Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
File: 3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft (raw, json)
Hash identifier: xRZRrc1wUsOhNmvqgIdA1ayuRtbro0diekTbPTVIXuo=
Subject key identifier: 76:DF:4A:F4:5E:1D:DD:69:46:73:1A:0E:B0:8C:B2:3D:A2:02:F3:31
Authority key identifier: DE:15:D8:1F:0A:7F:3D:D3:44:51:84:0A:E3:1C:AF:F6:67:CE:EA:F6
Certificate issuer: /CN=de15d81f0a7f3dd34451840ae31caff667ceeaf6
Certificate serial: 019A725CA5C53639E7789C9FC16CE56CEC69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
Manifest number: 0254
Signing time: Tue 11 Nov 2025 10:01:05 +0000
Manifest this update: Tue 11 Nov 2025 10:01:05 +0000
Manifest next update: Wed 12 Nov 2025 10:01:05 +0000
Files and hashes: 1: 3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl (hash: 4tNvW5vjaWVaY/wqvykUNHAlycBOCQy+RVHzydrvGrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a5:c5:36:39:e7:78:9c:9f:c1:6c:e5:6c:ec:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de15d81f0a7f3dd34451840ae31caff667ceeaf6
Validity
Not Before: Nov 11 10:01:05 2025 GMT
Not After : Nov 12 10:01:05 2025 GMT
Subject: CN=76df4af45e1ddd6946731a0eb08cb23da202f331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:19:8e:69:a1:94:d5:46:5f:c6:9b:88:36:
2f:b9:87:cc:4f:d2:af:25:79:69:90:ec:ab:d8:f4:
c4:5d:35:69:e9:ad:87:9b:99:56:04:51:89:95:8c:
03:aa:5b:e5:88:94:91:db:02:66:93:04:a5:ca:b7:
13:ee:27:66:f7:cb:2c:48:29:59:07:39:df:be:67:
e4:69:04:0d:8b:76:33:55:1e:a2:e0:90:1d:cf:fd:
9e:42:e0:27:b9:78:e6:b1:ab:f3:68:ba:23:57:8b:
4f:0e:00:0d:b2:01:a6:89:b0:c0:17:42:f3:36:9f:
4b:e5:82:01:01:6d:bd:39:db:bd:b5:47:c4:2f:94:
10:55:75:3b:03:32:eb:24:6f:1d:78:f0:7e:be:29:
9c:e2:36:88:82:d3:ba:00:dc:4e:83:5d:3c:d1:b0:
07:b1:fc:0c:71:94:aa:04:d0:97:9e:e6:3c:b7:ad:
59:60:0c:a9:fd:8b:03:61:dd:8d:65:d5:a6:53:a3:
80:db:54:4c:11:05:76:fe:e0:89:82:39:2e:71:39:
4d:11:6a:51:64:3f:12:ab:35:11:66:2a:82:a2:21:
90:57:9b:38:dd:3b:b4:5e:0e:a3:0b:d8:ec:bb:12:
84:ec:bd:94:5c:f1:ce:65:8e:4e:75:cb:67:05:a8:
9c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DF:4A:F4:5E:1D:DD:69:46:73:1A:0E:B0:8C:B2:3D:A2:02:F3:31
X509v3 Authority Key Identifier:
keyid:DE:15:D8:1F:0A:7F:3D:D3:44:51:84:0A:E3:1C:AF:F6:67:CE:EA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:13:d2:7d:4c:ae:5e:8e:41:4f:3a:f9:43:38:9d:95:51:35:
6f:83:10:ba:bf:58:ba:4f:11:29:fd:c1:d3:1e:72:91:7c:89:
1d:72:24:28:c1:cc:18:01:12:75:a2:51:85:c0:63:5a:7a:f1:
f1:2b:66:f3:ab:07:22:72:da:25:8b:dd:60:58:f8:2f:d4:81:
cf:17:0e:6c:54:7f:a4:59:80:51:b1:e0:2b:62:1a:20:7a:24:
c3:0f:07:ec:ed:f0:3d:29:de:78:95:c7:9b:7b:d6:19:10:3d:
c3:32:2b:9a:f5:c1:f7:3a:6d:7a:a1:90:c9:83:f6:d7:49:98:
90:13:4d:9b:fa:c9:04:dd:e7:34:08:fe:74:48:a7:9e:39:16:
da:49:5d:f4:bc:ea:47:f7:66:51:10:40:2e:53:cc:9d:8f:e0:
c4:6f:63:b0:2b:3c:33:1b:1a:61:49:73:8d:96:5f:b9:88:48:
47:2b:7c:4c:98:c1:8f:84:31:3e:71:59:f5:07:3b:24:74:66:
92:0e:b1:01:53:8a:2b:fc:52:94:a6:d8:45:61:72:97:d1:c7:
35:ae:a2:e1:f4:62:bd:1c:75:9f:45:b0:75:53:e7:de:3e:eb:
77:1d:98:9b:53:9e:a7:75:6e:20:bd:3a:d7:f7:8d:c3:d6:a0:
48:5e:d5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:38:38 2025 by rpki-client