Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
File: 3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft (raw, json)
Hash identifier: GYLronsBP5miqsFcqOqycy95EJNpqmjiiOEvF7N+ehY=
Subject key identifier: 93:6A:A6:28:87:B5:07:65:FE:AD:FC:32:40:C2:22:0C:74:26:75:49
Authority key identifier: DE:15:D8:1F:0A:7F:3D:D3:44:51:84:0A:E3:1C:AF:F6:67:CE:EA:F6
Certificate issuer: /CN=de15d81f0a7f3dd34451840ae31caff667ceeaf6
Certificate serial: 019922557CDFDD888B094B90F20D4788570D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
Manifest number: 01A6
Signing time: Sun 07 Sep 2025 04:00:51 +0000
Manifest this update: Sun 07 Sep 2025 04:00:51 +0000
Manifest next update: Mon 08 Sep 2025 04:00:51 +0000
Files and hashes: 1: 3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl (hash: L4KSHsr6yj3bReruwZ8uCpZjeSQCSADA3PA0etRnDtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:7c:df:dd:88:8b:09:4b:90:f2:0d:47:88:57:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de15d81f0a7f3dd34451840ae31caff667ceeaf6
Validity
Not Before: Sep 7 04:00:51 2025 GMT
Not After : Sep 8 04:00:51 2025 GMT
Subject: CN=936aa62887b50765feadfc3240c2220c74267549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:ea:ae:88:33:11:23:ea:9c:a1:47:44:63:
f7:06:29:5a:28:95:75:4c:d2:c5:4b:1c:99:6e:3a:
8c:fc:21:f9:71:4b:fe:56:ce:ca:b0:f8:b7:55:01:
f6:e7:09:7d:e1:c1:c0:a2:26:12:10:8e:08:4a:10:
ad:ce:24:36:43:f2:2d:15:49:c2:a4:c5:a1:3a:4d:
aa:38:f1:90:e1:4c:66:1e:5a:82:0c:9f:a0:5a:31:
ec:7c:10:cd:b5:18:a5:3f:a8:ce:7f:c2:9d:45:78:
c9:66:d2:bc:58:01:62:d8:f3:8e:b4:2f:8b:6e:6a:
a6:4b:44:bf:10:13:82:03:43:5b:23:22:b1:a3:21:
09:a8:b2:36:a4:7f:c6:1f:9e:67:cd:ad:8e:0a:b0:
7b:99:a3:5c:f4:49:31:e2:63:36:c1:a6:34:51:b5:
2e:28:a9:1e:39:2c:dd:f6:98:82:96:e6:03:5f:36:
ae:7b:e7:0e:4a:26:3f:c6:21:c9:57:e4:5c:7f:c4:
db:2c:51:61:42:e4:37:d5:40:77:ce:97:0c:d3:c6:
93:3d:db:5c:ef:8c:2d:ff:3e:4d:0c:71:e8:11:a1:
8b:07:31:a0:10:0d:71:ab:c9:3c:04:c2:19:64:5c:
62:a9:01:7f:79:43:f4:70:83:8e:84:1e:01:8f:8b:
d7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6A:A6:28:87:B5:07:65:FE:AD:FC:32:40:C2:22:0C:74:26:75:49
X509v3 Authority Key Identifier:
keyid:DE:15:D8:1F:0A:7F:3D:D3:44:51:84:0A:E3:1C:AF:F6:67:CE:EA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:cb:b2:cb:36:56:9a:82:fa:e5:47:07:5b:85:6d:fd:06:e1:
88:19:75:35:9a:37:62:dc:4d:77:c7:cb:d6:de:3b:d7:cc:2c:
be:e1:a9:77:ea:77:c5:14:7c:03:af:24:24:e8:d0:8e:84:ee:
9d:f0:7d:01:4a:57:77:5c:42:8b:e9:bd:83:8e:fa:b5:8b:7a:
c5:27:a0:01:a4:7a:63:1c:77:12:0c:5b:f3:14:0d:7b:0e:64:
1d:2f:e5:ea:ab:28:33:f1:cb:64:9b:46:5f:7c:b6:55:04:b3:
cf:a0:4a:94:4d:b6:14:e7:91:0e:0e:a2:bb:74:fa:05:83:58:
56:22:74:d0:54:3d:c6:86:85:8e:37:4e:6d:b5:a9:f3:b0:d8:
bb:89:a4:3c:f9:e0:74:4b:0a:06:a7:83:63:3f:ca:a8:6b:99:
0b:21:b6:77:4b:2c:c3:95:54:cb:f0:a3:3c:49:d3:41:7c:08:
ab:bc:4e:86:5b:29:c8:9f:b9:f2:86:91:77:c1:73:05:19:dd:
24:ef:7e:2a:8d:26:f1:21:79:38:3e:87:57:1e:12:ea:bc:64:
d7:b9:80:ef:d1:8e:23:32:e5:8a:c3:b0:55:af:4b:b3:30:c4:
43:7e:fd:3e:82:20:e0:16:2c:77:2b:44:d2:bd:47:4b:73:3c:
fc:01:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:23 2025 by rpki-client