Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
File: l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft (raw, json)
Hash identifier: MuelWdAOQi3KZ6IbvGleQKBB0Zl02X8e3NRcuEtur6g=
Subject key identifier: A7:B7:E0:0B:98:49:08:63:C7:09:65:BD:4C:33:FB:AC:9B:02:0B:2B
Authority key identifier: 97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E
Certificate issuer: /CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
Certificate serial: 019A725C3C1C956357AB2A28C1C39475B113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
Manifest number: 060E
Signing time: Tue 11 Nov 2025 10:00:38 +0000
Manifest this update: Tue 11 Nov 2025 10:00:38 +0000
Manifest next update: Wed 12 Nov 2025 10:00:38 +0000
Files and hashes: 1: l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl (hash: zF3imfnw6H67GOaEOoNy2HHCeCgrDg7mRitdPgDerlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:3c:1c:95:63:57:ab:2a:28:c1:c3:94:75:b1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
Validity
Not Before: Nov 11 10:00:38 2025 GMT
Not After : Nov 12 10:00:38 2025 GMT
Subject: CN=a7b7e00b98490863c70965bd4c33fbac9b020b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:ba:85:80:e2:f0:aa:22:de:40:04:70:6b:
52:0a:3f:b3:76:28:3c:40:5c:0c:73:4c:b0:94:a3:
90:81:65:83:0f:2d:e8:b4:e5:79:56:d2:cf:1c:1a:
88:fd:6e:dc:63:69:2a:06:ac:05:1b:5e:f9:6f:99:
a6:a6:04:0c:ee:81:81:57:65:8d:3d:96:dc:43:74:
22:4a:99:95:4e:8f:6a:18:10:34:1c:cc:c3:72:c9:
7b:a8:58:52:6c:6d:00:c9:62:d0:d9:ef:6a:47:eb:
f4:d1:41:2d:6d:9b:3b:3f:6a:8a:b8:01:c9:f9:5c:
c6:f2:4d:b6:9d:fd:73:7b:cf:96:be:f8:58:eb:a4:
ec:28:a2:66:fa:33:92:a1:a8:cc:21:85:6a:d0:66:
5b:15:b7:b4:f7:d4:f0:85:12:a0:65:88:75:30:ad:
7a:0b:02:e8:e6:a3:44:c8:18:ea:52:5b:85:96:26:
1e:b6:08:1d:86:17:ea:8d:54:b5:91:de:30:1d:bd:
9e:b2:12:6f:3c:43:cd:67:6b:92:89:b7:85:ee:de:
79:77:3f:b0:28:65:c0:e7:4c:74:55:07:cb:01:14:
75:cb:97:ca:ab:ed:46:23:33:00:a0:8c:4f:df:e6:
df:69:10:3f:34:09:69:de:85:40:c5:59:60:9b:06:
0a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B7:E0:0B:98:49:08:63:C7:09:65:BD:4C:33:FB:AC:9B:02:0B:2B
X509v3 Authority Key Identifier:
keyid:97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:a0:a4:71:73:b3:e3:d0:e4:81:bb:7c:ed:d4:ab:99:d7:e4:
db:68:5d:26:04:bc:be:49:7f:6f:48:71:00:de:37:74:3a:b6:
37:1a:10:df:da:20:83:02:9b:bd:a5:28:d9:94:db:69:62:7b:
aa:41:5e:2e:ad:bd:13:2b:bf:09:e6:83:be:3c:0c:1d:41:d0:
a1:2a:4a:23:ec:c5:39:29:a8:14:10:20:24:cc:8a:dc:33:72:
2b:e5:2e:fe:e9:a1:18:85:44:5f:4f:da:29:dd:a1:ae:95:fd:
19:d7:d2:f9:01:c1:b6:f7:d6:c1:ee:ac:ae:51:01:a0:50:42:
bc:4e:e1:4f:b9:21:7c:62:ca:e9:88:cc:cb:99:c5:97:18:65:
28:db:3e:00:15:53:5f:0c:f3:c6:f0:1f:37:fa:af:98:4b:7b:
d7:4f:e6:71:a8:e6:b1:cb:04:02:44:87:19:89:c5:3f:d5:2a:
33:40:4c:64:86:d1:48:71:1c:fa:d6:04:a7:6b:cc:ac:54:0a:
b7:29:ad:bb:51:79:06:60:eb:6b:17:6b:eb:b9:4d:22:28:8f:
80:2f:f4:87:5f:dd:4e:75:21:f7:5c:e4:54:a5:87:55:f8:ff:
6c:13:6e:fa:83:e4:aa:ce:e6:fc:c9:d8:8b:d0:f2:d0:6f:ed:
ad:7e:2f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:37 2025 by rpki-client