Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft
File: 3g1q1z4YioWTcrYTo6JwS5wzD-0.mft (raw, json)
Hash identifier: EcU+dF0BN/v9K1gEr4lEFBwzYiMmdnajXl/3mAU1WPk=
Subject key identifier: 1E:1E:48:96:E8:E8:98:04:0C:BF:47:AF:D1:68:64:D5:97:20:BD:62
Authority key identifier: DE:0D:6A:D7:3E:18:8A:85:93:72:B6:13:A3:A2:70:4B:9C:33:0F:ED
Certificate issuer: /CN=de0d6ad73e188a859372b613a3a2704b9c330fed
Certificate serial: 019A71EED1AB98770F54F3782F81ADEB2022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g1q1z4YioWTcrYTo6JwS5wzD-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft
Manifest number: 1E
Signing time: Tue 11 Nov 2025 08:01:07 +0000
Manifest this update: Tue 11 Nov 2025 08:01:07 +0000
Manifest next update: Wed 12 Nov 2025 08:01:07 +0000
Files and hashes: 1: 3g1q1z4YioWTcrYTo6JwS5wzD-0.crl (hash: XoVqfen1/IX2GlDcCUpLKDZk2R8fPRvmQSQPQ0PNG+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g1q1z4YioWTcrYTo6JwS5wzD-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d1:ab:98:77:0f:54:f3:78:2f:81:ad:eb:20:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d6ad73e188a859372b613a3a2704b9c330fed
Validity
Not Before: Nov 11 08:01:07 2025 GMT
Not After : Nov 12 08:01:07 2025 GMT
Subject: CN=1e1e4896e8e898040cbf47afd16864d59720bd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:93:1e:b2:a3:88:99:cd:61:8a:89:19:e1:
2e:3e:a7:57:b6:2f:f7:2a:97:b4:d3:d3:f5:0b:de:
bf:cf:5c:c2:7c:be:6e:42:22:b9:6f:c1:67:2d:d7:
ae:58:c6:c4:77:4c:49:1a:2e:3d:4d:92:4a:90:51:
09:1b:14:24:c9:92:1e:c5:76:96:c0:a9:46:6f:37:
b4:e1:25:5e:95:78:a0:dc:15:4a:65:9c:d6:dd:c0:
52:03:b4:d1:e1:d9:6b:92:c1:a6:5a:43:a5:fe:36:
e0:9f:f5:93:ae:64:de:e5:6e:ed:b3:15:0c:30:97:
0b:2d:cc:df:f2:ef:f8:5c:22:c5:b1:fe:d1:d0:5d:
26:dd:37:02:f5:fc:72:cb:34:4f:cf:42:89:72:bd:
35:25:26:e3:45:18:d1:e7:ae:06:3f:53:16:06:e2:
6a:7f:4c:21:ed:d3:84:01:7d:35:c5:14:b3:93:f7:
33:90:a0:f3:06:ff:56:11:ef:f1:87:ad:af:d0:f8:
46:27:e1:a1:b5:ae:22:e0:92:17:89:00:76:0e:40:
65:45:d7:cb:d6:83:44:9c:c1:8f:9d:19:4c:61:7c:
9b:d1:23:bf:96:42:6d:26:35:04:b5:a6:22:33:97:
ab:9b:d4:b3:ce:0e:e8:6f:d7:20:85:79:6f:05:2b:
bf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1E:48:96:E8:E8:98:04:0C:BF:47:AF:D1:68:64:D5:97:20:BD:62
X509v3 Authority Key Identifier:
keyid:DE:0D:6A:D7:3E:18:8A:85:93:72:B6:13:A3:A2:70:4B:9C:33:0F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g1q1z4YioWTcrYTo6JwS5wzD-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:4c:8d:e3:9e:5b:4e:2e:aa:fb:31:65:0a:89:f8:49:36:04:
70:29:66:aa:ff:79:12:86:ba:a4:63:7f:ef:00:e7:49:61:5a:
19:99:4b:6f:df:5c:e8:3d:fa:b2:c0:51:a7:84:a3:7b:4a:54:
5b:77:d6:2b:ff:0c:aa:f3:38:bd:ac:f4:7d:73:fa:75:a7:03:
b1:f5:02:92:f4:ed:a3:1c:fc:b6:d4:5e:f6:d2:13:57:5b:c1:
06:d4:85:34:d2:e6:72:ef:95:24:91:95:d6:67:da:2c:4a:86:
a2:37:e6:42:cb:17:29:e0:f5:cf:34:ea:24:e6:00:4b:56:4e:
9c:56:82:50:39:77:f2:67:8f:97:72:cc:bd:8a:89:c0:74:67:
e2:33:f4:45:f6:36:37:50:cb:a3:3c:70:ec:d2:ba:34:88:e5:
9b:e5:9c:1f:96:8c:43:ad:b4:8d:59:70:4f:a3:68:bb:d9:8e:
4d:d1:f3:2c:30:93:f5:bf:c1:15:f8:9b:34:fd:4e:d1:2d:17:
4f:1f:0c:74:fa:12:1c:12:88:8e:b8:e3:7e:9b:2d:e9:9d:7c:
fb:11:77:0b:68:cf:65:5a:c0:71:29:ca:c7:39:fd:69:b2:23:
db:42:72:91:20:d7:ec:31:66:a1:d5:48:dd:74:1e:d8:3c:4d:
b1:d9:64:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:30 2025 by rpki-client