Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: 6lZH+09IXPtIUrLZTa6lk4YTH7BDkvICUfNncTRLlvI=
Subject key identifier: A6:84:F3:90:AE:93:5B:37:D8:89:86:FC:21:BD:68:79:4D:CF:03:CD
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 019A706DDD126086D11A73B6D793A5AA008A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 0605
Signing time: Tue 11 Nov 2025 01:00:39 +0000
Manifest this update: Tue 11 Nov 2025 01:00:39 +0000
Manifest next update: Wed 12 Nov 2025 01:00:39 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: vannh98qFGHg9MWQMH/l5grwZZqlf6Bxd3ajzTR06oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:dd:12:60:86:d1:1a:73:b6:d7:93:a5:aa:00:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Nov 11 01:00:39 2025 GMT
Not After : Nov 12 01:00:39 2025 GMT
Subject: CN=a684f390ae935b37d88986fc21bd68794dcf03cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:3b:f5:4f:39:b5:b2:f7:44:b9:4b:a3:c8:
b1:3e:a6:4a:bf:11:90:24:73:f2:88:ad:1c:46:98:
0e:3d:e5:68:f4:e1:7d:e2:c7:5a:8c:1d:cf:3b:2a:
57:3a:8a:3a:9f:49:91:dc:30:45:37:4a:fb:2f:4f:
3d:d1:12:14:11:31:ac:2f:fc:6a:90:c5:53:43:f4:
76:02:e2:5d:98:1d:1c:e9:fd:78:14:0c:ac:1e:7c:
85:d5:99:2a:bc:f0:3c:29:d3:13:26:67:3f:d5:ab:
78:f0:e7:af:8c:26:70:9f:69:48:8c:92:b6:ca:5f:
90:5e:e0:c8:19:62:d9:d7:65:78:12:18:9a:a7:e3:
7d:cb:80:79:74:84:67:38:71:a3:0b:87:cf:3e:7a:
88:41:f1:f3:84:98:82:37:23:80:91:9d:de:ba:f1:
1e:98:e8:0f:69:0b:32:a2:ed:b8:5e:06:5f:60:2c:
e7:b3:0d:96:66:d8:81:72:28:8a:b9:42:f0:3a:e2:
76:94:03:ec:2c:69:e2:f3:e3:da:13:a0:51:38:2a:
d6:1f:c1:a9:e6:33:8d:bb:39:cc:5e:3f:1b:b6:99:
2d:bc:a1:db:72:ee:57:6d:88:63:5e:0d:c5:fa:6b:
e8:d3:70:2f:64:f8:25:82:32:5f:10:37:68:45:e2:
28:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:84:F3:90:AE:93:5B:37:D8:89:86:FC:21:BD:68:79:4D:CF:03:CD
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e1:93:a3:f8:06:3c:64:f1:db:9f:ea:10:5c:d8:81:9d:68:
ad:00:e4:11:11:f0:b7:14:7c:31:a1:e5:7a:62:97:08:5d:c7:
f6:30:02:37:6a:69:ba:1e:20:83:1f:f3:a5:a0:49:23:21:bd:
f9:73:3e:26:3a:17:81:d6:0d:c5:bc:2a:bb:9c:98:64:4c:6f:
09:d0:47:9a:8c:41:8c:4b:b5:bc:a7:3f:03:f3:68:dc:ac:83:
34:49:a1:3d:4b:19:21:52:03:9c:74:03:49:3d:c3:c8:5b:8a:
a0:85:9c:b9:70:ae:02:e3:fd:e6:1e:c9:52:bb:ed:b1:ee:b0:
48:25:39:b3:71:d0:dc:48:b2:00:11:0f:54:0e:8d:35:bd:20:
16:57:91:91:6e:47:ca:57:24:6a:ed:e4:a1:e8:26:61:a4:da:
e4:10:e2:de:3f:5d:c8:e4:5b:e5:0a:24:71:3e:3e:3d:aa:be:
e2:a7:85:43:95:7b:57:a0:0e:04:2a:9f:91:30:15:36:a1:2d:
3e:e0:a2:cd:13:39:9d:dd:1b:37:77:00:1a:b0:fa:a9:2d:6e:
28:74:f0:53:e2:89:23:6f:46:31:da:85:d1:6b:30:be:54:e1:
cf:b0:67:ab:7b:00:a4:f4:c3:00:e5:ac:cb:62:f0:9e:e3:82:
08:17:03:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:05 2025 by rpki-client