Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
File: x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json)
Hash identifier: ymTUu1/gEVs6dhy1xJDdwb1SAE+AJUMPlbj/MFk+4SU=
Subject key identifier: 24:49:1B:A2:47:AF:3E:F9:73:8A:C9:CB:E8:58:A5:8C:91:BB:B7:FF
Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
Certificate issuer: /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Certificate serial: 019A7225E77A689E37FA942F2E6636ED0E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
Manifest number: 0757
Signing time: Tue 11 Nov 2025 09:01:17 +0000
Manifest this update: Tue 11 Nov 2025 09:01:17 +0000
Manifest next update: Wed 12 Nov 2025 09:01:17 +0000
Files and hashes: 1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: I42VKYjcdwdE7u9eFU7TGlqkN8O7A1fdxDettBb77H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e7:7a:68:9e:37:fa:94:2f:2e:66:36:ed:0e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Validity
Not Before: Nov 11 09:01:17 2025 GMT
Not After : Nov 12 09:01:17 2025 GMT
Subject: CN=24491ba247af3ef9738ac9cbe858a58c91bbb7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:28:28:37:c0:82:49:7a:d5:ff:32:27:36:12:
d5:15:b8:ae:2d:52:b2:51:fe:03:9c:1f:76:27:bf:
fc:8b:ca:af:2c:d0:c1:00:3a:5a:41:c5:18:70:77:
46:ac:c4:8e:7c:8a:ba:16:ef:8c:09:f0:29:53:30:
dc:c7:84:2c:2d:39:39:77:23:a5:6b:92:6e:8a:21:
39:75:ac:68:b4:f6:df:4d:17:9e:82:3d:76:ed:15:
da:e7:ef:20:93:d3:60:1e:c8:7c:4c:73:41:3b:a8:
a3:3d:4c:12:de:44:2f:d5:42:0d:62:64:d1:ee:39:
40:2f:2a:69:cf:28:b2:52:c0:0f:1b:8f:ac:a2:fb:
a9:0f:8a:1a:e2:5f:e0:74:64:cc:5e:11:48:35:1b:
3d:29:6d:64:4a:ea:54:67:b7:3f:cd:42:d4:70:49:
fa:c7:a9:aa:74:ac:40:01:e3:eb:2b:83:8b:02:a5:
04:6a:cd:08:61:0b:5b:6a:88:81:8f:f5:f5:2c:33:
ea:bf:0f:52:bb:dd:ca:d0:b9:e6:c9:7b:71:f9:a3:
a2:7c:c1:00:46:02:f8:c6:b2:ba:12:b5:8b:4e:6d:
15:65:65:7e:3d:87:b3:fc:f0:bf:3f:ad:56:00:4a:
f7:eb:71:b9:eb:93:b1:7d:ba:b1:1e:cb:09:91:63:
03:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:49:1B:A2:47:AF:3E:F9:73:8A:C9:CB:E8:58:A5:8C:91:BB:B7:FF
X509v3 Authority Key Identifier:
keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:18:9c:62:3c:20:75:00:a3:c9:ba:6a:b8:1f:50:cc:45:47:
f3:40:25:77:8c:aa:84:05:50:0d:56:e7:2f:89:6f:f9:09:b2:
4e:8e:d1:a1:81:60:1c:8b:d3:50:30:61:be:a7:db:71:9b:ee:
cd:26:17:83:3e:e4:38:a4:0c:47:39:f8:f8:1b:0a:b2:bd:c9:
76:f1:ae:af:3a:c9:71:cd:18:78:9d:bc:d2:ea:e7:c0:4d:d0:
22:77:2d:d3:8a:24:c9:fb:30:94:f0:f6:58:ca:11:f6:b0:ef:
2c:4c:d6:17:74:30:b5:9d:b9:ff:22:3c:63:2f:ff:6a:a4:2a:
28:bf:3e:dd:05:5c:73:51:84:a7:ad:2c:cf:4c:02:cb:2d:ed:
6c:94:10:e5:f6:3e:9c:39:fa:f9:95:78:55:0b:51:04:f4:68:
c4:4c:89:17:c2:59:35:7e:8c:13:a7:63:e4:19:ff:96:ac:4f:
52:fd:e8:ee:84:b8:1d:30:e8:0c:d1:48:ed:a3:90:e3:d9:73:
64:cd:24:b5:b6:19:35:6f:b5:28:25:d7:fe:25:7f:e2:86:5c:
cf:70:29:3f:77:e7:3a:58:ec:5d:b6:b9:8d:bb:fb:41:34:f7:
d5:28:59:20:0a:d1:08:ba:75:d1:93:6f:60:36:36:cf:98:5b:
76:b7:09:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:19 2025 by rpki-client