Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
File: 36vRQuiUFoiDzkUicxf5-lAiGU8.mft (raw, json)
Hash identifier: P9CKnyU4BdZvo6HRXwP16bbAiJX2adGq+/cv4PwZJEM=
Subject key identifier: 3B:50:09:78:7F:76:56:B2:9C:3D:90:A4:20:49:A5:DE:84:B5:E0:E7
Authority key identifier: DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
Certificate issuer: /CN=dfabd142e894168883ce45227317f9fa5022194f
Certificate serial: 019A72CA4BDE9BE91BC339BE0B73B20DF051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
Manifest number: 0D1B
Signing time: Tue 11 Nov 2025 12:00:51 +0000
Manifest this update: Tue 11 Nov 2025 12:00:51 +0000
Manifest next update: Wed 12 Nov 2025 12:00:51 +0000
Files and hashes: 1: 36vRQuiUFoiDzkUicxf5-lAiGU8.crl (hash: yBIdTE4oskU769PL4sk5rGQxRtKUVh9PBQfqoGA0wzA=)
2: q9fcvPSCGF87XIMkqAi6UV4OZNg.roa (hash: tkmW6OPW8Rw8o76e0nZ8YOnHGwglb96QyBZechqQT9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:4b:de:9b:e9:1b:c3:39:be:0b:73:b2:0d:f0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfabd142e894168883ce45227317f9fa5022194f
Validity
Not Before: Nov 11 12:00:51 2025 GMT
Not After : Nov 12 12:00:51 2025 GMT
Subject: CN=3b5009787f7656b29c3d90a42049a5de84b5e0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:a9:ac:08:2a:65:5d:ee:3e:6f:a7:d5:8c:
4d:07:fc:2f:16:7c:f5:d5:50:12:e8:12:e7:4c:24:
60:95:70:14:d6:27:8b:16:cb:6d:bf:5c:25:be:96:
b4:9c:b1:0c:dc:a3:4c:e3:e7:74:4d:69:b4:7b:44:
01:ce:66:cf:cd:19:af:77:9c:e2:2b:0f:de:79:28:
2a:56:8f:ce:91:6a:58:54:6f:d0:56:57:0f:eb:9d:
d8:47:41:eb:bb:b5:e2:c8:7c:c4:20:97:95:68:7b:
5f:2a:02:d2:20:51:bb:b3:ce:25:6c:e4:d4:2d:b0:
39:9e:bc:64:61:e6:07:94:e6:5c:a1:29:6c:32:4f:
8f:e0:5f:f0:f3:43:7a:eb:8f:b6:6a:07:62:4f:d3:
34:c0:cd:ff:77:57:fd:c1:23:5f:02:cf:c3:0c:ad:
c9:83:a1:ba:ca:8d:8e:9f:5f:a6:36:04:b6:3c:d0:
24:02:98:e5:8c:bd:64:87:2d:75:8a:4e:bc:d3:52:
19:7d:30:d4:1f:ec:fb:6a:33:09:fd:29:7c:b5:30:
8f:57:31:2f:6f:cd:6f:4d:ac:9d:95:ab:22:9b:31:
89:c7:c0:f4:e0:62:bf:63:f2:79:01:c5:ac:9f:32:
62:7f:7b:ee:4f:5b:34:dd:d9:5e:3a:54:6d:05:68:
46:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:50:09:78:7F:76:56:B2:9C:3D:90:A4:20:49:A5:DE:84:B5:E0:E7
X509v3 Authority Key Identifier:
keyid:DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:14:00:4d:fb:97:d9:c5:a2:09:0b:83:5b:f1:ca:72:d9:28:
2e:53:62:8f:32:e0:a2:54:81:ad:41:d0:eb:ad:04:4f:d2:80:
5f:9f:08:a2:e4:68:53:d1:51:98:ca:a5:5d:da:27:df:58:78:
e8:a7:1a:f1:7d:76:3e:e9:88:cb:9b:4e:36:26:1e:ce:a3:ff:
3b:a6:56:c0:de:ad:1f:6f:b1:06:18:52:d3:a0:ea:bc:90:ee:
25:7d:33:2b:e1:f5:3d:51:fc:7a:04:8f:c6:fe:de:a9:6d:4b:
8b:96:89:ee:e2:15:f4:38:8e:56:6d:34:e3:8e:f2:a3:5a:fc:
e2:40:a2:11:0f:97:5e:72:9e:51:2e:37:d1:06:f9:9f:78:c6:
ea:5c:f8:2f:3c:c7:4e:d8:01:00:bf:d8:fe:42:00:e6:a8:ab:
d9:90:73:09:1f:91:cb:73:ad:26:9f:92:6b:7e:22:23:3b:77:
bd:20:e6:89:66:b3:78:e9:0b:ee:69:bd:80:4f:7c:5f:9d:d9:
76:4a:db:07:27:25:da:f7:ce:e0:27:ce:12:e7:16:d8:01:36:
cb:41:37:e4:a0:06:64:fd:45:15:ac:bf:36:e3:de:42:39:cd:
83:61:36:27:69:32:a7:8f:45:4f:db:dc:2e:87:76:ef:29:94:
a5:8b:c9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:33 2025 by rpki-client