Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
File: t3RSzSU14-k1ff-IGIXq2RSQpGM.mft (raw, json)
Hash identifier: 82vFKVvNZBFe02AdmBrm/j18lbY1Z+/PDewH2N4bmMc=
Subject key identifier: D3:29:53:44:73:1E:4D:52:E6:FF:44:95:75:93:C7:0D:05:33:A6:5B
Authority key identifier: B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63
Certificate issuer: /CN=b77452cd2535e3e9357dff881885ead91490a463
Certificate serial: 019A71EE739B400D8BF1A66C8C913317E8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
Manifest number: 06D4
Signing time: Tue 11 Nov 2025 08:00:43 +0000
Manifest this update: Tue 11 Nov 2025 08:00:43 +0000
Manifest next update: Wed 12 Nov 2025 08:00:43 +0000
Files and hashes: 1: t3RSzSU14-k1ff-IGIXq2RSQpGM.crl (hash: QmSPEefobfT6XMoJ3T+O8PdtTDmRIg50ce7K4ik5Qjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:73:9b:40:0d:8b:f1:a6:6c:8c:91:33:17:e8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77452cd2535e3e9357dff881885ead91490a463
Validity
Not Before: Nov 11 08:00:43 2025 GMT
Not After : Nov 12 08:00:43 2025 GMT
Subject: CN=d3295344731e4d52e6ff44957593c70d0533a65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:a5:61:d1:75:27:33:ae:47:16:05:8a:6c:
fe:6a:cf:90:f8:7c:4e:06:e9:fe:78:bd:70:d4:74:
06:fe:98:fa:6f:56:4c:90:4f:50:f3:46:4c:cf:3b:
5b:e4:32:16:d1:6e:05:98:ac:f5:c7:48:71:dd:dd:
70:63:66:ad:4b:a5:35:75:46:02:5e:d3:f3:c0:f9:
67:ca:e6:58:6f:81:71:9a:f4:14:48:98:65:d0:99:
b1:c1:56:19:3a:20:5c:33:fb:b5:70:9a:2f:3d:c3:
de:14:b4:29:eb:0a:b0:03:b2:b9:e5:86:d0:0d:38:
85:d7:e1:80:74:df:76:07:f1:18:61:76:e4:b9:73:
51:46:38:30:74:80:97:d6:26:d7:89:ce:d8:96:f2:
45:66:9b:eb:79:65:e3:92:5c:6c:72:b2:13:31:b7:
e5:86:86:f9:74:85:70:fd:d0:43:64:17:12:c9:f7:
0e:6c:57:ed:70:a9:92:17:d2:d8:c7:24:dc:95:1d:
23:60:0b:fe:90:7f:f4:6c:20:cb:85:d8:f1:90:64:
02:8f:79:b8:64:b2:22:79:2e:8c:6e:c5:ae:c8:a8:
e2:f9:6f:5c:35:31:e4:d8:b9:49:83:f0:82:77:11:
24:60:e4:02:ae:df:6f:73:d1:70:3e:8f:62:0c:98:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:29:53:44:73:1E:4D:52:E6:FF:44:95:75:93:C7:0D:05:33:A6:5B
X509v3 Authority Key Identifier:
keyid:B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:4a:af:0c:1c:79:3d:0f:e6:4a:fc:94:8d:0e:af:47:8b:db:
9d:d8:9b:fe:40:16:f4:40:5b:b4:89:71:aa:d3:eb:44:96:db:
7c:3e:26:18:b8:25:fa:2a:de:db:33:95:63:b9:5f:54:0b:92:
2d:56:27:9a:3d:fb:f0:92:7e:28:ec:66:06:5c:0f:1d:29:ea:
59:34:49:41:50:86:cc:79:e7:d6:ed:1f:ff:6c:84:04:d8:60:
a6:e1:92:d9:29:1b:84:3a:e4:21:cd:99:80:c2:06:5c:db:4b:
68:67:82:54:9a:24:0f:04:42:a6:6a:5e:90:6b:f5:fa:19:1e:
89:e9:be:12:96:76:d5:89:23:ce:34:d6:3a:c4:1d:0e:79:27:
69:0a:c4:82:b6:34:49:4c:c4:c7:5b:3f:5b:e7:38:ec:2c:73:
56:eb:15:72:98:50:25:35:cb:71:62:6b:48:0f:88:d4:9e:b6:
43:eb:4d:cb:b0:98:a1:85:f6:56:8e:09:e9:31:56:94:ec:0d:
19:a1:7e:58:d3:35:8c:7d:5c:02:ef:77:b4:5b:84:18:3f:6c:
04:97:6b:81:01:42:70:41:79:b1:7d:5e:d3:b8:49:cd:9d:69:
99:84:9c:16:da:3a:91:12:b4:26:bb:99:48:60:07:d6:eb:4f:
45:a1:b9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:45 2025 by rpki-client