Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
File: 3vg4UDz7wFKD_erdRkSke_14P84.mft (raw, json)
Hash identifier: u/gazGKhZZo6gouUlcnsJo5Kog5V2OD1xAOWW/CGyX0=
Subject key identifier: 32:28:3F:EB:9F:C1:E8:33:66:61:35:F4:B9:00:BB:8E:61:7A:78:58
Authority key identifier: DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
Certificate issuer: /CN=def838503cfbc05283fdeadd4644a47bfd783fce
Certificate serial: 019A7301C23158E665767279F86CF4498D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
Manifest number: 0949
Signing time: Tue 11 Nov 2025 13:01:26 +0000
Manifest this update: Tue 11 Nov 2025 13:01:26 +0000
Manifest next update: Wed 12 Nov 2025 13:01:26 +0000
Files and hashes: 1: 3vg4UDz7wFKD_erdRkSke_14P84.crl (hash: Z2OTokMLtrpqlLvVz2EWa4BdK/9KCr7eIq8tZY+i4T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:c2:31:58:e6:65:76:72:79:f8:6c:f4:49:8d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def838503cfbc05283fdeadd4644a47bfd783fce
Validity
Not Before: Nov 11 13:01:26 2025 GMT
Not After : Nov 12 13:01:26 2025 GMT
Subject: CN=32283feb9fc1e833666135f4b900bb8e617a7858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b1:d8:6f:90:f6:78:cc:c1:cf:3a:0d:79:f1:
96:78:d8:31:0b:7d:e3:2c:d3:39:b4:fc:11:cb:ee:
ba:fe:f2:d0:2f:1d:dc:0f:c0:c6:3e:21:d6:7f:c3:
27:9e:12:5f:0f:38:a8:2c:50:eb:26:94:40:2d:0f:
63:00:61:1b:ad:d2:1c:30:bb:ff:2e:e7:48:57:51:
ac:15:96:89:95:06:ee:02:55:d4:28:d6:77:f2:da:
4e:98:b7:80:62:70:fa:90:05:99:57:ed:3c:d8:35:
fa:0f:9c:bf:5e:b8:9a:72:18:e5:d0:11:c5:d8:3a:
07:28:08:64:5d:65:24:21:85:68:80:53:a8:92:db:
ee:6d:a7:46:a4:ea:af:09:59:0b:9b:61:f3:bb:0a:
73:7c:29:e0:df:52:df:e8:de:4c:0e:23:92:00:83:
31:b1:7f:d0:89:48:9a:14:21:23:7b:b8:33:57:b8:
16:d0:d7:98:2d:69:dc:32:cb:42:45:74:cc:1c:fc:
98:65:39:f2:65:04:ca:1a:24:97:3a:af:3a:97:18:
e1:9a:79:4a:68:2b:34:91:0c:4f:4e:a2:6f:f2:33:
3f:af:ce:f2:15:b8:fb:5f:a2:ff:2c:a9:bc:18:ec:
60:3a:6a:f6:ad:e6:c1:e1:56:f0:23:2a:3d:5f:84:
37:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:28:3F:EB:9F:C1:E8:33:66:61:35:F4:B9:00:BB:8E:61:7A:78:58
X509v3 Authority Key Identifier:
keyid:DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c5:f3:92:a8:52:b4:48:0b:8e:3e:c0:8a:9b:72:96:78:e3:
1a:ce:f4:12:3b:94:3b:cb:fd:b5:2d:07:1a:3f:45:31:7b:39:
48:04:62:6c:bf:67:e6:b1:8f:86:94:ed:07:0d:f9:a4:2c:0b:
08:b0:14:54:02:45:bb:18:f6:64:49:3d:bb:65:0d:b3:f0:d4:
ed:54:21:20:84:db:23:d8:33:79:6f:5d:e7:73:c4:1d:af:02:
be:51:78:4e:1b:c1:b8:35:ba:da:71:45:86:e8:91:4a:38:83:
a8:9b:77:48:ff:5e:f6:08:84:65:b5:2e:ec:ea:10:11:cf:df:
c1:02:8a:03:5f:29:ee:39:44:8c:96:6c:1b:45:3c:14:87:8e:
0e:44:0d:85:84:f6:76:f4:48:95:00:40:dc:ce:d9:93:59:bf:
57:7a:98:1b:7b:cf:64:68:42:e3:d9:02:95:16:39:0d:1d:18:
d0:4e:43:4e:96:c5:c5:7f:28:7d:0d:f0:46:90:a4:22:e7:53:
e8:83:57:a7:5a:17:08:d2:19:b5:dd:4c:0e:df:94:a8:f3:84:
4c:f8:be:ba:b8:9f:f8:b7:e4:49:78:59:cc:22:3c:8c:94:e0:
c4:40:31:84:23:16:15:06:36:5e:5b:13:2e:cf:4b:ac:34:fa:
cd:2b:49:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:01 2025 by rpki-client