Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
File: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft (raw, json)
Hash identifier: bRKsvd75fm5QY7kjdCrJhOrZ6lwOUTDIHDKbhSKh0O0=
Subject key identifier: C1:74:3E:78:0B:91:60:48:CA:49:17:02:DB:69:A3:F3:3F:27:BB:38
Authority key identifier: DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08
Certificate issuer: /CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
Certificate serial: 019A7301BDCFABD445861C78F73EE55453FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
Manifest number: 0E53
Signing time: Tue 11 Nov 2025 13:01:25 +0000
Manifest this update: Tue 11 Nov 2025 13:01:25 +0000
Manifest next update: Wed 12 Nov 2025 13:01:25 +0000
Files and hashes: 1: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl (hash: nRbPN1090u0aIRTgkZxViTnzBKFd1tRTukiCJU5cR+o=)
2: 9o3lcP-4u3MnLvx0kAlBujW4rP8.roa (hash: dshKKlZMjXCloMnE9oVR3HuOAnY6dIKys+Z7e0GPVnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:bd:cf:ab:d4:45:86:1c:78:f7:3e:e5:54:53:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
Validity
Not Before: Nov 11 13:01:25 2025 GMT
Not After : Nov 12 13:01:25 2025 GMT
Subject: CN=c1743e780b916048ca491702db69a3f33f27bb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6e:7f:69:76:d5:e1:bf:83:24:a4:ef:31:e0:
e8:72:6c:20:fd:66:d1:a1:38:95:36:2e:ef:a1:f8:
da:6d:82:8c:ad:42:e3:2d:ae:60:91:93:36:e4:8b:
8b:96:05:fd:d5:b4:22:f7:e1:b9:65:a1:7e:36:51:
d8:8f:4e:3a:ff:07:2b:f6:28:55:09:ab:f2:11:61:
49:33:27:f2:8f:3c:69:79:4f:5c:82:dd:1b:25:2a:
81:f3:dc:1a:54:84:3d:e9:bc:35:f4:50:d0:4a:2f:
5f:0c:ae:a3:70:17:d3:46:fc:8d:0c:1a:5c:ab:98:
f1:67:5d:b9:cf:97:b4:67:50:30:bb:0e:ac:25:14:
3f:27:3f:a2:07:93:43:96:ce:de:12:1f:26:2e:68:
f3:63:cc:c0:ce:5a:b6:76:df:39:87:5e:97:c3:97:
3a:1b:1b:52:ac:fa:ae:48:4b:d9:fd:f8:6a:4f:cc:
8a:92:d7:57:12:ce:ad:87:e9:09:32:11:55:6f:30:
dd:9d:ce:32:2e:78:79:ce:5e:0e:68:58:2b:ec:be:
66:36:a9:72:8c:0f:1a:a1:f1:e5:75:86:98:39:f0:
4c:ba:31:47:91:59:3d:87:28:a4:dc:f7:89:cb:de:
16:a1:6f:64:b6:20:44:7c:74:21:79:91:23:9c:90:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:74:3E:78:0B:91:60:48:CA:49:17:02:DB:69:A3:F3:3F:27:BB:38
X509v3 Authority Key Identifier:
keyid:DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:19:35:fd:fe:00:65:5d:e2:de:b9:55:cc:d5:9b:a3:4d:e0:
13:bb:a3:e4:98:ac:59:1f:b9:35:5f:94:53:e3:43:3f:c7:65:
c2:91:9a:df:5f:c9:69:bd:92:73:eb:f5:ef:21:37:bc:c7:d9:
af:90:9a:ab:4d:d7:38:7f:a2:0f:92:44:ca:13:37:4e:f2:87:
be:5c:09:57:61:94:28:04:86:68:42:68:a9:2c:56:91:59:e6:
3b:5a:fe:d3:51:26:6e:75:01:1c:c9:fa:ee:e9:10:26:d1:ee:
01:16:e2:81:3c:0b:89:d4:74:a9:14:60:da:9f:62:b4:a0:13:
23:c7:2e:bd:bc:d5:97:38:44:20:fc:41:42:76:6e:57:95:42:
62:38:8e:03:a9:82:e2:55:3b:ef:7f:a3:a7:04:b5:17:52:00:
68:e7:fb:a5:f0:83:66:ee:13:ac:38:24:77:7e:4a:45:56:90:
01:39:77:4c:39:72:ff:fe:88:20:54:52:94:81:00:c3:62:78:
05:76:f7:78:9f:a6:8b:07:13:36:a8:90:1f:8b:97:c6:43:85:
66:0a:67:57:4e:2b:56:1d:ea:b8:40:47:f3:94:af:6e:81:22:
28:e3:1c:bb:c3:7e:55:dd:f1:68:4e:1a:c9:eb:a3:a9:c6:cc:
91:ce:c7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:39 2025 by rpki-client