Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
File: 3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft (raw, json)
Hash identifier: u9ADHx0i4eVGYLB/nS0Xoxgv/DUI2Hsj5T+5xNLlCgM=
Subject key identifier: BC:7B:02:A6:D0:29:F4:FE:1B:B6:8B:B7:D7:EB:4A:8C:53:FE:F1:DD
Authority key identifier: DE:EA:3E:1A:CA:6A:5C:9D:C3:F8:8C:38:27:6F:09:1E:BA:BC:E0:A4
Certificate issuer: /CN=deea3e1aca6a5c9dc3f88c38276f091ebabce0a4
Certificate serial: 019A71B8B4B447F23B06A6FC02B89F48DD5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: 3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl (hash: 9rFh2qvSN4CslsD48Ap29wiZ4jFWIWNVcnbEeUgGsYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b4:b4:47:f2:3b:06:a6:fc:02:b8:9f:48:dd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deea3e1aca6a5c9dc3f88c38276f091ebabce0a4
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=bc7b02a6d029f4fe1bb68bb7d7eb4a8c53fef1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:dd:2f:cd:39:6c:43:ae:71:96:2e:df:0a:
d6:3a:e1:d9:9b:f1:6b:b8:4c:d6:4a:38:52:29:7d:
1f:4b:1a:08:ce:aa:5b:fe:ef:e2:2b:ed:1e:cf:7c:
34:06:dc:67:cc:44:d3:ef:65:d8:12:bb:31:68:1a:
f8:97:ce:7b:1d:1a:bd:5f:31:a9:19:0b:ea:c5:55:
de:62:ec:45:46:ae:36:6e:24:b2:0e:1b:f6:b1:6f:
cd:37:d6:f5:45:07:78:6b:df:ba:05:66:12:60:1b:
11:1d:c6:5f:d0:fb:48:dc:6f:79:1f:ad:c3:8e:4d:
ef:f8:f7:51:3b:7e:48:a4:4d:af:cb:62:ec:b7:23:
e3:3a:2e:27:a7:f6:65:cd:10:7d:d1:32:ec:a8:3a:
ca:af:45:fd:68:1a:03:94:03:b5:34:97:f8:e9:48:
97:9c:d1:2a:fd:7e:ad:a1:0f:b5:0b:2b:10:b1:4c:
e4:38:0b:b2:02:f9:8b:89:83:ed:5a:d3:bc:48:a0:
e5:ce:b5:03:29:e3:ac:37:3c:2e:9d:0b:ca:9e:02:
22:24:8e:17:5d:99:f6:09:55:2e:52:07:0f:fc:a9:
c0:bf:5e:8c:a2:55:e9:e5:df:50:a4:b2:e4:a7:0b:
88:a8:61:98:9b:8a:87:95:7d:07:5c:1a:13:ae:74:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7B:02:A6:D0:29:F4:FE:1B:B6:8B:B7:D7:EB:4A:8C:53:FE:F1:DD
X509v3 Authority Key Identifier:
keyid:DE:EA:3E:1A:CA:6A:5C:9D:C3:F8:8C:38:27:6F:09:1E:BA:BC:E0:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:89:2d:7d:65:a6:da:e4:cf:8b:e7:83:c7:49:ee:60:5b:21:
44:5f:3a:11:20:bb:94:90:4b:41:e6:e3:2e:c3:20:dd:ba:10:
cf:5c:3e:36:93:59:71:8a:51:26:8b:42:6c:b2:a3:4b:0a:2f:
e2:94:ce:07:c2:41:4b:2c:53:73:c2:27:19:92:fd:77:6e:3e:
48:06:f3:c7:af:d0:e5:2e:cc:96:c5:40:04:4f:94:29:24:97:
fb:c5:25:d1:06:1c:cf:ed:3d:bd:d1:6f:20:f8:b1:3a:b4:f7:
f9:42:a3:e1:bf:fc:ca:7e:f1:66:aa:0b:2f:93:5c:26:a5:4c:
31:54:52:7b:37:b7:91:fa:47:f6:25:1f:3a:f7:1a:2a:4a:60:
0e:d0:52:4b:bf:7c:95:e4:fc:3c:ea:ac:4c:bb:3c:34:74:a6:
92:68:ec:56:b9:02:79:11:cf:f4:6e:be:62:f1:e4:f3:72:46:
df:99:27:f4:3b:58:0f:69:9f:12:b0:01:45:b1:3d:e3:c8:bf:
f2:94:bf:9c:7b:20:c4:4e:dc:9a:bb:0f:a6:0d:7c:f3:46:c4:
07:07:5b:96:91:dd:cc:81:f2:4a:ef:d3:22:81:50:fa:fe:42:
a9:35:bc:1a:d6:59:dd:e3:c5:70:53:95:be:be:a6:ea:0c:d8:
d6:0b:b2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:08 2025 by rpki-client