Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
File: 3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft (raw, json)
Hash identifier: RgoMZp8Y05juX+VWqtJRL0ou4D2zMErBFudJjjvtWms=
Subject key identifier: 29:AF:13:D7:D7:6C:C6:9D:F7:AC:8D:20:2E:E0:6D:9A:C6:8D:6F:FE
Authority key identifier: DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64
Certificate issuer: /CN=dcc50a2b974349948b04ee389b2a99d1754fb464
Certificate serial: 019A730114F7B7269799899C60EF554A0FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
Manifest number: 12FC
Signing time: Tue 11 Nov 2025 13:00:41 +0000
Manifest this update: Tue 11 Nov 2025 13:00:41 +0000
Manifest next update: Wed 12 Nov 2025 13:00:41 +0000
Files and hashes: 1: 3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl (hash: eV6vhsh+plOyuLAC9vmYKoY3LmkB9F2FTOI5bPYxEGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:14:f7:b7:26:97:99:89:9c:60:ef:55:4a:0f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc50a2b974349948b04ee389b2a99d1754fb464
Validity
Not Before: Nov 11 13:00:41 2025 GMT
Not After : Nov 12 13:00:41 2025 GMT
Subject: CN=29af13d7d76cc69df7ac8d202ee06d9ac68d6ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:55:dd:57:be:64:8b:3e:c8:80:4a:1e:6b:04:
35:b5:ff:2b:2a:3a:88:ed:dc:fd:52:9d:03:15:a7:
98:37:1a:af:68:33:a1:2b:70:11:a8:b6:d1:cc:01:
18:f9:4f:07:7e:44:37:60:c4:90:ee:87:59:c5:da:
4b:dd:a7:f3:b1:6c:88:f6:72:51:43:ff:36:94:0e:
7d:39:25:1e:34:0f:f0:83:39:a8:c6:e7:b1:ee:49:
64:c4:86:5d:25:f2:79:d6:a5:18:90:10:78:44:a9:
bf:e0:dc:cc:ff:02:5b:4a:94:df:b0:d7:5b:7e:5d:
19:b1:e5:32:51:57:64:6c:a5:81:93:9a:12:90:5f:
3b:8a:76:eb:36:e9:ee:a6:18:1b:b6:ee:bd:32:ac:
ec:25:da:4a:9d:ae:69:50:8f:66:64:66:6a:42:75:
18:c4:bb:fc:dd:65:30:96:8e:9a:f2:2f:f7:7d:ec:
10:d1:c3:2e:d4:8e:77:90:1d:b8:50:26:7c:0c:e2:
68:45:eb:17:f7:0b:f4:84:fd:0a:2b:d4:cf:0c:76:
24:48:9a:48:8e:6a:3d:59:6a:df:58:a9:76:36:85:
56:ef:cf:ec:b9:0f:ec:bf:38:49:df:ed:70:b9:7f:
92:42:4f:73:27:eb:05:1c:67:e7:1e:a6:02:5c:36:
70:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AF:13:D7:D7:6C:C6:9D:F7:AC:8D:20:2E:E0:6D:9A:C6:8D:6F:FE
X509v3 Authority Key Identifier:
keyid:DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6f:e7:11:24:c6:00:2b:e2:a9:0c:da:38:b7:5c:79:7a:b3:
71:95:2c:3b:20:44:1e:50:28:c3:e7:4e:b4:95:84:4d:fb:4c:
35:90:ff:b0:43:26:eb:5e:29:21:e9:73:98:3d:e7:8f:4b:6c:
38:0f:68:6d:06:a6:c7:c1:b6:37:09:93:11:3c:30:5a:70:f0:
2c:f8:68:d5:8f:69:e6:18:3f:21:34:3c:3d:cd:d5:70:98:8d:
1e:c6:37:59:b6:00:4f:f9:5c:40:98:b3:15:1f:c2:fa:76:4b:
f1:bb:52:7d:50:d3:89:21:da:70:bf:ac:0b:ff:9a:ce:fe:01:
08:4b:f0:71:3b:c5:07:44:08:22:3d:01:ec:c4:b3:b4:4c:09:
64:6c:a9:ca:13:9d:2e:5a:ed:13:ec:91:1f:bb:68:6c:22:69:
31:ab:58:a1:fa:f5:7b:5a:a0:ec:60:af:34:d6:97:5f:fa:bf:
3e:74:bf:94:bb:1a:ca:72:85:56:cb:7e:7a:34:08:58:db:17:
15:34:a0:43:0b:11:a3:c7:8b:80:ea:18:82:4b:8e:c6:00:71:
a6:bd:f1:ee:46:65:f4:61:55:2f:de:c3:cf:09:1d:3e:4c:d0:
1f:28:22:90:1e:4e:e8:c2:b6:e4:08:42:75:59:a2:94:8b:b3:
3c:47:f2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:25 2025 by rpki-client