Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: ecLtTbh2qpRd8H9YjZHRpqD2UP6HyxQ/FQJxmHt0H/w=
Subject key identifier: 69:BB:C5:84:F5:6C:BC:11:16:A7:08:46:6B:47:0F:A6:D3:B7:6B:E1
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 019A4E1889E1797402D0BAE5C4EED8BA37B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 124D
Signing time: Tue 04 Nov 2025 09:00:22 +0000
Manifest this update: Tue 04 Nov 2025 09:00:22 +0000
Manifest next update: Wed 05 Nov 2025 09:00:22 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: /NhLsfA++AVuRVNfrULty4H6bC4uNLSXrkv65wZaKNA=)
2: _Sn3RhfY--fiVliyrSpcw_Dpx8U.roa (hash: 0DlsX3tbgemelzimR5EC4gu2Xnu0fF/hzb1n4QMYZI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:89:e1:79:74:02:d0:ba:e5:c4:ee:d8:ba:37:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Nov 4 09:00:22 2025 GMT
Not After : Nov 5 09:00:22 2025 GMT
Subject: CN=69bbc584f56cbc1116a708466b470fa6d3b76be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:bf:79:79:fc:82:c3:9b:bb:39:b8:c8:e0:
f2:c8:b9:c5:87:47:54:2e:09:aa:08:a2:52:8f:34:
be:67:77:8b:45:31:88:df:3b:99:fd:ba:81:26:d5:
1e:24:cb:d0:5e:02:c9:55:5a:01:c4:6e:eb:06:48:
b3:a0:7c:a4:63:08:8d:7f:f2:03:0f:55:49:fa:31:
43:a2:c1:8d:6c:f5:5a:55:03:11:68:1d:92:f2:14:
8f:46:e7:f3:f1:4d:82:f4:c3:54:bc:96:e2:f1:a6:
70:29:3d:45:86:8c:15:af:a4:f5:ef:7c:25:a3:2f:
45:c6:78:2f:af:58:b4:a6:94:e2:4c:90:ad:8b:0a:
4c:24:f9:7c:4a:97:57:29:a9:49:0a:92:2f:1d:eb:
1f:75:db:96:a2:cb:d9:56:fa:d2:a2:1e:b6:c5:31:
8b:ca:19:6d:f1:e3:d3:93:00:b0:e6:7f:ea:a1:3a:
f4:0f:38:3a:32:3b:e2:4a:ec:2e:7f:e7:59:44:d5:
0f:2c:3c:3a:7e:e3:11:68:ab:cd:95:cc:63:a6:bf:
df:d0:ed:97:0a:13:2f:72:e6:23:e6:63:75:ae:ab:
03:59:48:ef:09:bf:bf:c9:d0:90:0e:64:51:0d:58:
c4:4f:82:28:e6:02:28:22:a8:9c:96:f8:76:ba:b4:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BB:C5:84:F5:6C:BC:11:16:A7:08:46:6B:47:0F:A6:D3:B7:6B:E1
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d8:fc:3e:1c:d5:30:05:4e:39:7b:48:e0:1f:5a:7b:f2:c4:
f4:d2:58:58:b5:e7:05:d5:af:83:80:20:d8:8f:ed:41:6f:99:
64:3c:1b:c1:83:9a:99:51:9b:26:75:55:49:fd:83:e7:0d:58:
6c:9f:c2:34:ae:ea:5b:b6:86:aa:c7:f8:50:60:37:39:b7:a0:
5f:8f:5e:6c:42:f9:09:e1:35:9d:64:e1:20:16:f9:3f:44:b6:
18:b8:61:91:4a:b3:b5:93:76:9c:c0:c9:34:a6:51:89:ad:60:
e0:5e:12:7c:0e:83:88:6c:43:1d:71:8d:f3:1f:df:19:0a:2a:
7b:f7:6d:2b:7e:3a:17:9f:b0:d1:db:86:cc:3c:59:93:83:1e:
c3:11:1a:df:25:f6:9a:59:57:af:c2:f9:3c:2c:ba:d5:e9:0d:
1f:62:d7:ad:65:f2:c2:68:29:dd:06:de:4e:ab:03:79:07:16:
2c:3f:92:5b:34:b4:a1:27:1a:f3:4a:63:6a:84:78:1d:99:e0:
25:60:90:1e:14:1a:06:e2:b5:16:51:55:6f:b2:a8:14:22:e3:
ef:d7:34:65:20:8c:e2:8a:6d:ee:af:ff:ce:34:a0:3e:7d:8b:
54:10:a5:35:cb:db:0f:ce:0a:05:1a:3d:90:6e:ba:b3:a3:2a:
a2:fe:0d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:23 2025 by rpki-client