Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier: Apei00FPcYecb9abvIhGYKCb9i26UJpONvWSBF2syl8=
Subject key identifier: AD:13:07:7A:F3:D9:59:90:62:01:44:D8:80:F9:A7:7A:8C:48:54:30
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer: /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial: 019A71B9080E3ECB0EF4F9B8D5A1684C9DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:02:22 +0000
Manifest this update: Tue 11 Nov 2025 07:02:22 +0000
Manifest next update: Wed 12 Nov 2025 07:02:22 +0000
Files and hashes: 1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: JrpAdKQRH5IOEd8A0bSbLP9hlj7SbML4PS7mwXJ++fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:08:0e:3e:cb:0e:f4:f9:b8:d5:a1:68:4c:9d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Validity
Not Before: Nov 11 07:02:22 2025 GMT
Not After : Nov 12 07:02:22 2025 GMT
Subject: CN=ad13077af3d95990620144d880f9a77a8c485430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:77:cd:56:ae:75:dc:bd:43:f2:63:d5:d0:
a4:e2:4d:12:10:2e:16:64:89:c4:df:5a:35:bf:4d:
7d:b0:5b:5d:27:a7:f6:5f:6e:4d:73:96:39:ad:0e:
a6:63:1b:6c:61:02:0b:86:a5:68:96:61:d3:fe:49:
c3:38:de:e0:a4:11:0b:b7:31:4b:d2:77:c6:93:d5:
f5:87:6b:6e:5e:90:ac:d4:dc:ed:c3:a6:d5:99:44:
61:7e:e3:43:9e:5e:32:0f:39:c4:2c:6b:23:91:0d:
e7:d3:ad:e6:7b:9b:55:46:9c:8a:ee:0c:f3:b5:64:
6c:f5:48:c4:8d:fc:98:05:eb:db:a9:33:ab:7d:8b:
53:cc:0f:a6:f5:bb:13:49:df:70:f7:bc:5d:58:55:
a5:a8:81:9b:e3:45:12:93:8b:ae:4e:09:3c:d6:83:
54:08:3c:c2:a1:13:60:fe:e9:1f:c2:fb:5b:63:26:
bc:10:dd:a8:53:76:01:1a:76:01:01:26:82:68:8d:
e5:7e:48:15:99:24:dc:07:0e:ab:d6:24:3c:2e:d3:
60:89:5f:bc:94:58:f0:21:de:7e:b6:03:ba:1e:00:
12:dd:66:81:1c:a1:42:83:4c:86:7b:1d:17:3b:0f:
76:ae:4e:cb:3f:36:9d:3a:87:63:b4:96:69:4c:f8:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:13:07:7A:F3:D9:59:90:62:01:44:D8:80:F9:A7:7A:8C:48:54:30
X509v3 Authority Key Identifier:
keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:18:1b:cd:ce:f7:57:37:ba:ef:fe:04:68:99:0c:25:02:f9:
31:7e:93:ea:af:2f:a4:7e:87:bc:04:d9:3e:16:04:e7:43:4f:
dc:41:6d:95:ec:ce:0a:0e:33:84:64:58:37:29:39:8f:fc:bf:
fc:78:4c:ed:4c:55:ac:fa:10:6b:9c:9d:4b:d5:46:e5:eb:dd:
18:24:fc:72:86:22:56:5c:e2:79:3a:ea:41:15:a6:45:51:11:
34:82:38:b1:19:76:a2:bc:47:e5:ee:04:29:07:f9:5c:74:e7:
d4:6b:ea:9c:da:0e:17:bf:b2:8e:01:d4:f8:e6:dc:7a:32:1f:
6f:0b:0b:77:d6:7e:64:78:c9:c5:86:86:9e:90:ba:fa:cc:89:
a9:a2:f8:7e:c2:97:c5:7b:59:b6:19:d8:77:d3:05:e3:b4:2c:
94:f7:26:99:8b:6e:28:d5:24:c1:e5:7f:6c:e9:d2:b5:72:9e:
cb:6f:59:c0:58:1b:1a:7f:b9:42:cb:fe:55:3a:e6:fe:9d:bd:
e3:4b:64:a0:55:20:8e:97:50:81:90:b1:55:ba:ca:1d:d0:a9:
a6:14:1f:dc:a9:53:fc:aa:8d:87:07:5c:50:94:76:af:70:03:
b0:44:a8:67:d7:a6:42:ff:38:f3:7b:fe:e2:ed:e7:1a:61:31:
ba:6c:7f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:15 2025 by rpki-client