Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier: xBkBcUvTyV5aNIyLmIRMYCnMIK7i9Duz8cKRgi8psQM=
Subject key identifier: 57:50:C4:82:6D:33:3C:FA:E6:68:77:33:20:F5:99:3C:A0:A2:7D:0F
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial: 019A725C60CFF93CB9AFC665D67A39052984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number: 1317
Signing time: Tue 11 Nov 2025 10:00:47 +0000
Manifest this update: Tue 11 Nov 2025 10:00:47 +0000
Manifest next update: Wed 12 Nov 2025 10:00:47 +0000
Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: jxzXMBzDvc1DfAaBczhCPiZVGVEeHGLMME0uF670s44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:60:cf:f9:3c:b9:af:c6:65:d6:7a:39:05:29:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Validity
Not Before: Nov 11 10:00:47 2025 GMT
Not After : Nov 12 10:00:47 2025 GMT
Subject: CN=5750c4826d333cfae668773320f5993ca0a27d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:06:3d:38:ef:ec:9d:38:b8:c4:4e:60:19:
68:c6:1e:33:d6:c9:b9:c5:7b:e2:ee:8e:22:89:8a:
b2:0d:a2:44:6e:44:b4:96:dc:9d:3f:39:4e:37:72:
89:96:c7:5d:68:b0:6c:21:2b:53:66:29:02:4d:7d:
ba:0f:79:87:a5:92:d9:08:ad:f1:97:bb:7d:dd:9d:
33:cc:55:ef:25:96:2b:f5:6e:89:32:66:ca:96:83:
7b:b5:9f:a8:89:ed:dd:1e:69:56:37:5c:45:56:d7:
16:5b:2f:1f:14:00:c8:05:90:d4:da:bf:51:83:30:
62:e5:62:f6:6c:4f:fc:a9:a1:72:41:09:4f:4e:a9:
57:33:c3:11:70:1e:2e:9a:75:74:30:91:54:a7:38:
c2:dc:42:fc:eb:c9:35:0d:61:f8:0b:26:f4:e2:16:
cd:6a:a2:3f:5f:d7:a3:7b:f1:65:6c:a7:a5:f1:4b:
41:f2:98:e6:0e:29:9d:a0:0e:b8:2f:97:f2:d5:17:
22:8e:3d:b6:50:b1:71:75:f8:4a:50:dd:d8:a8:4c:
69:70:2a:62:34:cb:27:48:cb:91:d1:56:95:6a:06:
69:06:53:71:c7:23:d7:bf:63:cd:83:6e:0c:d7:46:
75:49:43:d4:3c:3d:37:4b:e8:d2:30:dd:24:0f:16:
15:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:50:C4:82:6D:33:3C:FA:E6:68:77:33:20:F5:99:3C:A0:A2:7D:0F
X509v3 Authority Key Identifier:
keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:69:61:be:35:4c:14:05:43:c3:1a:aa:48:7b:2e:a3:c6:8f:
f7:40:ec:47:28:9e:05:3c:59:bc:54:68:44:39:97:e1:05:fe:
46:5a:66:59:09:4f:be:03:fa:9d:6b:fc:e1:ac:a7:5a:4d:7d:
87:3e:cc:7a:81:58:28:eb:73:c8:3a:94:8c:35:0c:1d:f3:5a:
89:5c:4c:14:87:05:e3:99:d3:a7:41:ce:69:8e:83:47:55:c1:
c7:18:62:82:48:a8:bb:da:34:80:b4:40:27:8c:15:23:d2:6a:
f5:78:40:07:fa:1b:24:04:ae:57:f8:d5:2c:c4:44:8a:3c:66:
92:31:0e:83:eb:87:75:44:54:a5:e2:8c:2a:ab:b9:7e:da:50:
45:f2:62:71:0c:7a:60:6e:67:ce:fb:a9:3e:53:7b:40:69:34:
a4:3f:69:42:35:e7:d2:5f:30:f4:0e:49:76:06:b0:c7:b1:ba:
78:20:67:2d:6b:6b:73:ce:c0:c5:70:f8:20:fc:fb:57:8e:ea:
19:3f:38:a6:7e:fa:ca:f6:77:69:2f:38:58:6d:64:07:16:9a:
a2:e2:fc:49:5e:c1:fe:1e:a6:ba:a4:06:60:36:80:e4:83:99:
ce:f4:93:af:a2:0f:96:01:f5:06:80:7f:29:a6:7c:fe:91:33:
76:f5:6b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:06 2025 by rpki-client