Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
File: rV3Hd3t3orNHfGernSbMeqAvOIk.mft (raw, json)
Hash identifier: 0+m9TEBXgo6Creg9ZrzUeoxc30N6SSYr8Qn8xb2EeHk=
Subject key identifier: 33:63:00:1A:AA:18:51:94:D7:EE:9A:A8:D6:CD:4E:26:E4:56:7C:14
Authority key identifier: AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89
Certificate issuer: /CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889
Certificate serial: 019A71EE6489E58555048B24CBAE212D7B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
Manifest number: 169A
Signing time: Tue 11 Nov 2025 08:00:39 +0000
Manifest this update: Tue 11 Nov 2025 08:00:39 +0000
Manifest next update: Wed 12 Nov 2025 08:00:39 +0000
Files and hashes: 1: rV3Hd3t3orNHfGernSbMeqAvOIk.crl (hash: 9d6CRGCH9kjEltsW3BUzfswW8T2rGAvlDswqUw1U+EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:64:89:e5:85:55:04:8b:24:cb:ae:21:2d:7b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889
Validity
Not Before: Nov 11 08:00:39 2025 GMT
Not After : Nov 12 08:00:39 2025 GMT
Subject: CN=3363001aaa185194d7ee9aa8d6cd4e26e4567c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:c8:0e:65:b2:4d:c2:64:18:54:2f:44:37:
d0:16:24:a4:8e:e8:95:56:7d:14:f1:95:18:11:a9:
be:4e:58:6f:ab:f7:84:4d:14:8a:5e:a5:37:59:31:
1b:f0:e9:8d:7d:f9:a0:58:b0:b0:f4:7c:80:c8:b2:
da:7d:6b:3d:55:17:b6:8c:5f:9d:c3:9b:73:66:23:
94:be:25:de:f1:54:0f:8c:01:1e:8f:ca:8b:8b:02:
dd:b5:89:f4:31:2c:21:d3:76:62:29:10:e3:c2:f7:
8c:59:87:d1:9c:18:74:a3:f7:93:61:67:5d:26:d9:
9f:f2:14:11:28:22:d6:4f:46:e6:61:54:a4:88:04:
21:23:5c:56:ac:76:1c:33:d1:db:b3:30:fe:ca:b8:
50:f2:58:a4:5e:dd:cc:c5:e3:8c:93:51:9e:c5:21:
f2:31:ef:cd:2e:d6:0b:3f:a5:5c:0d:92:84:3d:ac:
39:43:c0:b6:63:a1:04:60:81:a0:df:79:3b:02:ed:
2f:81:3c:32:38:6c:dd:5e:30:16:9d:e5:6a:f6:4a:
53:11:fa:16:19:26:10:88:27:79:12:d0:3a:ee:94:
63:a9:89:d1:f9:36:33:38:ef:35:e6:b8:e7:2a:40:
21:17:61:8c:a1:47:61:17:73:9a:54:de:86:16:25:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:63:00:1A:AA:18:51:94:D7:EE:9A:A8:D6:CD:4E:26:E4:56:7C:14
X509v3 Authority Key Identifier:
keyid:AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1f:b5:76:7a:0e:8c:b6:7f:83:ed:9c:66:c2:03:c4:19:73:
54:d4:de:98:d4:5b:3e:ca:9e:22:64:e2:0c:43:13:db:75:8e:
ed:26:4d:8f:76:33:70:8c:fc:75:20:37:dc:63:32:1d:ae:ea:
0f:59:f8:0c:b0:41:f0:3c:32:15:6b:e1:49:38:98:fa:8f:4d:
3e:59:48:43:80:ef:87:c7:9e:53:85:d8:e7:3d:e5:76:18:a8:
ff:9e:2f:60:99:e1:3a:f5:a8:68:91:15:d9:20:fd:08:38:7e:
00:e2:39:08:40:78:12:70:b5:98:a1:02:b3:bc:65:32:16:47:
cb:e1:2f:55:8f:a2:40:6e:6a:00:73:f8:e6:47:68:3b:33:d5:
75:eb:65:d8:89:ca:a5:70:5c:7c:7d:7d:c3:e2:c5:64:c8:02:
17:5c:16:96:a2:b7:e2:7b:4b:e0:18:f7:ec:ef:0b:e1:d1:b3:
2b:25:5a:d1:42:8b:74:26:9f:ae:23:98:e2:53:cb:16:f1:1e:
4a:1e:ba:bf:84:00:b9:8c:49:8f:3a:76:9c:1a:2d:b4:e2:a7:
5c:1c:6a:03:e3:37:c7:1b:2f:cd:c5:32:8a:7a:4d:65:8e:45:
a7:05:a8:0b:de:2c:af:c5:cc:6e:f9:c2:cd:14:58:69:1e:fb:
42:77:4c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:33:06 2025 by rpki-client