Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
File: g-3hynyzX11h-NWctQNumT6kO3A.mft (raw, json)
Hash identifier: gzFYqd5Ox3qwehnlNetx0HJ7aXapAyvR+hpuUxqQzI8=
Subject key identifier: 3F:AA:05:B2:C9:FF:1F:98:61:43:9F:C1:AF:07:85:5A:96:54:CD:A0
Authority key identifier: 83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70
Certificate issuer: /CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70
Certificate serial: 019A71B78081CD6A354FAC3BBB83BF3CF2BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
Manifest number: 0F46
Signing time: Tue 11 Nov 2025 07:00:42 +0000
Manifest this update: Tue 11 Nov 2025 07:00:42 +0000
Manifest next update: Wed 12 Nov 2025 07:00:42 +0000
Files and hashes: 1: g-3hynyzX11h-NWctQNumT6kO3A.crl (hash: QGUlrRuS4lpHvpLCxzgi55BZvwq5ZuZkk3aha5hR5J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:80:81:cd:6a:35:4f:ac:3b:bb:83:bf:3c:f2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70
Validity
Not Before: Nov 11 07:00:42 2025 GMT
Not After : Nov 12 07:00:42 2025 GMT
Subject: CN=3faa05b2c9ff1f9861439fc1af07855a9654cda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:46:40:b3:1d:6b:cd:6c:df:5a:8d:d6:18:
a6:51:38:7e:03:a9:3a:f3:1d:67:41:41:98:ef:a0:
ba:0f:f1:ac:c8:f3:78:e7:32:22:89:a4:8a:ce:16:
e5:ed:20:df:7b:77:d4:5d:75:94:0f:f5:77:6a:84:
88:86:45:43:a5:0b:3a:85:d9:d5:e4:77:4d:03:ef:
39:16:83:80:c1:82:72:30:e0:bf:9f:22:03:78:61:
1d:89:75:ae:9c:da:6c:01:6d:32:c1:53:03:4a:68:
fc:54:a0:a3:2f:f0:a5:a2:25:09:11:94:70:76:b6:
8e:62:30:eb:92:80:d1:76:10:d7:ba:fb:f9:51:fe:
fb:2a:d0:c6:60:40:72:fc:34:20:7a:b6:3b:e0:19:
02:f1:35:4e:e8:35:94:60:9d:a3:6d:97:dc:d6:c4:
9f:70:ad:86:84:fe:77:0d:db:31:0d:5d:87:5b:64:
2f:a7:42:28:7d:e0:2d:94:c7:c8:e0:dd:3a:b9:91:
c1:6f:dc:4e:27:f3:ef:e6:fc:44:cb:49:f3:31:1d:
a3:70:ee:4f:de:03:5c:96:7b:c7:2e:97:23:18:ac:
fc:67:22:00:ea:7f:3c:53:96:34:92:73:88:29:e4:
ee:f0:4c:94:5a:fd:9d:99:bc:50:fa:f5:af:9a:06:
03:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AA:05:B2:C9:FF:1F:98:61:43:9F:C1:AF:07:85:5A:96:54:CD:A0
X509v3 Authority Key Identifier:
keyid:83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:17:49:b4:d4:8a:68:c8:39:53:f0:36:ce:66:6b:58:15:53:
c5:8b:23:b7:72:82:c1:97:84:29:59:63:d1:bb:7e:60:5b:3c:
2f:9f:77:2f:e9:0d:c2:04:c0:b1:3c:aa:d1:25:e7:12:cf:27:
ac:13:85:b4:06:23:f2:fe:20:da:8e:f1:0a:5f:f3:06:f8:de:
35:f4:59:9e:7f:52:cf:f1:4c:0d:95:47:2f:6f:6e:47:ab:e5:
5d:17:14:4c:f7:98:82:1b:dd:32:90:5b:a3:67:7f:a2:73:c1:
07:47:dd:d6:24:a8:eb:e0:73:aa:ab:0c:b6:13:bc:d6:c9:7a:
4c:3b:83:09:a7:af:10:d7:f2:b3:c0:29:a3:96:94:e3:cd:ee:
40:f5:98:81:98:a3:54:74:df:86:62:3d:56:0e:7c:bc:31:11:
70:5d:46:70:50:c3:ea:85:9a:61:95:57:d3:2a:7e:b2:99:c6:
6c:c0:0c:96:dc:12:2c:b0:20:4f:7c:ed:cc:48:ed:b9:5e:ac:
b1:0a:a3:b4:e9:5a:12:19:1c:57:64:ad:24:c7:41:37:f2:be:
76:bb:b2:c2:68:ac:50:7c:3e:05:4c:4f:bb:65:df:f6:50:4d:
5b:6b:65:cc:24:14:96:ca:58:cc:f4:92:bc:4f:ed:49:0c:32:
4a:8b:77:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:14 2025 by rpki-client