Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
File: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft (raw, json)
Hash identifier: p0s9jRdMVt/EoOCW8SVPqIb1w6L3pI9OlgTDJEPtzpA=
Subject key identifier: D0:14:FE:5B:D0:DD:14:31:C6:3D:73:67:3F:F2:9A:85:77:C0:E7:BE
Authority key identifier: DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
Certificate issuer: /CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Certificate serial: 019A5564720D88AE733462ABA67632DFD8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 19:00:37 +0000
Manifest this update: Wed 05 Nov 2025 19:00:37 +0000
Manifest next update: Thu 06 Nov 2025 19:00:37 +0000
Files and hashes: 1: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl (hash: Hn/2f1CC8zxJcV4PFUK00taCWQEunkDy/VmXYLwh4Rg=)
2: aKn5wX9zpC6koraTjDd3gqhXdek.roa (hash: UCw+VdmiwuxVJRZ+XJIJQKAozSvDmGpk4Pb8r0Al3WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:72:0d:88:ae:73:34:62:ab:a6:76:32:df:d8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Validity
Not Before: Nov 5 19:00:37 2025 GMT
Not After : Nov 6 19:00:37 2025 GMT
Subject: CN=d014fe5bd0dd1431c63d73673ff29a8577c0e7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:33:90:fe:e3:bc:c3:01:bb:43:f2:fe:ff:
ab:a8:d1:86:b3:05:04:4e:59:24:f8:2d:ed:42:96:
a9:ec:7f:be:65:c7:ad:33:79:0c:84:4e:43:cb:14:
18:fc:f5:b4:5c:ba:82:b5:bb:40:a5:35:ff:8b:96:
b7:37:82:73:33:f5:9e:0d:3e:56:a7:c9:30:c2:62:
17:47:a9:2b:76:bd:5d:41:c2:83:c9:d4:43:b5:59:
dc:ec:a8:12:3e:cd:7c:91:f2:29:42:cc:53:17:62:
c9:8f:2c:ca:1e:8d:a7:e8:df:4b:ba:78:72:4d:55:
57:f0:94:dc:92:fb:9e:57:07:f6:fc:4f:aa:e9:2f:
b4:95:6b:29:60:ec:f4:48:bc:00:f0:13:ed:b0:39:
6b:ed:30:4a:93:1d:03:f3:71:e3:9f:4f:64:ad:4c:
15:72:8b:39:e8:70:e1:0d:c3:ad:c0:3d:82:20:83:
3f:fe:c0:fb:51:2b:da:9e:7b:78:ab:fe:44:00:19:
88:1d:07:c4:af:2a:b7:67:0a:0e:24:f7:03:80:bc:
75:a1:bd:85:78:16:82:02:c0:0b:cd:ad:dd:9b:d6:
44:02:e8:02:00:85:ed:e1:df:dd:9d:9c:43:20:da:
73:ed:6b:2b:52:cb:40:18:19:ec:7e:0c:71:6f:c0:
f8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:14:FE:5B:D0:DD:14:31:C6:3D:73:67:3F:F2:9A:85:77:C0:E7:BE
X509v3 Authority Key Identifier:
keyid:DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2e:a3:93:97:aa:dd:eb:58:6b:41:26:07:7f:a2:67:99:f8:
cd:90:44:79:cd:66:3f:2a:ac:8e:71:6c:7f:ad:1b:7c:97:b8:
0e:bb:dd:60:be:40:e8:87:2b:8f:97:63:c5:ad:c8:b9:fb:5e:
1b:cb:3f:01:2c:86:42:dc:0d:41:d2:67:04:86:c2:62:55:45:
02:64:ce:3e:80:87:fb:fa:6e:bf:eb:65:3b:fb:d8:63:7f:3c:
4f:89:7c:3c:17:ad:7a:b0:57:93:a8:91:82:af:d4:c8:0a:d5:
82:29:c7:09:10:be:1d:c8:a3:8d:15:42:61:c4:94:48:65:7c:
4b:f4:fd:ba:b0:80:b8:9f:83:36:76:76:ba:c8:cc:25:6d:db:
4c:c3:47:ee:61:0a:9c:e9:c2:92:6f:a7:69:b0:d0:60:69:52:
bc:2c:7c:1f:c9:ca:8e:4b:ba:3b:6b:04:c7:06:e3:66:29:7a:
f8:ac:c8:e5:7d:c0:09:c1:bc:e7:34:06:6b:9f:5a:af:b0:c2:
e7:2e:be:8a:23:73:99:cb:f3:97:5c:07:df:a9:c7:50:6b:77:
18:5e:e5:4f:5c:fd:79:40:88:e3:b6:6e:aa:48:ac:0a:f4:f1:
92:3f:c8:c5:f2:14:5c:5b:6a:eb:74:d0:a9:3e:bf:8e:57:ae:
ec:e3:cb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:38:50 2025 by rpki-client