Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft
File: 3liIYKFLOUpzUSmEKu-tGnBKMoc.mft (raw, json)
Hash identifier: Dqy+RM3xkEOxIFyJCZ7wOC7cr+TMb6ym9Rhtu6Qvl9w=
Subject key identifier: E5:3C:17:78:F3:30:E3:B1:3B:DA:C2:59:46:24:AE:83:C0:20:BD:C8
Authority key identifier: DE:58:88:60:A1:4B:39:4A:73:51:29:84:2A:EF:AD:1A:70:4A:32:87
Certificate issuer: /CN=de588860a14b394a735129842aefad1a704a3287
Certificate serial: 019A7112BDACCF01DC26471F87A19438D5D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3liIYKFLOUpzUSmEKu-tGnBKMoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft
Manifest number: 38
Signing time: Tue 11 Nov 2025 04:00:44 +0000
Manifest this update: Tue 11 Nov 2025 04:00:44 +0000
Manifest next update: Wed 12 Nov 2025 04:00:44 +0000
Files and hashes: 1: 3liIYKFLOUpzUSmEKu-tGnBKMoc.crl (hash: i/AWdbBIsOYsWO2z47W+/82mzsvRTJKw0Mm6IsbdiR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3liIYKFLOUpzUSmEKu-tGnBKMoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:bd:ac:cf:01:dc:26:47:1f:87:a1:94:38:d5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de588860a14b394a735129842aefad1a704a3287
Validity
Not Before: Nov 11 04:00:44 2025 GMT
Not After : Nov 12 04:00:44 2025 GMT
Subject: CN=e53c1778f330e3b13bdac2594624ae83c020bdc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:03:cc:a7:1b:ef:af:fb:d4:49:17:a8:88:17:
bb:40:fc:a6:1a:f7:96:bd:91:57:ed:08:75:5a:8c:
ce:91:41:aa:87:3d:b6:ee:19:0a:14:2e:df:c0:20:
92:81:3d:03:3c:32:c8:db:21:17:f5:58:fe:e8:9a:
96:fe:73:16:ac:94:7d:d3:63:c0:23:54:b4:fa:80:
8c:24:86:43:7e:a0:4a:3e:ea:e8:ba:66:c9:6d:df:
25:84:1f:ff:71:ea:bc:2b:c8:cf:cc:00:9c:ce:7b:
7d:06:e4:d7:e3:f1:e5:47:44:23:27:c2:5f:31:dd:
94:67:d1:84:5c:05:12:25:64:10:ae:b4:9a:60:06:
27:1b:74:23:13:c6:19:f9:82:81:17:f1:60:1b:be:
ca:f8:91:64:a8:a5:e2:c8:da:39:f2:5d:33:16:09:
64:45:ee:e7:1d:a4:45:2c:3c:c3:d4:5e:bb:7e:5d:
cb:68:69:55:b2:4a:69:00:84:15:29:66:8c:dc:2f:
77:dc:67:e0:ec:58:c1:e3:cc:2a:37:06:2e:57:da:
84:3e:55:3a:49:1a:41:86:39:6c:14:1c:34:94:95:
e6:05:dc:89:d1:db:3b:a4:3b:76:0f:60:5e:f8:ad:
5e:39:e7:3f:b3:30:27:b4:37:61:a1:26:55:2b:e8:
36:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3C:17:78:F3:30:E3:B1:3B:DA:C2:59:46:24:AE:83:C0:20:BD:C8
X509v3 Authority Key Identifier:
keyid:DE:58:88:60:A1:4B:39:4A:73:51:29:84:2A:EF:AD:1A:70:4A:32:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3liIYKFLOUpzUSmEKu-tGnBKMoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:00:c3:bd:61:7a:b0:b1:ac:40:99:95:0e:e5:77:a8:fa:95:
a1:8d:d0:7f:bd:11:02:68:cc:d4:4d:1d:94:20:59:02:f2:f2:
30:f5:70:6a:2f:f4:c9:40:9e:90:94:9b:b4:d1:87:c5:0d:b2:
af:6e:6e:4a:ab:3d:53:56:a4:c9:af:10:84:2d:4b:1b:d1:76:
d5:5e:4e:04:6d:b4:1c:ae:71:a1:fd:a0:28:0e:eb:f0:f4:bc:
88:51:a7:b7:25:3d:7e:ef:db:5d:be:38:8f:d7:81:53:92:5c:
1f:cd:9f:68:74:d1:00:4d:08:67:a5:f0:b7:ec:3c:34:a8:1c:
e2:89:e1:63:17:c1:af:e7:16:e8:00:b0:35:f2:ef:82:05:c4:
e9:8a:b4:4c:d4:eb:11:90:56:e3:b6:7f:de:fc:9a:df:ef:c4:
da:90:9b:46:60:98:99:a3:d0:ef:7b:3d:43:94:c9:66:7e:82:
54:ee:87:53:a1:3f:2f:fa:15:9f:6f:63:03:69:39:a2:73:88:
05:52:2d:09:2f:45:bb:95:df:9c:97:76:d4:69:b6:e2:2d:0d:
f1:8f:01:df:06:5a:46:b2:12:77:f6:0a:62:6f:10:a8:dd:e6:
e7:58:e7:42:61:f1:8e:9c:7b:ca:4a:15:7f:32:1a:82:23:7a:
a6:60:07:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:15 2025 by rpki-client