Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier: H/h6G3t7ECF8lQI0mHwfQGSQcIKKqOJYFGZWk9TrFmM=
Subject key identifier: A2:36:29:CD:FB:A0:67:12:DF:20:A8:F9:B6:88:7F:E5:F4:A3:8C:27
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial: 019A71B8594DBACDE55EAE7251EE41CC4C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number: 0F3A
Signing time: Tue 11 Nov 2025 07:01:38 +0000
Manifest this update: Tue 11 Nov 2025 07:01:38 +0000
Manifest next update: Wed 12 Nov 2025 07:01:38 +0000
Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: RCtbgt6M09eM5425Y0APiJqBAj6jNd9rF/VaWgZOcmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:59:4d:ba:cd:e5:5e:ae:72:51:ee:41:cc:4c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Validity
Not Before: Nov 11 07:01:38 2025 GMT
Not After : Nov 12 07:01:38 2025 GMT
Subject: CN=a23629cdfba06712df20a8f9b6887fe5f4a38c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:50:53:0f:ba:7a:b4:1c:6e:46:77:a9:98:
ad:e0:07:90:90:59:4b:e9:29:2a:73:56:ed:63:43:
c2:5d:de:21:81:23:a5:30:f4:67:44:bd:75:9b:a3:
a8:75:ed:72:14:54:84:83:4a:13:36:1c:91:fa:3c:
a0:c7:06:04:81:ba:25:69:30:cc:6f:3f:c6:8d:cb:
29:59:b7:c1:0d:a9:23:43:31:92:d8:c0:22:7b:d1:
cb:01:97:84:33:66:07:4f:dd:c6:06:33:28:3d:97:
b9:a2:3f:60:ab:29:90:2d:9d:1a:ba:4a:09:f7:39:
a7:33:88:63:7c:96:d3:1c:1b:c8:86:5f:3e:a0:e0:
16:89:c7:6a:ef:f9:b3:70:bd:67:88:78:c0:7a:8c:
41:21:81:d8:11:03:90:43:bd:63:18:40:d6:cc:ae:
41:33:58:b5:c2:e0:b7:92:32:f0:fc:60:e6:18:b2:
bc:93:db:c1:55:77:1e:87:b0:56:51:e0:b7:96:09:
4a:31:0a:ae:b0:be:69:37:01:8b:8d:30:d4:03:6e:
c4:16:fb:2d:c1:92:c4:69:f8:a4:72:06:32:b1:18:
2e:55:09:58:45:42:73:e5:a5:ac:66:3a:75:3e:42:
c3:e8:70:13:bd:fd:31:cb:b2:17:d5:fd:72:49:14:
e9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:36:29:CD:FB:A0:67:12:DF:20:A8:F9:B6:88:7F:E5:F4:A3:8C:27
X509v3 Authority Key Identifier:
keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:90:f3:a8:9d:6c:95:c4:e7:dc:ca:06:e9:04:1a:31:e5:bd:
e6:65:35:49:00:01:19:e6:f8:d0:9a:0f:3f:2d:1e:ca:bd:be:
a1:ef:1b:f7:c2:4d:bb:5d:c1:ec:f1:ae:65:f6:94:47:8a:c2:
a4:c2:26:14:fc:93:3e:d9:41:cb:90:3b:3c:e9:4a:cb:f9:7b:
99:48:c0:36:f5:66:ca:3f:1e:5f:b9:09:2f:fe:cb:94:1c:1c:
30:55:1c:91:fa:c1:58:c2:77:61:44:5d:e1:2d:09:88:82:b1:
1a:10:ee:a1:80:26:af:38:67:cd:a0:3d:de:91:1c:9e:a5:44:
fe:21:31:1f:40:42:4a:e7:16:3e:4d:68:d2:14:f1:90:aa:c2:
b2:77:77:8a:cb:da:c6:41:e7:57:78:07:48:95:82:33:dc:b7:
24:bd:d3:90:3c:fd:a1:0a:e2:4c:2a:27:31:7a:22:32:27:55:
d4:ce:c7:28:50:61:00:0d:cc:78:df:cf:a7:4b:13:bc:fe:27:
29:84:0f:3b:30:0e:e3:30:99:d2:0a:25:30:ed:92:ad:ef:fb:
31:c7:9b:06:37:1f:16:f1:5e:5c:48:a0:5b:12:3c:1a:20:20:
73:3c:d1:ec:89:8f:ed:ac:85:69:7b:a3:20:78:7f:28:7c:42:
3c:f4:10:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:55 2025 by rpki-client