Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
File: 3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json)
Hash identifier: T0wudQd+1tQNoee/bhAzY1w/3wjBVUpNOwLawRxc1d0=
Subject key identifier: 94:04:6B:5A:D4:42:17:C9:E9:78:EB:CF:82:5B:81:3D:7F:5B:74:AE
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial: 019A4EF49F48AA3B25C9F8657173646E8E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
Manifest number: 0E43
Signing time: Tue 04 Nov 2025 13:00:45 +0000
Manifest this update: Tue 04 Nov 2025 13:00:45 +0000
Manifest next update: Wed 05 Nov 2025 13:00:45 +0000
Files and hashes: 1: 3f1U8HcG3gg1d7c-AMV0OeLqnk4.roa (hash: 6g/YiGFM7SXH1avma+AWhdPQYeSM8xFquer6wIrnMrw=)
2: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: Uh0CcgRjySpnOmt7J7dba9WbVx0Kk0xle8rCaUSONNw=)
3: LKSIMzg2qS8EWL02SO5YPjrz_I0.roa (hash: ZtwqDuK6zfdHnP5iApdAnlCr/naZTEL8mOtuOOiHgUY=)
4: uKO3HquanWKUmJ90M8YK1DIe1PA.roa (hash: XUrZ548wn+DveWLDDAs++NbjxnozKfTkNs4dRtLEX4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9f:48:aa:3b:25:c9:f8:65:71:73:64:6e:8e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
Validity
Not Before: Nov 4 13:00:45 2025 GMT
Not After : Nov 5 13:00:45 2025 GMT
Subject: CN=94046b5ad44217c9e978ebcf825b813d7f5b74ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:e6:59:6c:42:6d:64:bf:0b:3e:df:28:8a:
36:e2:11:d6:e1:9c:fb:24:65:5a:7a:6b:0b:16:f7:
29:fa:cb:0a:f8:f1:f7:b1:57:99:f8:d5:74:f2:df:
80:97:bf:1a:d1:54:a0:5e:33:c0:ba:c1:c2:3e:9f:
b3:c0:68:ad:04:22:a9:57:16:b0:bd:47:ce:1c:a6:
2c:d0:ce:f1:78:5d:5e:1d:98:16:5c:0f:b8:28:aa:
1c:0b:01:6f:60:a5:b0:38:34:80:a6:62:28:6f:eb:
12:c8:37:2a:de:60:c2:b7:c9:20:e6:b1:09:ce:b8:
86:fb:59:e4:a2:95:60:71:11:d2:95:51:48:09:2c:
5c:b0:5a:af:1a:a7:e9:e6:bc:a4:59:cf:86:fb:e4:
23:0e:37:0c:2d:8b:ae:06:f8:1b:be:1e:50:a6:06:
38:12:cd:10:3f:60:1a:86:65:69:b5:6f:75:48:43:
a0:b4:88:f1:62:c6:67:c4:c3:80:55:48:98:f9:d3:
9f:34:67:d6:ef:94:ad:a7:6f:86:1c:8d:50:e2:6d:
87:b2:81:21:82:09:90:61:db:4d:19:30:a4:20:86:
19:47:fe:08:95:4c:74:c9:77:79:4c:66:ff:40:70:
0e:4b:9c:84:f7:ad:e9:78:83:20:a9:f3:ba:df:51:
3f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:04:6B:5A:D4:42:17:C9:E9:78:EB:CF:82:5B:81:3D:7F:5B:74:AE
X509v3 Authority Key Identifier:
keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:61:5f:bc:e8:e7:c8:10:60:05:8a:bd:ad:3c:91:67:33:1b:
55:1c:62:37:80:ba:1f:0e:30:bd:78:0b:61:4e:6c:4f:2c:e8:
6a:6c:38:d4:1d:36:09:6c:31:7e:a4:b6:e8:15:ca:c2:41:f8:
f8:68:f6:fa:d0:6f:fc:4b:49:86:a3:a1:bb:30:1a:98:4e:70:
68:79:23:12:72:7f:95:22:04:fd:28:50:71:09:69:96:c5:57:
64:28:9f:f3:73:2c:02:e7:ee:d6:c7:c3:e7:ee:80:dc:7a:55:
12:f3:9a:19:87:fe:b1:1a:d1:3b:7e:39:30:86:50:2c:88:6e:
90:32:44:cb:76:fa:4a:2e:60:6c:b9:8d:94:e0:24:7b:07:ce:
84:41:72:2f:70:de:68:02:8e:b2:90:00:77:e5:66:be:b3:bc:
97:c9:b4:14:69:e5:b8:de:89:5b:72:9a:7d:ff:02:35:45:65:
a6:7f:99:f2:9e:31:ec:e2:74:2b:4e:7d:56:b1:69:a5:c2:a6:
19:45:d6:a7:d8:dc:0b:d6:40:1e:fb:05:b7:02:d0:a0:b8:01:
f9:8c:8b:6c:61:fb:af:9e:cc:43:31:f8:e7:62:4f:1d:87:07:
7b:e2:51:7b:f7:73:54:7a:80:a5:e4:de:c7:8b:4b:9b:ca:18:
14:d5:1d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:33 2025 by rpki-client