Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
File: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft (raw, json)
Hash identifier: teVY6ZbTtJUeizlJnjIffT924nGeNlt8Ugtg7q3W5Yo=
Subject key identifier: 17:4F:48:B5:19:0F:2C:69:CE:A5:0D:58:D9:89:36:25:76:E5:05:F5
Authority key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
Certificate issuer: /CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Certificate serial: 019A006C5BBC4878F07CBA43C92747A03651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
Manifest number: 073B
Signing time: Mon 20 Oct 2025 07:01:32 +0000
Manifest this update: Mon 20 Oct 2025 07:01:32 +0000
Manifest next update: Tue 21 Oct 2025 07:01:32 +0000
Files and hashes: 1: 1tilC1_jin8srVsrV1j052DulGk.roa (hash: vyS0S5gewCJtoxpuN4POioePDrUuw5luS1kTn7wZwZE=)
2: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl (hash: GkJhF6CWsuE/BBSQ4OgVzfxluhbZL5uggkoc1QNlJz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:5b:bc:48:78:f0:7c:ba:43:c9:27:47:a0:36:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Validity
Not Before: Oct 20 07:01:32 2025 GMT
Not After : Oct 21 07:01:32 2025 GMT
Subject: CN=174f48b5190f2c69cea50d58d989362576e505f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:f3:15:aa:1f:99:3d:5c:8f:d3:e6:26:49:
2e:f5:b1:3c:39:0f:a0:06:bd:c6:1b:99:21:d9:65:
ba:2f:47:74:a8:6b:a7:e8:c5:c9:b6:9c:43:78:da:
11:f7:04:e6:57:d3:b1:b4:87:ec:b0:49:22:f6:36:
a5:e1:af:ee:4e:d5:69:35:f0:7e:d4:76:0f:b9:7f:
f4:4a:ac:51:e3:3c:5a:bf:40:52:66:7d:83:58:d5:
de:69:f3:7d:bb:e3:d6:33:ec:d0:b3:17:21:13:fd:
5c:b3:e6:d0:ce:21:a6:4f:de:5a:8f:04:8d:db:63:
99:33:93:44:a5:43:96:6f:93:81:9c:d9:0f:27:0b:
e7:65:4a:87:0a:a3:bc:6e:aa:49:c2:b8:36:d9:44:
ba:73:2b:91:8f:a1:79:4b:19:ea:df:0a:00:66:d9:
a4:c3:ff:44:28:5c:f3:fd:4d:d3:06:91:ff:28:b7:
11:45:39:c2:86:56:86:3b:c1:25:2d:3a:ac:6b:3c:
9f:4c:9c:0a:cf:56:b1:a6:fe:29:16:4f:92:75:70:
97:f6:83:82:3d:03:55:86:db:b4:9c:cc:f3:f9:8b:
6a:8e:ad:3a:0a:ed:b9:c1:1e:60:12:8b:42:23:fe:
b2:62:7d:fc:cb:2a:4d:37:8d:c1:54:f6:25:3c:fc:
57:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4F:48:B5:19:0F:2C:69:CE:A5:0D:58:D9:89:36:25:76:E5:05:F5
X509v3 Authority Key Identifier:
keyid:DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:17:30:99:c5:3a:9f:12:57:28:15:d4:3a:33:2c:a0:56:b6:
20:9d:0e:69:14:cf:c9:2e:65:83:a5:f1:d9:ab:0a:fb:fd:82:
b5:af:53:ab:a5:42:c0:09:3b:8e:e6:c0:3c:96:77:e1:f9:ae:
74:a2:c0:c2:51:ea:a0:fa:6b:6d:84:bc:9f:9a:14:e4:b9:ac:
10:f1:09:3b:f1:bf:9c:06:91:30:cf:ff:97:3f:c4:32:a7:3b:
68:ca:5b:94:7f:41:e3:d3:16:79:60:f2:4f:1f:a3:11:ac:af:
8e:96:ae:cf:3b:5f:41:21:78:f8:14:06:6c:60:f3:c0:aa:91:
3b:09:ac:f1:06:0c:44:47:ca:a3:aa:0b:b2:21:4c:d2:1a:d7:
64:2f:32:70:59:9f:ee:94:22:67:a3:cf:3d:57:83:73:06:2e:
cb:f9:cd:01:48:c4:4a:01:a1:b6:d0:bd:50:39:e2:89:2d:5b:
f4:23:cd:f8:69:5d:cf:2e:7a:d4:ae:32:9c:60:7a:8b:78:0d:
0e:dc:7e:36:7e:f1:a0:63:40:65:d2:99:ea:35:fe:94:7d:35:
b7:9b:9d:ea:41:61:3a:2c:9e:e5:f5:2d:d4:a3:2c:42:ea:34:
8a:af:fd:20:4b:06:ea:56:10:09:aa:79:41:af:36:b9:25:0f:
3f:02:d6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:26 2025 by rpki-client