Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
File: 3PhcNsaW1dssu0j9Q-ghc37jQic.mft (raw, json)
Hash identifier: bKrx3haRPIK6dH3S2xsvsqi85NzWwM3EBzHeBDCNeWU=
Subject key identifier: 4B:91:31:61:BC:B3:4C:87:10:B6:28:99:AD:96:02:3B:72:E9:78:40
Authority key identifier: DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
Certificate issuer: /CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Certificate serial: 019A541B2B0A11B9FD54CD54C9E7ED41F23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
Manifest number: 114A
Signing time: Wed 05 Nov 2025 13:00:57 +0000
Manifest this update: Wed 05 Nov 2025 13:00:57 +0000
Manifest next update: Thu 06 Nov 2025 13:00:57 +0000
Files and hashes: 1: 3PhcNsaW1dssu0j9Q-ghc37jQic.crl (hash: w08SXxrQ1pZg/mps6wvOhXEpcl6wAIB4aEXLY+yoF50=)
2: AuGSVrNkGgUtthLzU1YbunCRJmA.roa (hash: N+p3SVnY5s1RjPh5Td733eJn6W460syQCiw/MVZ+pqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:2b:0a:11:b9:fd:54:cd:54:c9:e7:ed:41:f2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Validity
Not Before: Nov 5 13:00:57 2025 GMT
Not After : Nov 6 13:00:57 2025 GMT
Subject: CN=4b913161bcb34c8710b62899ad96023b72e97840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:de:fe:84:f0:d6:d5:59:a8:c8:4b:53:a2:
36:e3:8e:fc:4f:84:cf:c8:ff:9d:a4:a9:4c:06:40:
ca:2a:ac:4a:ca:fc:d2:e0:13:ea:37:9a:ba:a7:e5:
99:d8:39:d9:6d:c3:75:55:6b:1c:22:be:82:d5:61:
64:ff:b3:10:80:e6:bf:98:77:fa:e7:6a:20:66:39:
05:84:78:f4:a2:25:85:c6:24:86:8d:b2:0d:0a:a1:
ee:50:48:d7:cb:e7:67:cd:a4:e9:03:3d:bd:31:58:
47:67:dc:98:15:23:28:e6:43:11:40:74:4d:2a:6c:
42:08:0f:36:48:9e:68:78:43:af:e7:02:ee:6e:f1:
5a:34:95:7f:cc:f2:15:cf:71:b8:52:63:0c:b3:0d:
ef:63:c7:ae:97:66:97:9c:c0:dd:a9:b2:0f:2c:27:
93:3d:35:41:7c:56:e0:04:2a:34:32:7d:b5:b9:96:
6d:c3:a1:a2:92:3f:2d:db:59:84:5a:c3:0d:b3:f8:
6f:0f:64:75:e1:3f:4b:22:28:59:ea:ea:1b:0c:da:
37:4f:6f:e4:3a:d3:8f:79:3b:26:8f:86:69:75:cb:
76:94:45:67:2c:8f:48:10:36:8c:46:6c:79:ea:ef:
2b:a2:1f:36:bb:06:ee:91:7e:06:3b:87:a7:7b:9d:
b1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:91:31:61:BC:B3:4C:87:10:B6:28:99:AD:96:02:3B:72:E9:78:40
X509v3 Authority Key Identifier:
keyid:DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a1:6e:ca:cc:3a:60:02:1b:0e:1f:3d:48:2f:b1:79:2a:54:
15:db:c7:4f:bc:61:dd:e4:65:a1:ee:f8:50:75:ad:01:0e:03:
4e:13:5f:f2:57:70:e5:71:e9:6d:6b:17:f9:a9:c8:be:33:6b:
f2:a8:23:c2:b2:3e:1e:93:19:ec:fd:4b:81:fc:94:7b:95:a0:
72:e9:85:5b:2e:8f:79:64:b7:01:0c:6b:e1:cd:3e:28:01:1e:
3d:5a:2a:08:e1:8e:05:bb:47:56:b4:19:17:75:2c:c1:ea:e5:
64:f5:fe:e3:5f:1e:c7:17:43:03:7d:93:39:77:23:f1:2b:7d:
1b:28:a9:ef:55:a6:bb:cf:f8:12:14:70:bc:d9:84:46:60:81:
4f:8d:1a:9f:d5:2d:9a:d3:a9:c6:a2:5c:b4:6f:87:41:75:1e:
b9:a8:a5:28:4c:82:86:fd:2a:c5:64:54:1c:e3:44:d9:78:d3:
80:56:9d:56:60:ab:e8:f4:c4:65:30:f3:a6:99:cc:bc:47:10:
92:ff:33:53:03:a3:f6:44:19:cb:c9:27:a0:b0:15:0d:ab:fd:
28:32:3a:0a:e0:a2:e2:a0:62:ad:f7:63:f2:d5:ab:f6:69:85:
7a:d8:b2:01:38:b8:80:57:0b:c4:66:47:ac:f8:6a:bb:70:38:
c6:c9:db:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:48:09 2025 by rpki-client