Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier: Ph9vH/VUOVRtCQkrzTdKe3tAEVLHVX2oNQA3h4QGTlA=
Subject key identifier: DE:9B:3C:90:5A:33:73:61:3B:4E:2B:F9:F7:BF:E3:E4:2B:F8:16:AE
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer: /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial: 019A71B8A10A5B13002478D546B274367B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number: 0E04
Signing time: Tue 11 Nov 2025 07:01:56 +0000
Manifest this update: Tue 11 Nov 2025 07:01:56 +0000
Manifest next update: Wed 12 Nov 2025 07:01:56 +0000
Files and hashes: 1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: bsh1GRTcvVWtDPCegHBwqkiIitYryunQecuzJiCtxM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a1:0a:5b:13:00:24:78:d5:46:b2:74:36:7b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Validity
Not Before: Nov 11 07:01:56 2025 GMT
Not After : Nov 12 07:01:56 2025 GMT
Subject: CN=de9b3c905a3373613b4e2bf9f7bfe3e42bf816ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:2d:d4:8a:fb:56:f9:eb:f8:74:f9:72:ba:
2e:a3:d7:fe:65:e1:e7:75:61:dd:c9:b3:86:c4:1c:
56:ec:eb:a7:43:75:27:52:fb:0b:66:91:0d:7d:c5:
94:f2:e4:c1:a5:d4:85:5c:b5:3d:3c:e0:89:68:84:
22:b1:7a:4e:d5:2c:25:1b:16:0b:20:22:eb:be:09:
65:62:0f:ad:72:98:fd:d5:85:c0:e3:5d:c9:b3:d0:
2a:1b:27:72:e6:6f:35:6c:2f:82:8b:a9:fe:d9:14:
7b:36:25:fc:88:be:b5:46:1f:55:cc:a3:5b:bc:a4:
7f:2e:7c:c6:f7:aa:b4:bb:41:5d:0f:ad:cf:80:2e:
74:92:de:4b:24:7b:87:c6:a7:24:ac:2a:34:e7:56:
44:72:52:ea:27:fd:4b:5f:ce:80:5c:d5:7d:5b:30:
84:15:58:6e:d8:95:ff:1e:a7:8b:a7:ba:8e:1b:ab:
7d:36:db:d2:32:80:28:8e:cd:04:d2:7b:d4:de:d1:
ff:0c:52:fc:fa:5b:52:14:b1:44:e8:aa:e9:40:30:
c8:85:1b:22:93:08:3d:87:13:3b:12:b8:b4:bc:0e:
3a:06:d3:50:ee:cc:c9:de:d3:eb:4d:d5:d4:24:8f:
eb:2b:f8:85:71:95:6a:55:32:d3:0e:6a:b2:0e:46:
f4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9B:3C:90:5A:33:73:61:3B:4E:2B:F9:F7:BF:E3:E4:2B:F8:16:AE
X509v3 Authority Key Identifier:
keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bd:43:bf:3d:aa:03:0b:e5:22:b0:6c:d7:32:e0:b4:a1:cd:
d0:35:1f:20:5e:13:78:c8:c6:ed:b4:fb:9d:87:84:1e:6f:85:
19:4c:a9:3c:bd:95:b9:d4:87:12:34:6c:e0:32:22:a1:30:ef:
55:59:3c:4e:93:25:d0:ad:f8:d0:74:44:64:0c:5c:6e:84:07:
86:f8:29:b3:22:b6:19:d7:27:6d:5c:72:3d:8a:32:4e:f1:02:
05:d6:20:58:bd:70:19:b1:72:11:d9:2e:69:f1:ed:37:7c:1c:
08:4d:ab:8c:c6:31:d7:81:49:6e:36:5c:9d:2c:15:68:8a:73:
ca:31:1a:5f:58:03:4f:7d:d9:90:60:3a:f8:81:83:45:29:4e:
83:f7:db:5d:97:b0:4f:67:7e:3c:be:75:b4:fd:42:a7:4e:74:
48:24:23:2e:50:c1:83:ba:2d:ee:94:1d:9e:06:26:81:8f:31:
d8:96:32:97:19:a7:4b:08:5b:43:23:9e:15:02:d6:33:af:c5:
31:74:53:47:4e:15:b3:3e:98:f1:9e:ab:56:54:c7:70:fa:fa:
e9:63:1c:94:15:95:90:1a:4c:11:99:ea:d1:45:d4:30:35:f8:
ae:7d:78:af:b3:15:46:44:98:54:b1:41:8d:b7:3c:76:05:68:
de:2d:69:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:08 2025 by rpki-client