Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json)
Hash identifier: iYfVS9J7MplmowZCyOx7ybpB46ZZrQ2a1PO4rDzVwmU=
Subject key identifier: 66:DF:F0:56:81:D9:02:7B:0B:10:4D:6F:20:CB:B4:F6:7B:FD:73:EA
Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Certificate serial: 019A70A531BD05C67A5E0B8E79438EFC233C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
Manifest number: 0DFE
Signing time: Tue 11 Nov 2025 02:01:05 +0000
Manifest this update: Tue 11 Nov 2025 02:01:05 +0000
Manifest next update: Wed 12 Nov 2025 02:01:05 +0000
Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: gPZ/wRnEp7KJCjON1GevQoWrx+mT9BqlprdSjrgu53E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:31:bd:05:c6:7a:5e:0b:8e:79:43:8e:fc:23:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Validity
Not Before: Nov 11 02:01:05 2025 GMT
Not After : Nov 12 02:01:05 2025 GMT
Subject: CN=66dff05681d9027b0b104d6f20cbb4f67bfd73ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:5f:97:3c:b1:26:7d:1a:35:a9:cf:be:4c:
87:3c:2e:b4:33:d1:1b:95:7b:c6:65:b0:e7:ff:25:
8e:52:20:be:4d:98:9c:14:e5:36:85:af:af:82:7d:
e6:55:e9:97:06:c5:b8:e3:5b:8b:81:84:c5:a1:55:
cf:5c:d5:ec:dc:fa:35:cd:5a:00:de:f7:8b:2b:3d:
d4:40:0d:59:48:ac:6e:f9:dc:c7:6b:21:6a:c2:a2:
96:1f:71:06:44:47:57:3f:44:02:de:17:d5:ed:e5:
3e:8b:ff:c7:8f:1f:e3:e2:a6:ef:03:4a:19:51:c8:
c2:78:92:5a:ea:07:d1:12:40:29:ee:14:20:6f:fa:
08:fc:4d:31:ee:17:46:85:ea:c8:e1:a8:47:0a:6f:
cb:91:10:9f:bf:97:34:0a:3f:8f:35:70:52:29:90:
9b:8b:5d:b8:dd:8e:73:a0:78:89:c1:42:62:09:50:
8a:4f:ab:de:cd:20:23:35:e4:c5:0f:3b:9a:0f:40:
8b:33:27:1b:14:7b:3a:7c:f5:51:9f:9c:86:bd:fc:
13:f9:57:8d:7a:a5:10:26:98:47:19:04:d0:ac:a7:
c1:d8:a7:db:a1:2e:c7:1d:53:da:d9:95:23:74:5b:
ee:a8:4f:f4:5f:08:b2:77:9f:e0:70:d3:0d:c1:22:
1f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DF:F0:56:81:D9:02:7B:0B:10:4D:6F:20:CB:B4:F6:7B:FD:73:EA
X509v3 Authority Key Identifier:
keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ad:fc:8d:5a:41:c4:55:27:a9:22:c7:ee:52:63:08:20:2e:
19:b9:91:25:fa:e7:1e:30:39:dc:2c:e5:24:a6:75:1f:e2:63:
b0:20:2d:40:94:7b:7a:25:ae:20:41:03:15:e0:a9:a9:63:b4:
dc:ae:80:10:bf:98:98:ed:be:d6:96:83:13:e4:7a:02:48:52:
61:4b:24:35:2e:f0:73:e8:af:4c:42:8d:c2:4f:78:ef:9a:d5:
db:04:82:0f:d7:6c:b7:eb:a9:54:9d:b5:79:09:39:30:0f:6d:
77:74:dc:fb:60:3d:b0:78:d4:3d:d7:e2:4a:74:76:65:92:37:
c8:b8:09:d4:f7:e8:b3:bc:d3:78:bc:ec:44:93:9e:28:aa:4e:
6e:1d:11:57:63:78:e8:48:fb:3f:62:cd:16:ce:52:22:b6:6a:
11:8a:ca:57:0c:a4:fc:95:b4:4f:01:27:9f:71:4a:91:5d:66:
3a:55:f1:3a:4a:1e:f4:c5:de:e1:29:4f:38:f6:b8:43:e0:8b:
64:d7:3d:cc:b2:62:70:97:80:a1:d1:32:ce:0d:ac:21:6c:64:
1c:9f:60:7e:23:15:d5:8f:da:08:ad:d9:15:76:0f:3e:af:41:
af:b1:82:51:94:e5:5f:f1:d7:5a:26:26:b7:e6:64:43:50:ff:
43:8a:3c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:26 2025 by rpki-client