Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier: dV6a9gZJLSHGRmmbLKoPVb6vf7cHhfWypS7XfHGnkHI=
Subject key identifier: 9F:B1:AD:E8:29:AC:F8:73:8A:03:9B:0B:E4:2F:68:46:79:9E:5A:6F
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial: 0198D65FC0B3AA677AA440116ED6D3683E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number: 0E65
Signing time: Sat 23 Aug 2025 10:00:56 +0000
Manifest this update: Sat 23 Aug 2025 10:00:56 +0000
Manifest next update: Sun 24 Aug 2025 10:00:56 +0000
Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: ZikaE6/SWy2PrY5zMbzodwU9TytxYIUZhsRUntxEnes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:c0:b3:aa:67:7a:a4:40:11:6e:d6:d3:68:3e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Validity
Not Before: Aug 23 10:00:56 2025 GMT
Not After : Aug 24 10:00:56 2025 GMT
Subject: CN=9fb1ade829acf8738a039b0be42f6846799e5a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:2e:37:be:19:8f:ac:ce:d4:7a:f2:41:4f:
53:c6:1f:b4:a4:a2:37:44:bc:63:80:5f:21:2f:42:
40:be:ce:2d:cf:e1:11:7e:90:5e:2c:84:ce:6e:0b:
99:a7:c1:24:cc:d9:69:45:77:c7:6d:91:e3:02:1e:
f3:e8:0c:de:e6:d3:97:48:87:ae:ee:0d:1f:e7:40:
e1:21:98:e8:9e:36:81:af:4f:88:bd:59:28:7f:12:
47:bf:8a:f7:b8:61:02:76:68:98:e4:30:5c:95:8e:
73:d0:3c:36:55:60:05:c1:fe:11:f5:3f:5c:1e:e5:
16:3a:a8:41:bf:38:a5:3a:b9:af:91:af:2d:85:d5:
aa:c9:b5:75:90:7c:46:cb:55:c2:91:80:dc:57:dd:
eb:ba:7a:0e:54:ae:6d:30:7d:de:b6:89:2d:eb:6e:
30:63:cb:27:71:0c:f5:9f:62:be:f1:3b:4b:a5:3c:
18:fd:13:07:a9:0c:ff:45:7b:8d:ca:00:f6:47:4f:
73:16:b3:45:e0:46:27:5d:a5:ee:ef:41:a7:ec:e8:
75:25:c7:07:b4:9b:18:14:b6:2e:04:30:2f:a2:cf:
fe:b6:d3:ec:85:c6:2d:82:19:29:a9:d8:30:66:d8:
fb:0d:e4:80:b3:63:c3:a6:6c:28:bd:77:96:25:7c:
e1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B1:AD:E8:29:AC:F8:73:8A:03:9B:0B:E4:2F:68:46:79:9E:5A:6F
X509v3 Authority Key Identifier:
keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a6:00:8d:96:bf:6d:ec:98:66:98:50:67:dd:ca:7f:3a:d6:
6e:bd:a2:8b:83:9f:4b:53:57:f2:9b:48:a3:b4:40:4f:26:00:
f9:43:e5:62:a6:5a:21:0e:e8:f6:73:67:cf:f3:55:f3:c6:8f:
32:06:4e:5c:c3:43:88:9d:72:84:68:9d:84:c2:2a:ec:69:62:
c4:92:84:25:cd:8f:f3:59:9a:1c:5d:6a:b0:92:50:1d:36:5e:
1d:7e:39:d8:0f:28:b4:3f:01:7e:67:43:55:e4:de:51:b7:2a:
7c:bd:6d:4c:6d:a1:38:4e:0a:fd:e3:bc:7d:13:3b:44:01:f5:
66:48:2f:aa:0d:80:96:78:62:f9:60:e7:2b:16:15:ef:d6:8c:
2b:47:f8:c9:ad:3d:c7:b4:2f:33:c9:16:2b:74:6c:1b:42:8c:
7f:12:42:6f:3c:96:cb:48:cf:0c:da:21:4b:d2:cb:b0:aa:37:
fd:b4:c4:63:a7:08:79:65:24:da:d4:bc:2c:6e:b2:f4:27:fd:
e2:28:fe:cb:6b:7d:ca:49:55:df:af:2d:22:55:56:da:26:64:
a7:23:d5:32:ac:92:53:e8:95:f3:0d:35:f0:60:10:4e:fc:03:
0f:5b:0f:a7:b4:6f:b3:d8:1e:b6:ca:66:62:10:65:f8:a7:39:
1e:ef:ad:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:51 2025 by rpki-client