Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
File: 3hL5ZansM-LC6HthYb7vuL4obKM.mft (raw, json)
Hash identifier: w6Q8mDNaZui68hzelJvVLIwn8RN1iCx/yxOhBaiUfAg=
Subject key identifier: 63:76:F1:42:DA:8C:E7:2E:75:DD:FE:0B:3B:67:88:F0:24:69:31:0C
Authority key identifier: DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
Certificate issuer: /CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Certificate serial: 0199FD343DC074241CDA47F81C14237963FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
Manifest number: 1506
Signing time: Sun 19 Oct 2025 16:01:23 +0000
Manifest this update: Sun 19 Oct 2025 16:01:23 +0000
Manifest next update: Mon 20 Oct 2025 16:01:23 +0000
Files and hashes: 1: 3hL5ZansM-LC6HthYb7vuL4obKM.crl (hash: gNF1RBp6bzUvs42ukwQ6WYL7ItSukDqs9Z1r1wwwj5A=)
2: WwmcE7wGl7pyI1JEZUrcMqc8ydE.roa (hash: eYdzJRuLYCeHIGBMM52itYWmfWw58ujov0m3EgFoPMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:3d:c0:74:24:1c:da:47:f8:1c:14:23:79:63:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Validity
Not Before: Oct 19 16:01:23 2025 GMT
Not After : Oct 20 16:01:23 2025 GMT
Subject: CN=6376f142da8ce72e75ddfe0b3b6788f02469310c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e8:09:7f:e0:f8:13:66:68:c9:77:c7:f8:11:
e5:6f:51:6c:1e:24:fe:34:f2:b0:ae:cd:56:3d:53:
4b:42:1f:f0:f0:be:88:67:7c:14:b1:81:f9:6a:2d:
51:db:02:0c:84:5a:69:50:f0:27:65:a0:17:17:78:
fa:f5:df:87:29:fb:ad:b9:3a:2d:ad:84:b2:87:fa:
39:24:e8:17:47:8c:cc:76:ee:90:39:6e:41:7f:8b:
15:5d:5b:3d:37:ee:c9:2b:50:34:f8:50:12:69:cd:
6e:85:9c:03:81:60:f4:b3:57:cb:be:ef:1a:5e:77:
0d:9b:ce:c7:8a:b2:d9:00:48:88:b5:ab:08:92:d3:
07:7f:cf:5b:09:e9:14:17:56:56:3e:4c:cf:2b:d3:
b8:ec:9a:90:1a:fd:50:a8:b6:2b:cd:6b:54:1f:4a:
2b:c8:3a:f6:09:58:71:2a:49:4a:1b:4b:3d:35:58:
7c:54:af:91:66:53:aa:fe:84:e3:5d:61:5c:7a:fa:
52:6c:c5:8e:7c:bf:5b:e8:7f:7e:1d:11:27:cf:80:
2c:79:24:27:7e:27:81:19:c5:f9:40:f1:f4:3f:18:
86:ed:70:7e:ad:73:63:65:88:0b:b5:9d:1b:b0:47:
e0:4b:85:9f:ba:92:74:2a:29:cb:1f:7e:07:7d:7b:
34:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:76:F1:42:DA:8C:E7:2E:75:DD:FE:0B:3B:67:88:F0:24:69:31:0C
X509v3 Authority Key Identifier:
keyid:DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:61:e2:e8:9a:48:7d:f5:a7:54:ee:13:37:e5:41:67:36:3e:
bf:5d:7f:d9:51:bd:bd:0d:fa:9c:09:02:da:9e:91:49:f6:59:
12:98:41:62:65:b0:96:89:ff:82:94:5a:55:99:93:76:42:82:
0b:6a:be:2e:24:63:e3:44:63:7a:ba:db:d4:65:97:d7:7e:e8:
5a:eb:2f:c9:89:86:e5:94:e5:d6:0c:86:1f:52:8d:cf:2e:35:
46:8a:8e:33:00:d6:f0:39:5b:e5:41:78:b3:ae:00:66:ea:d4:
bb:5c:86:0a:74:cc:35:4a:d2:34:d6:5b:38:5b:1d:7c:14:ea:
33:fd:bc:ec:32:cb:d7:da:8e:92:0e:42:81:80:04:ea:94:65:
d1:ba:91:e2:0b:89:e1:eb:04:60:c0:e8:0f:dd:30:b4:ca:f0:
75:99:37:5b:40:b5:0c:60:e5:17:8e:14:f0:9f:cf:b5:56:cf:
54:7c:37:ff:53:fd:ce:7b:43:60:39:9f:7c:db:97:31:8f:da:
99:46:a8:31:3c:07:60:11:ac:83:3e:ac:13:d7:e1:9c:93:dc:
14:32:81:92:b4:aa:e0:e9:c7:25:2a:f2:dc:b9:e8:44:7f:fc:
83:14:a8:50:74:4b:80:70:f7:f3:ed:70:da:e1:2d:df:a8:11:
6f:fe:42:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:54 2025 by rpki-client