Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier: M5axlxe88hJ4hPYt++v+xVcB+NOqxHngCFIjzG6WwGE=
Subject key identifier: 93:2D:D4:3B:25:EC:95:5D:69:35:79:5D:E8:97:CD:9A:CF:D6:52:12
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial: 019A4D3CCE93A1798506E1053017BA5D380A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 05:00:21 +0000
Manifest this update: Tue 04 Nov 2025 05:00:21 +0000
Manifest next update: Wed 05 Nov 2025 05:00:21 +0000
Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: unF3+ipmjMXQxo4monzoejnf/107jc/53FdGtNLaREo=)
2: CgFc8x26QM3VY1KiLgccdsxhrXo.roa (hash: P9EWdQX/EOCp7WZ5gfsQmoM4qU0udbuMuOqDFw597IY=)
3: RonOUjE1P34U6vbbFs9w9AsGyN0.roa (hash: fOrx68LqSTvTWV0sMnHRK4WODfXfA787GTb+IyVk3b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:ce:93:a1:79:85:06:e1:05:30:17:ba:5d:38:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Validity
Not Before: Nov 4 05:00:21 2025 GMT
Not After : Nov 5 05:00:21 2025 GMT
Subject: CN=932dd43b25ec955d6935795de897cd9acfd65212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9a:08:7f:99:21:0c:f0:69:9a:e9:a7:d1:f9:
0d:27:96:48:7b:46:d0:3a:58:02:87:72:f5:d8:f1:
64:1d:6b:8b:1f:c0:97:a0:bf:f1:0e:90:ec:20:ee:
84:5e:62:34:31:50:c2:25:78:7e:5e:f6:66:b8:1a:
44:68:6c:af:44:46:cb:10:36:c3:5c:8b:48:22:1d:
b5:84:4f:29:c2:58:dd:c9:1a:87:83:67:82:f2:f9:
68:5e:ce:fc:a1:3f:77:4e:24:f8:d3:fe:3d:29:d3:
ba:a8:75:25:ec:ff:f6:5b:3f:9d:e3:29:76:f3:d1:
50:5c:a1:4f:7b:6c:05:78:6c:c0:42:9c:ff:d7:be:
fa:0a:b8:c9:d0:34:37:c2:94:98:22:44:08:26:29:
1d:d0:bc:ba:41:0b:c1:10:01:ca:2d:4d:e6:c8:91:
c9:e1:c9:82:1f:20:d3:4b:d8:d8:fa:04:f7:2a:40:
a6:a8:11:13:25:eb:02:2a:63:14:4a:1b:53:3d:1c:
91:3a:d7:21:34:2e:23:44:25:d8:de:21:43:59:80:
a5:0e:97:d0:5d:37:92:09:c6:09:84:19:e5:6e:8d:
79:85:01:69:f9:90:3f:37:e4:8a:03:4f:eb:cc:08:
98:76:4a:9d:6b:5d:52:f9:8b:51:2b:db:41:80:b8:
14:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2D:D4:3B:25:EC:95:5D:69:35:79:5D:E8:97:CD:9A:CF:D6:52:12
X509v3 Authority Key Identifier:
keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:83:4d:ba:d9:d9:49:66:42:8a:78:6f:37:2b:e7:cf:96:7d:
21:21:22:12:bc:71:46:42:78:43:4b:33:fd:e0:53:57:89:77:
c6:e9:00:b1:71:b9:9e:e0:5f:45:27:c8:c3:5e:94:5e:fc:0a:
d1:cb:ff:85:23:56:fe:fb:2e:c6:8a:54:cc:a9:6c:db:50:65:
18:3c:f7:25:90:7d:9d:85:b5:11:69:db:84:3c:75:ef:73:80:
de:39:b4:82:b6:f9:37:df:d0:61:94:28:5f:8a:af:d4:6b:02:
6a:21:11:9f:cd:b7:29:e2:65:df:61:d8:a3:51:02:e7:f8:e8:
c5:b8:b0:c7:fd:b5:ab:e9:73:21:ce:7d:92:77:26:bb:70:79:
bb:7d:1e:35:f7:f3:b8:a7:65:7f:c8:15:b7:e8:80:0c:d8:e5:
05:c0:fc:4a:e9:ab:cf:f9:28:d4:e4:ff:e1:37:b7:56:1a:18:
42:c8:4f:9c:f1:c2:52:c2:29:5e:d0:50:be:7a:c5:5a:2b:b4:
4d:8d:aa:ae:04:34:03:5e:b6:89:7b:a6:a2:25:91:5d:13:7d:
39:cc:d8:e7:88:d2:6d:48:b5:1a:03:6c:14:5c:b4:89:29:48:
76:24:33:e8:bb:8c:be:9b:79:3f:8a:5f:10:c0:64:86:eb:32:
49:6f:a2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:35 2025 by rpki-client