8D:45:12:7E:D7:24:08:AC:9A:9C:48:3C:97:82:6C:36
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4a:2f:d1:0e:f4:a5:97:1a:9b:d5:b6:41:59:53:3e:b6:32:
bc:28:86:fe:2a:6d:59:b3:1c:c1:6e:0b:e2:99:fa:95:1c:ff:
c1:5e:c5:ae:ff:6b:b4:b5:d5:d8:fd:a0:b1:49:6b:d4:b6:a7:
96:c8:2a:9b:5d:80:f8:6c:86:8a:33:01:f1:b4:d6:ff:1a:83:
4e:6c:d4:fc:65:e8:51:39:15:a9:74:b1:76:bd:12:bc:59:d6:
d2:c0:24:02:51:9a:54:a9:5f:cb:92:1d:3b:12:7f:75:63:b9:
bb:f2:f6:e0:3e:f0:03:9d:b9:7e:85:3c:39:c3:20:8d:ba:7c:
01:d2:c2:60:9e:4f:77:08:46:0b:82:62:78:8c:a9:d1:86:c1:
77:b3:29:9e:62:57:10:85:39:d4:61:ff:40:09:4f:c1:80:59:
13:cb:6d:fe:36:4f:85:e7:a7:c7:9b:25:6a:88:ea:52:f3:7d:
df:e2:de:99:b6:0a:b6:4d:98:98:f6:72:0d:6e:32:c0:01:0a:
78:90:7c:2b:e5:ca:fd:27:98:e2:ce:46:3a:40:b5:5a:05:98:
1b:60:2e:01:a1:04:47:3f:c0:9d:24:53:c8:96:d7:63:77:ee:
a7:fe:a3:31:8c:52:24:bc:9a:5a:ee:8d:5b:03:09:85:62:24:
b8:d4:9d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:04 2025 by rpki-client