Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json)
Hash identifier: 3DSoUSEn8B2Mb1bIn3QQK2dgRlTO2kI31o15cCeiaRs=
Subject key identifier: 0E:64:20:3D:FF:63:60:D1:8C:67:61:E5:3D:8E:0A:58:6E:72:C9:49
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial: 019A4E4F551A662E32AF25BD119476574990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
Manifest number: 0A8A
Signing time: Tue 04 Nov 2025 10:00:13 +0000
Manifest this update: Tue 04 Nov 2025 10:00:13 +0000
Manifest next update: Wed 05 Nov 2025 10:00:13 +0000
Files and hashes: 1: 05EOtNo-Yw22y8nOEhjh34kR-xs.roa (hash: bx1cLzgI6GeSkKgZhlF0GUx8NZh0BLXhkqY0eigb2zc=)
2: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: 1S8c0e0TCHu9w16RIEelZG9CTr+MpQeQmI0DnmOorR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:55:1a:66:2e:32:af:25:bd:11:94:76:57:49:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Validity
Not Before: Nov 4 10:00:13 2025 GMT
Not After : Nov 5 10:00:13 2025 GMT
Subject: CN=0e64203dff6360d18c6761e53d8e0a586e72c949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:da:b8:c1:1a:b6:c8:f7:a0:e5:76:38:f7:73:
eb:57:e6:d7:e5:14:71:7d:97:af:70:8e:f5:6a:71:
36:09:27:fc:7e:af:29:4a:27:1e:ab:05:77:6f:aa:
5c:2d:bf:07:b4:88:8d:88:1f:d1:e6:20:4e:71:7d:
7b:67:97:f3:89:17:64:c1:d4:7f:ee:a5:34:b0:0a:
57:64:51:5c:4c:cb:c2:16:6f:2a:fc:b0:77:e9:4c:
46:c7:a4:ff:d1:c3:95:be:91:cf:31:ad:0b:fc:ac:
89:38:06:2c:0f:e8:53:b4:e3:49:ab:f4:cc:5f:bb:
00:99:d2:ae:f2:d9:38:31:92:7d:79:4f:8f:66:8c:
88:0d:b8:98:32:e6:ae:40:45:b2:a6:ec:0c:cd:15:
e0:ce:8c:b6:6f:f5:5b:df:46:5f:9b:37:2c:2f:b0:
69:c0:c3:b5:65:fa:9f:68:ca:64:16:d0:50:59:7c:
8b:b1:09:5a:7f:a1:75:f1:75:92:75:28:3b:a5:2b:
62:ba:83:84:bf:c8:3d:14:dc:c9:15:7c:ea:d3:fb:
4e:76:c6:ed:02:84:d3:10:3d:5d:54:f1:40:d2:b4:
01:88:a6:5a:32:7c:28:47:0c:e1:ca:ff:f7:9e:14:
30:9e:7a:d8:9e:9a:dd:9a:1a:47:27:31:3c:d6:7b:
d2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:64:20:3D:FF:63:60:D1:8C:67:61:E5:3D:8E:0A:58:6E:72:C9:49
X509v3 Authority Key Identifier:
keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:36:72:56:38:a2:6e:56:87:f2:a3:92:53:5f:b3:d3:48:7b:
c3:76:9a:f6:13:b1:65:3e:90:4c:58:d3:03:e3:7b:ae:45:97:
f9:1f:ec:ba:6d:c7:55:a9:3a:77:b5:e5:7e:48:1d:39:bd:7a:
af:13:cc:2e:64:d3:c1:51:f5:b4:d8:64:61:27:78:e1:37:91:
45:6b:cb:58:cb:7c:e6:ea:b8:6d:f5:2d:91:b9:21:4f:e4:ce:
04:c1:56:d8:e6:29:02:b0:c0:0f:7d:35:1f:8f:7b:ee:9f:8e:
ac:e9:0b:0f:97:c0:c3:0a:ec:7d:9e:23:4f:71:9d:5c:3e:22:
38:4e:d9:96:ec:51:9c:d0:05:fe:9b:2e:85:0e:1a:66:18:a2:
96:94:d5:ee:5f:44:5e:ae:1d:e4:6f:61:13:d5:67:fe:49:a2:
b4:29:dc:2d:97:94:96:2a:74:d3:5e:26:28:8b:c7:3e:57:e1:
6b:39:31:cc:f4:84:57:8f:b7:b2:54:7e:fe:ec:04:31:52:07:
87:2d:f6:37:7c:7a:71:ec:00:39:59:2b:ff:a5:6c:ff:36:c5:
1b:ba:02:ae:dc:20:82:fd:b2:19:94:8f:32:dc:af:b6:ee:dc:
14:09:15:b5:4e:21:34:d7:51:47:b5:41:49:ec:90:76:01:b9:
3c:a2:d3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:00 2025 by rpki-client