Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
File: 3pj4NjKYKX-6uupodyArXEQOWpA.mft (raw, json)
Hash identifier: B1P5aX/AZy8OBs4k7VVewbG9HIgvQVzpx4l7NqX7j5Q=
Subject key identifier: A8:CA:3D:88:EC:32:39:E0:01:02:E6:B8:B3:4D:FC:F7:63:6F:0B:A8
Authority key identifier: DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
Certificate issuer: /CN=de98f8363298297fbabaea6877202b5c440e5a90
Certificate serial: 0199FBEA9451BF4FAA6A44B823FDBD1AC58A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
Manifest number: 0D71
Signing time: Sun 19 Oct 2025 10:01:18 +0000
Manifest this update: Sun 19 Oct 2025 10:01:18 +0000
Manifest next update: Mon 20 Oct 2025 10:01:18 +0000
Files and hashes: 1: 3pj4NjKYKX-6uupodyArXEQOWpA.crl (hash: Ix/w2c9Geq6EBVYL4lfYqCKKyNYBFEaBKfMCoQTFrio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:94:51:bf:4f:aa:6a:44:b8:23:fd:bd:1a:c5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de98f8363298297fbabaea6877202b5c440e5a90
Validity
Not Before: Oct 19 10:01:18 2025 GMT
Not After : Oct 20 10:01:18 2025 GMT
Subject: CN=a8ca3d88ec3239e00102e6b8b34dfcf7636f0ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:13:16:a1:61:8a:8b:73:c3:ab:4b:3a:0f:
e8:1b:a8:fa:39:7b:fd:48:7a:21:1a:38:fb:56:d4:
27:e4:60:41:7a:2c:a4:a7:c3:94:61:8f:2f:72:0f:
d6:4a:d7:98:2d:2e:e1:82:c5:b9:b3:2c:cf:42:00:
e5:65:45:f7:6f:88:21:43:99:74:5f:f7:d6:be:fa:
b6:9e:0e:70:8e:72:8b:cf:88:56:22:ec:6a:0c:f0:
0a:5f:d3:3e:ef:5f:33:a2:63:be:a9:35:3e:11:e3:
fe:de:f1:90:2e:32:f7:52:14:25:80:d1:23:dd:68:
f9:36:c6:60:16:d6:0d:06:00:30:8e:24:20:86:95:
56:c3:22:a1:7a:21:05:1b:f4:c6:72:57:ba:12:7a:
ea:cd:10:48:8b:01:44:08:0d:ed:9d:d6:ee:d2:d2:
6c:32:c3:a6:12:7f:26:0d:48:6d:80:be:ea:81:0f:
c0:9d:81:6e:07:72:c3:5f:ec:21:f4:12:09:a9:a4:
50:58:41:42:aa:77:98:46:c2:c2:d4:91:17:5d:88:
24:ea:b8:37:4e:ff:8d:aa:2b:9f:f4:ec:5e:ad:e2:
64:f5:b1:59:14:ca:57:a8:73:5b:cc:48:93:ea:5b:
7b:07:88:16:04:3b:ba:7e:63:39:e7:79:73:4c:fb:
b3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CA:3D:88:EC:32:39:E0:01:02:E6:B8:B3:4D:FC:F7:63:6F:0B:A8
X509v3 Authority Key Identifier:
keyid:DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0b:83:43:d3:f2:c0:3b:fe:7c:56:c1:7c:7e:2f:d8:d2:40:
75:91:bd:b5:f8:75:ea:2f:69:88:c1:52:91:f9:c8:b1:9b:51:
b0:8f:e8:cc:3f:8b:a4:5a:81:f8:fd:f6:3e:86:21:93:ae:1d:
42:40:c9:b2:6d:49:e7:46:e3:96:7c:50:c5:51:42:6d:c8:51:
35:b5:bf:b0:b6:c5:94:a1:99:7e:a8:a1:ef:35:15:36:c6:25:
17:a0:eb:e0:fd:ff:e9:b3:e9:7c:8e:6d:83:52:9d:d9:75:bd:
b0:99:32:1c:45:68:14:41:c4:b3:d9:29:93:20:cc:59:2c:a9:
78:76:ee:90:2b:d2:07:07:17:c1:79:c7:93:a4:0d:7c:16:bb:
9c:52:f9:d0:b1:bf:eb:c7:fd:34:ca:7f:fc:4e:ba:84:f1:09:
ce:15:3e:98:39:6a:73:45:ee:f9:43:49:26:06:05:88:ce:0d:
db:74:d1:2b:22:8c:6c:cb:7e:bd:f5:d9:18:48:5f:0b:73:33:
ee:e0:64:79:f3:bd:85:1e:1b:3c:fc:fa:1a:96:8d:ac:49:8c:
4b:44:13:b6:cc:79:6a:c9:40:71:cf:e8:70:20:6d:83:a5:0a:
a2:28:09:3e:0f:9a:35:a0:b6:92:92:6d:71:ee:6e:d1:61:5a:
46:d8:cf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:16 2025 by rpki-client