Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier: qHCe15NU4NQkTrx9xgc7qrTJ43TYASaVVwR3FGyB81M=
Subject key identifier: F4:4A:C0:39:C0:DF:34:C1:74:CA:21:32:D2:A5:81:CD:89:DA:E5:A4
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial: 0199239F99D8DDB159888BCC38527F28FE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number: 0E8D
Signing time: Sun 07 Sep 2025 10:01:25 +0000
Manifest this update: Sun 07 Sep 2025 10:01:25 +0000
Manifest next update: Mon 08 Sep 2025 10:01:25 +0000
Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: ELha1A43NCP5D/4apbEHdJq7ZUjem4zh3VbA9eTXbZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:99:d8:dd:b1:59:88:8b:cc:38:52:7f:28:fe:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Validity
Not Before: Sep 7 10:01:25 2025 GMT
Not After : Sep 8 10:01:25 2025 GMT
Subject: CN=f44ac039c0df34c174ca2132d2a581cd89dae5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:da:d2:56:2a:05:b9:7f:4d:84:12:ac:83:a7:
33:7d:20:2b:1b:36:cf:25:62:ec:00:b0:c3:bd:a9:
bc:3b:c8:03:d0:ee:40:d3:f0:c6:f1:03:14:bf:4c:
77:47:d4:97:7d:87:cb:a8:7a:16:42:85:b0:7a:b7:
ff:9e:3a:7a:ac:1c:d5:7a:6d:25:8a:3a:b6:7e:dc:
86:55:c5:f7:df:13:3f:db:f2:37:78:04:68:8f:a7:
3e:56:81:17:c5:48:f5:b2:eb:f8:2f:95:c3:b7:51:
f1:db:c5:69:b8:c1:91:76:59:18:0e:d4:43:e7:cf:
e5:9c:5c:87:2e:5f:c3:5e:e2:99:44:69:c0:3c:e0:
4e:dc:b9:e5:aa:8b:5d:9d:d5:f6:48:79:8e:99:86:
06:98:ab:b7:e6:7b:f8:18:8d:26:90:3d:48:91:02:
aa:59:05:ba:20:98:13:56:6f:05:e7:46:6b:ca:47:
b9:a3:11:aa:b8:24:ca:c7:72:f8:82:e6:c3:43:65:
f0:c3:f2:7c:fd:4c:59:67:13:03:ba:7d:fd:f2:5a:
3b:90:14:bd:f1:8e:1c:b2:9a:68:7a:d4:7a:4b:64:
a1:26:3b:de:51:cd:74:8f:e4:56:e9:58:7c:5a:95:
c8:5c:65:0f:09:97:f8:17:8a:61:3a:71:20:bf:33:
a7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4A:C0:39:C0:DF:34:C1:74:CA:21:32:D2:A5:81:CD:89:DA:E5:A4
X509v3 Authority Key Identifier:
keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a4:4a:71:40:31:77:05:33:eb:96:18:bf:d4:d2:3a:31:5d:
d1:ae:7a:c1:d0:50:00:1d:09:59:05:b2:52:4e:5b:c7:fa:b3:
53:5d:b8:e6:a4:d2:3c:b0:fd:af:be:9c:a9:60:68:c3:b5:7f:
c2:01:63:50:35:69:de:58:a9:6f:8a:e5:71:c8:5e:8c:50:b8:
68:39:78:aa:98:bb:28:db:62:8e:7f:30:ad:d8:5a:1e:e4:1e:
c5:34:6d:79:12:ad:31:dc:36:46:50:b9:ba:07:3e:25:39:93:
31:4f:93:f6:f3:8b:56:0f:c4:03:6b:19:b1:e4:f9:fa:23:39:
a6:98:c7:58:f9:38:66:21:7d:db:c6:b6:aa:02:75:41:64:28:
a0:c2:c6:b4:95:e7:c8:c0:a7:54:08:03:03:04:bc:65:ce:e6:
f0:10:f2:07:83:a7:e8:e0:ae:1e:bf:96:87:17:49:b4:47:ac:
f0:1c:33:28:1e:ab:e2:f9:68:e3:f7:0e:46:4a:df:d4:8c:6e:
06:e8:b2:b4:0a:72:d7:34:fd:e0:0a:59:a1:58:42:92:57:69:
36:ba:fd:96:f3:e8:ef:35:e2:c9:da:8f:83:4a:4b:9b:a9:31:
4a:42:d9:26:32:ee:05:6f:07:ee:83:d8:8c:8b:03:ca:6e:56:
25:46:d6:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn5nY3bFZiIvMOFJ/KP4lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZjhhYjVmNzRkYzkwZTlmZmJhOGQ0Mjk4OGVkNWE3NzQ4
YzFkMDUwHhcNMjUwOTA3MTAwMTI1WhcNMjUwOTA4MTAwMTI1WjAzMTEwLwYDVQQD
EyhmNDRhYzAzOWMwZGYzNGMxNzRjYTIxMzJkMmE1ODFjZDg5ZGFlNWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9rSVioFuX9NhBKsg6czfSArGzbP
JWLsALDDvam8O8gD0O5A0/DG8QMUv0x3R9SXfYfLqHoWQoWwerf/njp6rBzVem0l
ijq2ftyGVcX33xM/2/I3eARoj6c+VoEXxUj1suv4L5XDt1Hx28VpuMGRdlkYDtRD
58/lnFyHLl/DXuKZRGnAPOBO3LnlqotdndX2SHmOmYYGmKu35nv4GI0mkD1IkQKq
WQW6IJgTVm8F50Zryke5oxGquCTKx3L4gubDQ2Xww/J8/UxZZxMDun398lo7kBS9
8Y4csppoetR6S2ShJjveUc10j+RW6Vh8WpXIXGUPCZf4F4phOnEgvzOnvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRKwDnA3zTBdMohMtKlgc2J2uWkMB8GA1UdIwQY
MBaAFN74q1903JDp/7qNQpiO1ad0jB0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82YTcyNWEtNDJlNC00MjcwLWI1YWYt
NDUzZmMxYmNiY2Q1LzEvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82YTcyNWEtNDJlNC00MjcwLWI1YWYtNDUzZmMxYmNiY2Q1
LzEvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhaRKcUAx
dwUz65YYv9TSOjFd0a56wdBQAB0JWQWyUk5bx/qzU1245qTSPLD9r76cqWBow7V/
wgFjUDVp3lipb4rlcchejFC4aDl4qpi7KNtijn8wrdhaHuQexTRteRKtMdw2RlC5
ugc+JTmTMU+T9vOLVg/EA2sZseT5+iM5ppjHWPk4ZiF928a2qgJ1QWQooMLGtJXn
yMCnVAgDAwS8Zc7m8BDyB4On6OCuHr+WhxdJtEes8BwzKB6r4vlo4/cORkrf1Ixu
BuiytApy1zT94ApZoVhCkldpNrr9lvPo7zXiydqPg0pLm6kxSkLZJjLuBW8H7oPY
jIsDym5WJUbW2g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:15 2025 by rpki-client