Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier: 7TnPEA3KwbXN8ucTpk4oIxnjW8BTdcfGaPqR4yFAlEs=
Subject key identifier: 3C:B7:88:C1:31:7B:4E:0F:0E:5F:AE:76:7E:53:6B:6B:A2:2A:91:6E
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 019A4F62022BD91B96B8A16A449196AF6E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number: 06EC
Signing time: Tue 04 Nov 2025 15:00:14 +0000
Manifest this update: Tue 04 Nov 2025 15:00:14 +0000
Manifest next update: Wed 05 Nov 2025 15:00:14 +0000
Files and hashes: 1: 3klZTNM9YhJqZUNp3PJkFRczFX8.roa (hash: OyXgZ5l4rO5Wt2TcoTvX9gJZ0hgPAdu2wTU0n6/gZoU=)
2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: XKK6Wot59m+4x0OKvamu0d/Hu+V7SLuTFyFQuY7w0nY=)
3: W0AAJRLr6gi2r74kS95DxTYGfTw.roa (hash: MH+HQqYFMBeGJJqR0jYHA1u1MAdvWa+AHHutk6W2MvA=)
4: r0aCHKZqLV95OV5gwTfYdhHbA6Q.roa (hash: xjRrpFDO8g9sZNIp8GQ1hogAG1em04ZcPXgm2d8N7a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:02:2b:d9:1b:96:b8:a1:6a:44:91:96:af:6e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: Nov 4 15:00:14 2025 GMT
Not After : Nov 5 15:00:14 2025 GMT
Subject: CN=3cb788c1317b4e0f0e5fae767e536b6ba22a916e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a0:d3:d1:86:1c:71:19:ad:43:01:57:a7:3f:
cd:a1:79:01:e6:8b:b4:6f:6e:da:28:03:58:86:3a:
e1:2f:b6:85:7d:cd:3d:b8:7a:91:f6:f0:46:96:82:
06:01:d4:3a:62:69:42:01:53:fc:df:ed:b9:88:99:
d7:3b:0b:1d:c2:f3:ad:fd:f1:d2:ef:ed:d6:1f:4c:
3d:66:0c:37:6a:4f:d6:86:d0:61:07:0f:80:ff:59:
7a:6c:0d:26:4d:66:72:e9:92:e4:01:0e:a0:85:8a:
b6:c4:f4:9f:43:c1:de:5c:81:b4:d6:f2:6d:5b:d4:
2d:e3:84:82:0c:db:1a:c5:0a:05:24:11:29:7e:2d:
fc:eb:c6:48:32:80:76:a3:94:c1:37:0b:61:44:32:
93:94:70:a2:c0:7a:99:fd:a3:4a:f9:b6:40:2b:ac:
83:86:02:0c:c3:bc:94:25:31:61:38:a3:4f:7f:e4:
46:0a:d6:7a:9d:c9:25:39:64:8d:ce:28:a9:83:a5:
24:dd:8d:b8:b9:0a:61:ed:21:95:cc:f0:b0:5f:e7:
8e:44:16:a4:c3:1d:8d:8f:08:86:3d:55:62:78:26:
ce:ce:13:01:09:c8:fd:bf:b2:94:aa:1b:57:0a:27:
16:c1:4f:5a:a2:0b:94:57:8d:11:30:80:00:8a:f6:
25:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B7:88:C1:31:7B:4E:0F:0E:5F:AE:76:7E:53:6B:6B:A2:2A:91:6E
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:42:2a:13:4e:d0:fb:8a:cf:3a:ab:d4:7e:f3:03:a5:60:0b:
c2:5d:72:66:be:10:52:0c:3d:c1:7b:32:da:0e:56:8f:85:82:
1b:d2:2d:20:8e:d9:55:b7:fa:5d:db:20:88:93:73:3b:0d:08:
45:f0:0b:69:1d:74:0f:af:58:85:c3:2d:5c:fd:fb:fd:9d:52:
a2:ca:a7:af:27:82:f1:fe:49:ce:79:c7:ee:75:a6:5f:4a:48:
ba:bf:b9:15:c2:92:3a:18:c5:56:f0:2d:62:c2:07:b3:fb:b6:
2f:9e:e7:ec:4d:f3:dd:4c:dd:2d:91:65:00:8f:57:c9:b8:a6:
f5:82:95:5c:36:6f:46:03:ae:d8:86:bc:ec:3d:24:aa:de:8e:
ab:3a:ce:18:33:00:ba:c9:01:84:7a:ff:79:25:76:0c:12:b6:
f2:f2:7a:84:51:8e:ce:7d:d7:10:4d:d9:11:7b:e4:a3:81:0d:
a3:66:a0:9b:fc:4a:d3:84:78:a8:9e:ad:1b:e0:c0:ad:a2:0b:
b4:f0:e9:d0:f4:85:80:10:9a:b3:da:b4:dd:20:04:d2:83:e2:
09:4f:26:b5:45:4d:ad:d1:02:7d:08:fb:ed:13:c6:b7:10:79:
2f:b5:fd:07:7d:d8:b8:f6:8a:43:c3:5f:9f:fb:0a:5d:9b:9f:
05:d8:b1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:25 2025 by rpki-client