Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
File: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft (raw, json)
Hash identifier: U+wallWOhdSz2wJD0aGPdURde285j8uEZSHxbIp5bVs=
Subject key identifier: B1:02:11:0D:F2:2D:E7:67:15:0C:F6:C7:22:F1:7A:35:0E:13:9E:AB
Authority key identifier: DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B
Certificate issuer: /CN=de11cc6df13366fc595a6e72ed03c53800792b4b
Certificate serial: 019A722595112CD39BCCDE055D911DE18024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
Manifest number: 0E82
Signing time: Tue 11 Nov 2025 09:00:56 +0000
Manifest this update: Tue 11 Nov 2025 09:00:56 +0000
Manifest next update: Wed 12 Nov 2025 09:00:56 +0000
Files and hashes: 1: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl (hash: RKeoVyJyTzmbtQHMgVwfO3+O4XpnAn733x9YITDaN9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:95:11:2c:d3:9b:cc:de:05:5d:91:1d:e1:80:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de11cc6df13366fc595a6e72ed03c53800792b4b
Validity
Not Before: Nov 11 09:00:56 2025 GMT
Not After : Nov 12 09:00:56 2025 GMT
Subject: CN=b102110df22de767150cf6c722f17a350e139eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:1e:3f:25:bb:ec:7d:23:f7:a4:47:f6:e6:
e2:b7:84:61:77:ec:cb:bc:c3:cf:7b:72:09:88:44:
e7:6c:5e:06:e7:3d:5d:f0:4e:aa:f4:9a:9e:46:ef:
49:0c:72:de:c5:a9:84:c1:8a:1a:02:66:c5:01:b6:
e1:32:f5:67:f1:bf:9d:76:08:d9:53:65:a8:bf:77:
dd:3e:0b:81:1b:2a:24:96:d3:cc:28:51:d7:9d:f3:
1c:86:1f:4e:28:c7:35:e3:f6:97:72:25:21:e0:a6:
9c:3a:95:c8:8a:c6:9e:3a:25:2a:43:ec:95:91:19:
c1:67:a4:2e:b5:49:0f:e8:13:a0:fa:fc:e0:ce:2f:
63:14:e0:d9:2c:bb:92:a6:f4:a0:ad:5b:d0:7a:19:
fb:2e:71:e2:a1:b7:91:36:7a:f5:9a:15:a3:9a:bb:
69:00:c2:b9:23:cd:ee:37:4a:56:c5:59:0d:e3:3a:
06:7a:35:db:36:a0:5e:f8:64:be:9a:fc:0a:8a:a7:
04:f5:45:90:95:fa:70:06:d7:3d:c9:1b:5a:44:c7:
c1:d2:86:16:f6:8c:ab:c6:ea:34:df:ae:4e:75:b4:
50:cb:c4:21:0f:fc:4d:44:8c:4a:59:bd:a8:f8:81:
64:aa:27:f6:d5:24:a1:f0:6f:0e:06:a9:4e:91:8e:
29:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:02:11:0D:F2:2D:E7:67:15:0C:F6:C7:22:F1:7A:35:0E:13:9E:AB
X509v3 Authority Key Identifier:
keyid:DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ae:bf:40:30:0a:03:82:b8:2d:e8:37:c9:69:69:95:83:cb:
ea:82:d1:c5:70:9c:c1:8b:4c:22:d4:05:aa:f2:c3:43:dd:c0:
67:53:9e:39:82:d1:74:f9:e4:e5:87:b5:95:54:1f:67:52:69:
0b:52:bf:c8:da:af:d4:2c:31:f9:bb:e4:aa:1e:69:ce:ed:c3:
9d:8c:dc:f8:8d:1b:2d:79:e8:17:c3:50:99:18:fa:2a:4d:04:
3c:b7:48:b5:0f:25:0c:99:7b:bc:85:3c:03:af:d8:0d:22:db:
47:a3:f5:d6:ef:56:57:b6:7c:c6:d6:b0:e5:d6:10:f1:aa:6f:
ad:e4:8a:49:f2:e7:4b:19:f4:f5:26:c2:1e:22:e1:53:fb:9c:
9e:02:c3:80:cb:c1:58:c6:f3:bb:37:bd:4b:de:61:47:13:72:
e5:5c:60:3e:c2:17:31:90:20:1a:d0:13:20:9b:d5:8f:dc:35:
26:69:c1:a8:e6:67:90:5a:b5:7c:47:45:3b:b4:ae:38:9e:7b:
5f:ac:80:ba:1c:13:7a:76:52:f2:08:93:c3:5a:9e:23:2b:57:
f7:9f:0f:58:ce:93:35:b1:a8:99:95:13:5e:13:dd:b6:ac:a0:
5f:3f:1e:02:b3:ff:6d:71:9c:8a:b4:c9:96:5c:d3:ee:04:af:
18:4b:00:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:46 2025 by rpki-client