Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
File: 3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft (raw, json)
Hash identifier: Jhc5qCbJpR2EcaBBela6WcqFi5LfQyLgAtQMj/fvw0A=
Subject key identifier: 33:98:56:38:20:F7:22:4C:97:05:F6:D6:E7:93:14:86:86:9A:4D:65
Authority key identifier: DD:70:C5:F0:9B:62:68:32:92:FD:91:09:E6:94:71:35:90:28:1F:8D
Certificate issuer: /CN=dd70c5f09b62683292fd9109e694713590281f8d
Certificate serial: 0199225514BB1596EACDF0F063BB8CE9B8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 04:00:25 +0000
Manifest this update: Sun 07 Sep 2025 04:00:25 +0000
Manifest next update: Mon 08 Sep 2025 04:00:25 +0000
Files and hashes: 1: 3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl (hash: hvfmIVaeJsFcVDDNQQHGG01RcnbisFb0qZ2NW2I1Zg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:14:bb:15:96:ea:cd:f0:f0:63:bb:8c:e9:b8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd70c5f09b62683292fd9109e694713590281f8d
Validity
Not Before: Sep 7 04:00:25 2025 GMT
Not After : Sep 8 04:00:25 2025 GMT
Subject: CN=3398563820f7224c9705f6d6e7931486869a4d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:11:1e:4b:63:9b:c9:55:26:24:c6:ef:ef:
62:f6:be:d2:26:5f:ea:2f:85:cf:e1:73:d4:80:aa:
00:5d:99:f3:a3:45:9e:b4:61:25:a8:23:50:f9:f5:
4a:cb:93:fe:b3:a7:a2:e1:ce:bc:85:35:f5:ad:fa:
b8:4a:60:bd:b3:54:e8:e7:04:07:1e:62:38:67:9a:
fa:c4:50:a1:2f:32:3d:be:5e:81:72:00:b5:62:81:
be:7e:f2:cc:4a:2c:d2:38:48:5a:b4:d3:75:bc:f5:
28:2e:3f:58:12:d6:f9:61:6f:22:ab:44:f9:62:63:
06:7e:be:b0:0a:77:5f:1a:c4:98:5f:24:ea:f8:1e:
c6:3d:ce:3b:df:aa:75:43:61:aa:97:19:b0:ae:ac:
ee:2d:ae:94:6e:cf:e4:51:e7:cc:00:ca:3b:9e:9c:
14:83:db:48:69:ac:b0:96:d1:23:ba:ac:a0:6b:11:
e4:d6:fb:4b:91:cf:b4:26:c4:fc:ae:a1:9a:2d:94:
fd:96:d0:9f:68:57:90:08:70:ea:62:c4:82:d0:9a:
f3:b0:f8:cb:f8:b8:1e:14:66:a9:6f:59:ef:4d:22:
a5:e0:43:ba:7a:02:db:39:65:42:c9:b1:51:22:ef:
56:8a:9f:44:7a:84:9c:45:72:70:2d:cf:84:4d:2c:
17:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:98:56:38:20:F7:22:4C:97:05:F6:D6:E7:93:14:86:86:9A:4D:65
X509v3 Authority Key Identifier:
keyid:DD:70:C5:F0:9B:62:68:32:92:FD:91:09:E6:94:71:35:90:28:1F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:44:3a:04:09:64:78:52:b7:7d:dc:1b:13:91:f4:9c:a3:e0:
ba:60:00:46:3c:58:f5:4e:8c:bf:04:80:cf:65:46:54:a7:b3:
c4:dc:2b:4f:58:ff:f0:96:b9:1b:49:c9:e0:d2:30:7b:cf:00:
eb:19:52:45:a6:42:cb:6b:1d:b3:db:9c:8b:ec:57:b4:55:00:
f9:86:0f:40:ef:59:bc:8a:f7:3d:15:6b:29:82:20:e3:cd:6d:
37:e6:0f:f7:2e:c5:0e:34:25:71:a0:f9:83:db:3e:20:b1:00:
80:8e:90:11:3e:5a:c4:ab:39:07:37:78:3a:ae:ee:77:ea:81:
16:25:b0:7d:ff:5e:d0:1b:ec:cd:ef:94:98:a3:c8:a0:f7:42:
80:76:e1:1a:e4:4d:38:0a:2e:15:b1:ec:ab:75:03:de:45:5e:
dc:da:7a:da:78:af:79:9d:43:7f:de:96:da:2e:64:c2:95:3f:
6d:c9:8f:f1:3c:fb:45:5d:4a:3c:c7:a3:68:d6:25:16:dd:21:
40:70:cd:df:d6:00:91:18:ac:30:40:25:8c:23:98:ea:65:b6:
8d:67:c0:12:21:48:23:da:e3:0a:43:55:09:36:7a:7f:f0:9b:
ae:f3:69:55:f5:57:d1:4d:98:06:35:11:97:2d:56:c6:ac:1d:
bd:87:5e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:59 2025 by rpki-client