Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
File: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft (raw, json)
Hash identifier: VHhwsYkL/uP2Olmf6DLqnvG7VW0m9/aAbR1+Aun6oIc=
Subject key identifier: 0E:75:38:4B:20:93:E6:DA:D9:27:A0:A6:CA:66:FF:17:CE:FF:40:6A
Authority key identifier: DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
Certificate issuer: /CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Certificate serial: 019A71B8C2BF9D6815E589225493447FA6B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
Manifest number: 13DA
Signing time: Tue 11 Nov 2025 07:02:04 +0000
Manifest this update: Tue 11 Nov 2025 07:02:04 +0000
Manifest next update: Wed 12 Nov 2025 07:02:04 +0000
Files and hashes: 1: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl (hash: ZXYgszNN6DjQ0NbXEPAeV5mwhJgbRpc08uT11JDe6xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c2:bf:9d:68:15:e5:89:22:54:93:44:7f:a6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Validity
Not Before: Nov 11 07:02:04 2025 GMT
Not After : Nov 12 07:02:04 2025 GMT
Subject: CN=0e75384b2093e6dad927a0a6ca66ff17ceff406a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:d2:8b:05:4e:1c:69:4c:bd:81:37:bb:6a:
57:10:4f:29:f1:37:65:37:85:6e:f4:8e:d9:1b:71:
41:e4:a8:ad:89:50:8c:6a:5f:a0:26:4a:06:38:3d:
18:20:f6:aa:8c:25:1b:05:e0:3a:c4:f7:fb:f3:27:
75:cd:ef:db:82:cd:0e:41:5d:b5:03:46:d8:1c:e6:
0d:47:60:b5:d1:40:e8:ac:22:19:b7:2a:08:af:61:
76:d2:56:c3:5c:bc:88:02:10:d6:27:79:7a:9a:bd:
6a:4f:4f:03:fc:99:f3:41:66:18:0c:d3:19:87:a4:
10:2e:53:5f:7c:79:9e:b3:7c:42:e7:a9:dd:10:c0:
e4:3d:ca:44:e2:ab:b8:15:51:9c:42:9f:e5:22:6e:
c8:d9:1d:e4:8e:0e:33:a5:24:0c:ee:73:f5:95:c0:
5f:ea:a6:bc:b3:41:71:be:9c:a4:21:c6:dd:b5:5d:
0a:47:a8:6d:81:b7:ed:c6:19:e1:46:b5:ea:7c:20:
94:ef:5c:01:c9:a4:b5:31:f9:bc:28:1b:1d:80:86:
f0:34:89:13:e1:91:ec:f0:50:2f:82:41:17:3e:72:
3c:62:39:48:46:c3:41:98:48:f1:f7:be:b7:36:a5:
2d:be:7b:59:87:e4:36:0f:c7:ae:2a:0d:1e:34:44:
60:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:75:38:4B:20:93:E6:DA:D9:27:A0:A6:CA:66:FF:17:CE:FF:40:6A
X509v3 Authority Key Identifier:
keyid:DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9b:43:33:d1:71:95:1b:a1:84:18:43:72:b2:e3:d2:a6:ff:
e0:8b:f9:a5:1f:d1:92:82:a1:92:85:46:14:94:31:98:db:76:
c7:b9:86:0e:79:12:c8:3d:19:bb:d1:31:22:0c:63:e8:b6:59:
b3:1d:c6:37:10:e3:46:1b:bb:f2:bd:d0:11:31:e7:c3:84:26:
e1:37:ff:55:8a:84:d9:8a:bd:70:2e:50:ed:b4:c7:66:9b:83:
01:d1:ee:a7:d1:e3:a9:e9:73:4c:dc:58:ad:e1:e5:06:c3:51:
c3:73:e5:93:42:75:80:26:33:20:ec:39:bc:bb:46:5f:0b:8d:
fd:ab:51:87:54:f5:84:6c:36:ba:c6:8e:f5:33:da:54:40:71:
15:11:e3:3a:43:ad:f4:7a:cf:8c:16:5a:d2:3c:b1:c0:a5:26:
c8:bc:07:9e:de:00:0c:46:da:25:1e:c3:4e:21:14:fd:9a:3a:
5f:b1:29:f4:bd:61:f2:52:fc:8c:66:97:dd:0f:ec:69:0d:fc:
76:15:66:16:74:c0:2e:32:fc:1a:46:5b:78:1b:35:56:8a:9f:
7d:12:94:36:9f:1a:a4:b6:95:00:49:7e:87:81:58:39:88:32:
bb:ec:ed:3f:7f:7e:71:9e:45:83:5c:81:29:eb:93:98:8d:5e:
ee:83:7e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:12 2025 by rpki-client