Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: 25/hFQjbLL91wJmfoOGDzpMKt7dd7zVXHLd0jFUGmgk=
Subject key identifier: FB:88:80:B9:03:EC:06:7C:6B:00:15:E5:4A:DA:5D:17:43:7D:B2:57
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 019A003590EE405E9AF8C5CA666E348AFB83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 11EB
Signing time: Mon 20 Oct 2025 06:01:41 +0000
Manifest this update: Mon 20 Oct 2025 06:01:41 +0000
Manifest next update: Tue 21 Oct 2025 06:01:41 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: kE8c8OcgQPvZhZaAcgcASaB784kUVacpzN5eNB3r8tU=)
2: _eQTxfZZbwefhXlLKHO7CEbeNzo.roa (hash: XwbhtEsqMzoTs493oAMc1WoC+bVurXPqsNp3fAtN59M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:90:ee:40:5e:9a:f8:c5:ca:66:6e:34:8a:fb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Oct 20 06:01:41 2025 GMT
Not After : Oct 21 06:01:41 2025 GMT
Subject: CN=fb8880b903ec067c6b0015e54ada5d17437db257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:05:33:c3:ab:18:60:0f:b3:99:e1:4f:cf:47:
b8:ca:2b:26:c4:b1:19:27:38:18:38:65:2e:ae:a9:
08:2a:1f:aa:a3:0a:86:bf:1b:39:60:de:af:72:b8:
2e:e3:46:70:ba:b5:ab:de:e0:37:70:c9:4d:99:26:
3a:cc:72:6a:76:6e:ae:3d:2b:b5:ab:95:e2:31:bb:
6a:4d:2d:49:f5:35:e6:ba:a5:1f:0f:8f:21:8c:71:
2b:78:91:ea:bd:55:56:75:55:87:64:4e:13:f2:5c:
28:18:aa:8b:cb:de:6f:37:90:93:d5:25:fb:b0:77:
b0:c2:aa:80:1d:5c:4a:08:93:2a:18:c4:66:ef:67:
c2:de:e4:96:48:83:6c:ac:73:ac:dc:42:e5:6b:a4:
21:cf:44:26:1a:37:0d:8b:6c:15:85:44:46:f9:24:
37:3b:dd:4a:82:ea:a9:22:bc:ab:2a:5f:a8:ea:90:
65:c6:df:83:99:92:49:52:5e:2d:53:68:aa:7d:39:
3e:b5:7d:06:ca:09:37:d0:d2:e3:af:44:c9:90:c1:
7b:9a:83:fc:91:4e:01:0f:59:20:51:58:15:31:f9:
e0:35:28:fa:a8:6e:fb:ac:9b:70:87:95:44:d7:a4:
5d:89:28:f7:9a:02:5c:12:85:4e:ec:7f:c0:88:6a:
7a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:88:80:B9:03:EC:06:7C:6B:00:15:E5:4A:DA:5D:17:43:7D:B2:57
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:81:74:d1:73:dd:cd:38:b7:95:fe:6c:36:e9:25:c8:03:bc:
a7:57:84:a6:3f:12:59:19:36:76:80:05:c8:13:f8:a8:d3:ec:
db:81:5f:e2:4d:f8:0c:8c:41:4c:cf:51:41:16:e6:bc:53:53:
03:e0:c5:63:1f:69:18:fd:c3:47:88:c3:b0:d2:87:6b:e9:4a:
d3:cd:4a:71:58:50:84:ea:e8:c8:bb:d2:c0:cb:48:f8:f3:a3:
6d:9b:9a:68:26:de:63:0e:64:a2:dd:78:0d:1b:7b:91:db:d0:
d5:75:ba:df:49:f4:7f:61:93:7c:22:9e:28:ae:21:06:dd:88:
0d:08:60:3b:21:3a:38:02:ee:ff:32:25:6b:65:71:3f:76:0f:
82:b2:09:66:37:f4:77:50:18:de:57:d8:53:13:5b:6e:fd:2e:
e7:7a:07:61:2a:8f:c2:60:79:b7:db:c8:a3:e5:85:2c:72:7a:
be:75:6e:3f:c0:fc:d6:9f:2e:ea:23:6c:4a:10:e0:a8:e2:6e:
ad:3d:2e:10:35:7f:15:38:28:c1:5d:36:c4:c5:be:9c:54:2a:
79:9a:41:ad:dd:59:f2:9a:8c:98:f6:dc:03:d8:04:6f:c5:44:
b8:72:2e:05:53:d7:a9:9d:b8:f9:5d:09:c8:64:a9:77:bf:aa:
46:4c:e2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:57:34 2025 by rpki-client