Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
File: 3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json)
Hash identifier: RALhTc5uA4GeIwnwRHmFFUekxRai3ZJEPyL8F3F6uGE=
Subject key identifier: 45:51:3D:E4:E7:FC:7D:3C:9E:41:E9:00:A1:E9:53:44:E6:DB:38:4D
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial: 019A4FD06A7911A063F7FE5FF4198A6BF7BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
Manifest number: 0686
Signing time: Tue 04 Nov 2025 17:00:49 +0000
Manifest this update: Tue 04 Nov 2025 17:00:49 +0000
Manifest next update: Wed 05 Nov 2025 17:00:49 +0000
Files and hashes: 1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: ayO7HBqycMQNksLaTWw7WFfqhebSCho2EezU9vl1ODk=)
2: LhFRmWbupiZRrTcY1BMgZx0XNm0.roa (hash: 1sSu4Xw0ICcOgnrgocU5c3W/gRE/T8H+tT4ltd3ayqM=)
3: RVm4PleqV8m6zGkcPiKBRGWO1cI.roa (hash: 3p0hXdk+JmHhQEiq1MExor2f3lGKmZyobEJTxOu9buE=)
4: ZqlSlV8xEjtTIPrwJS75wdXWNMY.roa (hash: IHSrkovQ51TOwmRPUF5AIxkAHRZYZBJiA4cpIYri+jU=)
5: eHnC0ZqJNqxv3y7mak9QRJMJw-o.roa (hash: +LqAwsdmA3jPuO+2IgsX5kZHBO+HuvNtjbjVsU8ziig=)
6: f25v4uVZY4JbTyMqNXKXGA35WKk.roa (hash: Cmqw5364kiAvR31aujca3rQebhgV1WXm34C80bI/lTU=)
7: l05lA3ihNrsbi6O1jQgYe6U6RiI.roa (hash: cFNLHeKumGIo0r4P/u4GyYnqlWIoiMqc4hH4vqv6oWg=)
8: xJ0_FRg6EplS-mzoDbYvP1y_mUw.roa (hash: 7evtOJQCPXqekbIigyPzPGbzquzgJixLY3c438GOL/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:6a:79:11:a0:63:f7:fe:5f:f4:19:8a:6b:f7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Validity
Not Before: Nov 4 17:00:49 2025 GMT
Not After : Nov 5 17:00:49 2025 GMT
Subject: CN=45513de4e7fc7d3c9e41e900a1e95344e6db384d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:90:07:eb:98:bb:a0:f9:ba:36:5b:ca:7d:cb:
b2:3b:d2:ab:8a:de:9c:c6:ed:f7:b9:78:bc:bf:53:
07:5e:a0:7c:85:f3:9a:13:f0:c1:d6:e5:66:55:6d:
62:e8:53:72:93:b5:0f:91:50:11:1c:af:ae:14:cb:
46:7d:b7:e1:0b:ef:e0:e3:31:4e:d7:44:3c:ba:70:
15:c8:b4:32:4c:77:83:cd:84:aa:9c:32:5b:0f:c6:
2b:0a:43:a4:12:36:d1:f5:4b:b9:64:d6:a9:f7:a5:
64:19:85:81:9f:fc:d6:62:be:11:33:54:df:68:26:
1e:14:19:45:ab:d6:32:30:0b:90:7e:db:e5:c0:2e:
c2:4e:99:c5:6e:41:f2:c0:aa:a7:87:48:2b:3c:4c:
17:81:ed:b0:0a:f5:71:6f:5f:39:31:d3:34:98:05:
3e:ff:6d:a3:c2:14:ab:17:4f:db:bb:17:36:0e:b1:
33:2c:ce:b1:d3:71:71:2b:79:de:bb:d5:43:0a:e1:
51:8f:19:f4:6f:0b:83:b2:62:de:d2:e6:d6:63:d9:
49:f6:24:c0:36:a3:8d:a0:aa:62:80:08:21:de:da:
33:35:63:d6:81:e8:9a:0e:fb:3d:4d:a3:2c:b9:d1:
6c:57:39:40:31:87:fd:36:fd:4d:67:2a:2d:18:8f:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:51:3D:E4:E7:FC:7D:3C:9E:41:E9:00:A1:E9:53:44:E6:DB:38:4D
X509v3 Authority Key Identifier:
keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:80:01:77:30:c5:0f:2b:d2:fc:cf:d7:93:4b:fb:3d:aa:6f:
f9:95:35:88:fb:96:f7:2e:a3:b2:a9:cd:0e:92:79:3b:bf:35:
b1:80:cf:e0:72:ae:40:c9:ea:24:a7:8f:c1:4a:e1:7d:0d:e8:
53:3c:7f:61:b8:de:9d:ed:6c:42:0b:6a:50:3f:a3:da:95:7e:
a8:9d:72:2b:a8:89:ec:3d:43:5d:b9:11:82:8a:59:f2:45:b0:
2e:88:4e:67:45:7e:8f:5a:c2:ce:e2:2e:64:f1:07:33:dc:ea:
b1:ec:d5:34:f4:ed:d4:e5:40:a0:22:92:9d:dc:fe:84:3a:5f:
69:75:fd:26:78:81:ce:9e:44:cc:04:49:d7:e3:7e:6c:4c:a9:
ff:02:28:83:90:74:91:32:78:06:da:07:db:3c:00:c8:79:24:
37:e3:9a:81:6e:36:63:f2:af:aa:cc:36:e2:45:93:f2:9b:9c:
b9:7a:95:8f:35:31:82:4f:08:13:60:b6:89:d2:a1:09:46:3f:
a3:b9:d7:ee:8e:15:66:e7:dc:2c:ed:c6:60:df:7b:13:63:e6:
72:63:31:56:58:0e:85:fa:e7:45:4b:ea:ae:25:99:c3:e7:02:
b9:6f:29:2e:8f:67:33:67:e8:ac:14:a8:f8:03:4f:b2:cb:27:
ec:0c:78:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:50 2025 by rpki-client