Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft
File: McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft (raw, json)
Hash identifier: c3j7j8uoUd0DodQheV5Z8ATCxtp7hXGJbm2TR7n308I=
Subject key identifier: FB:4C:78:31:08:88:6F:B0:71:19:F5:4F:B3:E3:67:66:57:23:7C:DF
Authority key identifier: 31:C3:56:81:0D:45:AD:F5:2C:F1:9F:B0:B0:D2:0F:7F:34:68:A0:E9
Certificate issuer: /CN=31c356810d45adf52cf19fb0b0d20f7f3468a0e9
Certificate serial: 019A70DC1BA13C30E150EC9F9BCC54C75921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McNWgQ1FrfUs8Z-wsNIPfzRooOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft
Manifest number: 013A
Signing time: Tue 11 Nov 2025 03:01:04 +0000
Manifest this update: Tue 11 Nov 2025 03:01:04 +0000
Manifest next update: Wed 12 Nov 2025 03:01:04 +0000
Files and hashes: 1: McNWgQ1FrfUs8Z-wsNIPfzRooOk.crl (hash: p/EgqxcsHdDFXt4XKAut9/3fiWI/XdBkk5Qdnk6HT30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/McNWgQ1FrfUs8Z-wsNIPfzRooOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:1b:a1:3c:30:e1:50:ec:9f:9b:cc:54:c7:59:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c356810d45adf52cf19fb0b0d20f7f3468a0e9
Validity
Not Before: Nov 11 03:01:04 2025 GMT
Not After : Nov 12 03:01:04 2025 GMT
Subject: CN=fb4c783108886fb07119f54fb3e3676657237cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:00:4d:b7:72:87:83:2f:e0:a6:51:5f:8c:
67:9f:f6:77:b5:30:d6:49:9d:24:b9:16:37:e9:86:
e5:74:ac:35:30:49:24:05:6c:52:db:51:63:63:1c:
1a:5b:03:f9:ce:2c:8a:6b:7f:49:c8:07:22:83:d8:
2b:1d:4f:12:c7:ff:4b:45:e9:09:92:e5:de:4c:6e:
0c:76:d7:60:30:98:94:e0:74:01:0c:48:da:6a:b5:
fc:d2:de:b9:97:cc:e5:84:2f:ef:4e:37:af:05:e8:
c6:95:e6:fc:a1:01:c0:d0:ed:01:80:c5:a5:89:54:
22:dc:bb:59:1b:cf:18:ea:52:ce:83:e5:12:2a:26:
7b:22:ed:48:20:42:51:dc:61:eb:cd:8f:1d:85:3f:
f9:16:ea:ed:3c:24:6e:f3:81:73:ad:70:30:77:e5:
87:4b:a3:ec:39:5f:8c:81:32:f8:1b:0f:f7:e9:1f:
1e:d5:66:89:c8:65:04:0e:a1:34:f6:23:ae:db:f5:
28:c8:12:cb:8a:bd:73:c4:3f:29:7f:29:ac:16:ac:
4e:ed:62:48:4b:b1:5a:6c:9a:09:2c:2e:68:6f:b6:
e0:35:29:66:75:d0:a5:ca:17:ea:bb:18:b1:d1:ff:
2d:2c:52:46:20:74:b6:33:a6:3d:b9:23:1e:c9:cd:
b1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4C:78:31:08:88:6F:B0:71:19:F5:4F:B3:E3:67:66:57:23:7C:DF
X509v3 Authority Key Identifier:
keyid:31:C3:56:81:0D:45:AD:F5:2C:F1:9F:B0:B0:D2:0F:7F:34:68:A0:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McNWgQ1FrfUs8Z-wsNIPfzRooOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:8c:b5:b9:d4:a9:c8:10:33:43:0c:92:a5:1b:2d:3c:05:4d:
58:2f:c0:f3:97:a9:a9:83:0c:26:1d:ff:c0:21:c8:0a:dc:cb:
61:51:6e:1e:80:26:22:f3:33:f3:5d:9a:32:a4:87:fd:bd:ba:
50:69:c8:5c:14:ef:44:85:6f:db:f5:ba:57:08:f4:51:67:aa:
6b:2c:a5:f0:bb:53:11:31:14:04:2c:d8:50:8e:50:2d:b1:2c:
3c:88:2d:e3:e8:16:57:7f:6b:92:8b:e4:c7:5c:70:77:fa:ad:
23:d8:25:e4:ba:7c:1f:2a:10:83:49:d9:40:c5:f0:2b:17:45:
bc:a9:3f:d5:d0:b5:af:7e:5b:5c:29:e0:8d:8b:04:96:9a:1b:
ff:13:98:bb:e7:9e:e9:48:e6:40:20:89:62:e8:f4:7d:16:12:
5b:d5:e0:93:3e:59:8d:d0:ce:af:dc:04:b2:05:2f:e9:bc:a3:
2a:84:31:a5:62:b6:a5:2d:c1:b6:28:15:b4:fb:36:c3:4f:a7:
23:85:93:c7:8a:20:f3:0a:de:b7:a0:bd:62:13:61:b6:c4:37:
17:04:88:f1:4a:64:4d:9d:7a:4f:5a:39:d1:3b:66:16:3e:ac:
ec:fc:ba:65:e4:2e:ff:05:85:7b:d5:7e:15:1b:b3:c9:5c:f1:
b1:c5:4c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:57 2025 by rpki-client