Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json)
Hash identifier: iiE75xnKpFoZ7Qd79uruvQYTamhby9mQZvFEsdnEIMQ=
Subject key identifier: 24:EA:CA:60:10:2C:46:CF:9A:1D:7A:18:D6:F3:C8:1D:93:0F:EE:F9
Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Certificate serial: 019A50E35A6F5C5D0CBDCB5F07E76F8D50B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
Manifest number: 0E3E
Signing time: Tue 04 Nov 2025 22:01:08 +0000
Manifest this update: Tue 04 Nov 2025 22:01:08 +0000
Manifest next update: Wed 05 Nov 2025 22:01:08 +0000
Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: tupV6F3rtBtDXhn/BeczQ/YcqHlxk6VHUbgcCyoPGFM=)
2: pKu7UglcJmA-j3iLVLdtywNO9BE.roa (hash: Zkb8HbwY2s1iIMkolnog2EvROcriM2gwSI0ajYjdw4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:5a:6f:5c:5d:0c:bd:cb:5f:07:e7:6f:8d:50:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Validity
Not Before: Nov 4 22:01:08 2025 GMT
Not After : Nov 5 22:01:08 2025 GMT
Subject: CN=24eaca60102c46cf9a1d7a18d6f3c81d930feef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cd:87:97:6f:12:65:0f:0f:7c:4c:48:ca:1a:
9c:77:f5:95:80:8b:66:dc:3a:57:63:0e:a1:79:f6:
b0:dd:e4:59:c4:c0:70:4e:98:c9:29:ae:dd:19:66:
e0:00:9b:53:0c:58:19:3b:a2:7a:99:bf:d6:32:46:
10:e3:2a:07:60:ee:ea:47:45:ab:a6:03:f4:29:5a:
a0:df:49:97:7a:11:12:57:f6:5e:04:55:88:a0:66:
eb:42:8d:f0:2e:df:f6:a5:8b:68:01:1a:98:f3:d8:
2b:80:b1:d3:3c:5c:b5:35:07:e9:6b:30:f8:f1:f8:
47:1c:92:7c:b9:9c:6f:68:20:56:67:95:c5:be:94:
28:82:87:c7:f9:e9:eb:1d:d8:ad:56:7b:66:a8:fa:
91:28:63:b8:83:36:fa:c0:ac:89:dd:f1:30:0d:fe:
0b:45:7d:72:73:75:8a:60:35:c5:13:1b:b0:92:8f:
4a:3c:c6:3c:f5:40:83:fd:a9:a2:05:db:c9:24:29:
96:da:90:43:74:6d:8c:26:89:dc:3f:0c:d6:5d:68:
f5:68:85:3c:d0:26:5d:42:5c:26:52:db:86:cb:4d:
0f:56:dc:0c:d4:42:d6:05:c2:b5:c3:2c:ac:48:a4:
2c:63:f2:39:f8:80:83:0a:21:81:99:16:2f:45:26:
0d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EA:CA:60:10:2C:46:CF:9A:1D:7A:18:D6:F3:C8:1D:93:0F:EE:F9
X509v3 Authority Key Identifier:
keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:02:55:0f:4d:03:60:65:56:f2:0a:26:c2:5a:bf:be:49:4a:
d4:33:8a:28:6e:72:4c:83:32:f9:4d:7f:f2:c3:03:1b:bc:bb:
f0:bf:46:2b:dd:9d:86:a7:e2:f7:cf:48:65:df:7b:b4:c7:10:
11:e2:a5:7b:d5:d1:ba:f6:06:79:d6:41:28:71:59:c5:4e:02:
7d:95:64:cb:d2:17:97:63:22:fd:d2:02:af:7e:6e:9b:ad:3b:
ca:2a:4f:c3:de:78:f8:41:58:03:3a:d3:fb:5c:7f:69:90:4e:
df:0f:fc:70:f8:7d:f8:f9:13:12:03:73:8d:88:45:04:37:71:
12:e1:43:50:66:24:c1:71:8f:41:c2:cb:a2:2c:6f:7a:f2:99:
ad:e6:10:16:60:8c:fd:88:28:70:02:61:30:cd:b1:42:6e:86:
fb:09:ec:88:d9:d2:28:f7:50:9b:01:5b:95:f2:fc:f9:81:75:
af:2f:56:27:2e:36:53:41:01:a9:1a:53:21:0c:77:c4:04:48:
64:77:a0:1f:03:d4:d8:93:f6:9b:bd:91:86:1f:51:74:5b:8d:
d3:1b:d0:45:eb:a0:e9:f8:af:33:e6:b3:ab:3e:48:f0:7d:cc:
77:93:a6:71:2b:9d:8a:36:5f:7e:be:9c:21:97:53:1c:06:e5:
cc:0a:8b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:51:53 2025 by rpki-client