Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
File: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft (raw, json)
Hash identifier: 2niWcofibETEsDkZK6SCUe+e10smljNjrRXBJgtnqp8=
Subject key identifier: 5B:81:5E:54:28:29:2A:1C:1C:21:AA:86:6E:A0:2E:C1:6D:01:A9:80
Authority key identifier: DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
Certificate issuer: /CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Certificate serial: 019A71B8BDD634DBC7A22C7513ED80BE06DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
Manifest number: 1696
Signing time: Tue 11 Nov 2025 07:02:03 +0000
Manifest this update: Tue 11 Nov 2025 07:02:03 +0000
Manifest next update: Wed 12 Nov 2025 07:02:03 +0000
Files and hashes: 1: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl (hash: WFzGg1UxHp8SF/7vd8rp9zLe4zaeYP4YlYunJLURZZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:bd:d6:34:db:c7:a2:2c:75:13:ed:80:be:06:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Validity
Not Before: Nov 11 07:02:03 2025 GMT
Not After : Nov 12 07:02:03 2025 GMT
Subject: CN=5b815e5428292a1c1c21aa866ea02ec16d01a980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8f:31:6b:d9:8f:55:84:2b:6a:d1:ba:4f:db:
ae:0c:d9:fd:0a:c1:76:10:5c:f5:5c:6f:5a:8d:ef:
e2:c8:78:c6:12:77:56:8c:b8:10:6e:31:06:22:e7:
fa:1b:bd:c5:cd:fa:1e:89:7b:cf:43:f3:da:ce:cb:
64:8f:bc:13:8e:0d:80:ab:15:22:cd:4a:ee:93:c9:
19:f8:18:70:37:98:07:b3:0e:52:99:b1:e9:7f:66:
e6:aa:ec:e9:0c:30:a4:ef:95:de:4a:10:21:26:42:
73:45:f1:23:8b:ce:f4:cf:c4:59:02:fc:b4:55:85:
ed:4a:8a:1c:36:9b:27:ab:85:4b:30:7d:8f:ad:7a:
ba:33:c7:ca:f7:9d:75:ba:76:95:f2:78:ca:de:1e:
33:b7:a9:da:14:d8:87:a4:b5:aa:20:c8:02:53:96:
8d:63:fe:e0:9b:2c:28:86:bc:ef:96:ad:58:9b:6d:
20:b8:cb:72:4d:0f:b4:5f:a7:1b:82:b3:fa:4d:14:
be:a4:40:a1:27:01:ab:80:55:c1:89:17:53:2d:ac:
76:4a:22:53:c9:1b:58:a6:f6:a4:b2:5a:f8:97:6f:
be:60:57:cd:b6:a1:b4:6f:57:f9:c3:67:a8:56:3a:
2a:cc:a0:5a:e5:eb:32:14:d5:02:16:83:31:59:7e:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:81:5E:54:28:29:2A:1C:1C:21:AA:86:6E:A0:2E:C1:6D:01:A9:80
X509v3 Authority Key Identifier:
keyid:DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:68:2b:69:9f:c8:9b:02:32:5c:b4:b6:7e:7d:df:be:a0:8e:
98:c3:b3:96:e7:13:a0:a2:03:b6:c7:a9:b6:49:88:a3:ae:9e:
ca:9a:ee:f9:71:dc:ac:04:de:f8:98:48:bd:e1:96:4e:31:16:
54:48:86:4b:a5:46:b4:22:e5:78:ab:8a:71:41:70:f2:d1:15:
7c:92:69:ac:94:8a:7c:b5:44:21:20:0d:d4:00:76:0b:a8:f8:
cc:4c:25:d5:37:f0:98:84:e7:8b:0e:ed:9f:5d:71:a6:12:78:
a6:fb:08:77:5c:0b:21:81:2e:e1:d7:08:7a:c9:bf:bd:84:87:
31:0f:81:69:52:5d:2d:39:c4:5a:ce:67:29:ec:bf:4c:81:d1:
f9:98:61:50:32:ff:fb:57:28:5a:e3:61:5e:fe:b0:dd:ed:2c:
ef:45:cf:02:c4:3c:b8:0e:6a:7f:ec:bf:84:00:0a:81:76:0d:
48:24:aa:7e:9f:ee:51:d7:06:3d:81:b6:80:e9:68:0f:8d:4a:
91:1a:38:d4:34:73:22:f0:fe:70:d4:c6:50:32:1b:f0:24:1b:
ae:c9:58:0d:c5:cf:3e:49:07:e4:b2:49:9f:9a:df:9d:ff:6e:
87:7b:cb:88:85:98:19:2d:14:d5:2e:d1:ab:ad:e1:87:d2:30:
bc:4e:11:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuL3WNNvHoix1E+2AvgbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZmIzZTk1Y2JiYTE5NDhiZDk4NmE5MmJlNmYwZjY0N2U2
ZGM2YzQwHhcNMjUxMTExMDcwMjAzWhcNMjUxMTEyMDcwMjAzWjAzMTEwLwYDVQQD
Eyg1YjgxNWU1NDI4MjkyYTFjMWMyMWFhODY2ZWEwMmVjMTZkMDFhOTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno8xa9mPVYQratG6T9uuDNn9CsF2
EFz1XG9aje/iyHjGEndWjLgQbjEGIuf6G73FzfoeiXvPQ/Pazstkj7wTjg2AqxUi
zUruk8kZ+BhwN5gHsw5SmbHpf2bmquzpDDCk75XeShAhJkJzRfEji870z8RZAvy0
VYXtSoocNpsnq4VLMH2PrXq6M8fK9511unaV8njK3h4zt6naFNiHpLWqIMgCU5aN
Y/7gmywohrzvlq1Ym20guMtyTQ+0X6cbgrP6TRS+pEChJwGrgFXBiRdTLax2SiJT
yRtYpvakslr4l2++YFfNtqG0b1f5w2eoVjoqzKBa5esyFNUCFoMxWX6a0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuBXlQoKSocHCGqhm6gLsFtAamAMB8GA1UdIwQY
MBaAFN77PpXLuhlIvZhqkr5vD2R+bcbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3ZzLWxjdTZHVWk5bUdxU3ZtOFBaSDV0eHNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lYmI4MzktNTJiYS00MzFiLTlkZWEt
ZjQ1OTQ2YWM1ZTgwLzEvM3ZzLWxjdTZHVWk5bUdxU3ZtOFBaSDV0eHNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9lYmI4MzktNTJiYS00MzFiLTlkZWEtZjQ1OTQ2YWM1ZTgw
LzEvM3ZzLWxjdTZHVWk5bUdxU3ZtOFBaSDV0eHNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGgraZ/I
mwIyXLS2fn3fvqCOmMOzlucToKIDtseptkmIo66eypru+XHcrATe+JhIveGWTjEW
VEiGS6VGtCLleKuKcUFw8tEVfJJprJSKfLVEISAN1AB2C6j4zEwl1TfwmITniw7t
n11xphJ4pvsId1wLIYEu4dcIesm/vYSHMQ+BaVJdLTnEWs5nKey/TIHR+ZhhUDL/
+1coWuNhXv6w3e0s70XPAsQ8uA5qf+y/hAAKgXYNSCSqfp/uUdcGPYG2gOloD41K
kRo41DRzIvD+cNTGUDIb8CQbrslYDcXPPkkH5LJJn5rfnf9uh3vLiIWYGS0U1S7R
q63hh9IwvE4RRQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:30 2025 by rpki-client