Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
File: t3CHf-B99JohaBSt5wHQh7EWk7Q.mft (raw, json)
Hash identifier: ZR1htHpD05g4znCt/OAB9UmY6lhQJY1mLrVu3V4raK8=
Subject key identifier: 8D:67:07:21:A1:75:9D:24:7A:5D:D8:36:48:3D:0B:08:6E:1E:E3:6F
Authority key identifier: B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
Certificate issuer: /CN=b770877fe07df49a216814ade701d087b11693b4
Certificate serial: 019A725CB18D59C99974C9630DBFEDFA50D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
Manifest number: 0564
Signing time: Tue 11 Nov 2025 10:01:08 +0000
Manifest this update: Tue 11 Nov 2025 10:01:08 +0000
Manifest next update: Wed 12 Nov 2025 10:01:08 +0000
Files and hashes: 1: t3CHf-B99JohaBSt5wHQh7EWk7Q.crl (hash: cBJYqr3b5VwwVXdzkY0I3zP8m2aLj7EYwA84ktXERPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b1:8d:59:c9:99:74:c9:63:0d:bf:ed:fa:50:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b770877fe07df49a216814ade701d087b11693b4
Validity
Not Before: Nov 11 10:01:08 2025 GMT
Not After : Nov 12 10:01:08 2025 GMT
Subject: CN=8d670721a1759d247a5dd836483d0b086e1ee36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ad:a5:1e:65:d6:b7:5a:03:82:fa:8d:79:13:
cd:3e:b2:87:3b:54:8d:ce:d2:56:63:56:df:55:0c:
f2:01:6f:a9:de:12:ce:51:e1:38:b5:6b:f3:f2:7a:
13:70:61:27:19:97:dc:d8:8d:f4:10:ae:1a:6c:6e:
13:8f:d4:2d:49:b5:0a:40:15:36:83:4c:64:f5:2d:
99:1f:47:fc:b9:c3:72:ba:c4:4e:e6:b4:c3:1b:53:
6e:f4:21:f5:e3:59:90:81:ef:6b:6f:16:68:76:8c:
ed:d2:5c:96:ed:5f:cc:11:10:b4:23:25:45:b4:dc:
b6:e7:ec:c8:fb:55:ff:06:11:20:92:5d:e6:dc:00:
92:e9:6d:df:aa:ee:f1:f2:f8:2e:8f:20:f7:b4:8c:
2b:8a:3f:83:63:b2:c6:32:74:b7:37:b4:67:c7:d8:
6a:5e:07:39:58:11:aa:72:65:e6:d8:6d:21:3b:bf:
50:9d:78:aa:a0:a5:d8:ca:06:81:13:03:d7:22:0a:
a5:53:25:b6:a9:52:d8:a5:20:83:c5:4d:a0:63:49:
42:cf:46:04:95:31:fc:3e:1f:4f:c2:cf:d7:fc:56:
30:93:48:c7:27:75:35:0b:37:75:b9:21:82:0c:10:
dc:e8:a9:e7:b0:8a:d8:92:bb:f7:de:a5:62:69:65:
21:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:67:07:21:A1:75:9D:24:7A:5D:D8:36:48:3D:0B:08:6E:1E:E3:6F
X509v3 Authority Key Identifier:
keyid:B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2f:81:7b:24:33:66:6c:4d:f3:7c:7b:83:60:d7:aa:5d:13:
6d:05:0d:c8:c6:4f:b7:37:07:b4:13:bd:53:f7:85:43:06:e5:
09:25:94:58:6a:d0:5f:b7:a0:35:32:2e:b6:e1:3b:c6:32:5a:
22:fe:35:ee:29:e9:df:91:93:2a:e3:ca:8b:cf:47:fa:06:3a:
11:25:1b:c5:7f:db:9c:81:51:d0:9e:2b:2a:3d:87:93:fc:b2:
0d:07:44:81:93:af:47:64:10:2b:f0:80:f5:a1:3b:97:f8:e1:
fc:86:9e:83:7f:03:c2:df:aa:d7:99:69:82:85:13:ef:27:a7:
d1:9a:ef:67:67:68:21:28:2e:47:bb:7e:6e:09:21:f4:6e:0e:
be:4c:1a:9d:38:48:cc:1a:4c:9c:af:06:e7:ef:08:3e:0b:e4:
9d:b1:00:b8:77:b9:4e:66:fb:01:20:ba:45:5c:b6:b3:3f:c1:
52:a9:c7:14:9b:ab:00:a4:3f:fd:b5:ca:14:07:88:78:d0:96:
e3:05:1c:b5:03:13:1f:d1:1b:d4:01:41:d8:99:c8:21:6f:3c:
2a:44:9a:77:c8:72:e5:db:66:02:b9:5b:46:8c:cd:60:01:4c:
09:19:42:d1:6d:d6:fe:63:dc:3d:ac:21:7f:53:8b:84:5b:01:
00:87:9b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:36 2025 by rpki-client