Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier: qL1sMdDmenV2jRJugMO/H3cUfYTuQJJd+crKKP4cpjE=
Subject key identifier: 53:96:2C:D0:F0:10:2C:B7:77:A4:03:6C:D4:FD:DF:0C:0C:6A:18:FB
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial: 019A059282A361E637D7A3AC29F8CF671D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number: 0F02
Signing time: Tue 21 Oct 2025 07:01:19 +0000
Manifest this update: Tue 21 Oct 2025 07:01:19 +0000
Manifest next update: Wed 22 Oct 2025 07:01:19 +0000
Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: 0FqyydSCbmk3Fgt/GKfEAOmMCxoJ8Fwo2qi0miGCcHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:92:82:a3:61:e6:37:d7:a3:ac:29:f8:cf:67:1d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Validity
Not Before: Oct 21 07:01:19 2025 GMT
Not After : Oct 22 07:01:19 2025 GMT
Subject: CN=53962cd0f0102cb777a4036cd4fddf0c0c6a18fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:8e:d4:8b:8a:4f:48:7a:d8:2d:60:e8:ff:
20:33:ea:f8:32:83:4f:0a:52:fb:65:09:b7:74:4a:
e0:bf:96:83:4f:2b:0d:ee:8f:9b:23:18:6a:34:ba:
e7:bb:bd:a6:a6:4d:21:a6:33:fa:a5:c1:2a:b6:bd:
ea:9f:24:f2:30:46:a2:29:29:61:b4:a5:55:0b:e5:
08:80:39:fc:d3:52:0b:c7:3e:48:a2:0d:17:4b:3e:
56:ca:65:f6:5b:7b:7f:5d:79:7f:ea:89:3e:f6:e6:
f5:a7:8d:31:cf:d4:cf:92:12:ea:3b:57:ac:5f:01:
7f:2c:79:d3:86:ef:f4:25:54:d4:e1:72:fd:80:08:
00:80:95:1f:19:7f:e7:a6:b4:7b:36:8c:e8:45:2a:
f8:6a:6e:02:d4:17:8c:e2:a7:4c:7c:19:bb:4d:dd:
79:9f:1d:61:ff:8d:95:5f:d2:5b:b4:43:20:a8:12:
9f:90:8b:45:4f:5e:83:79:be:bb:94:9c:bb:44:d3:
c4:15:d0:de:9e:b5:e7:fd:d7:40:5d:93:9c:a8:33:
0a:73:c1:85:d0:d9:af:0e:f6:db:fa:53:40:2f:a7:
ed:f6:96:b7:76:29:6b:bb:42:92:b1:62:8f:29:ed:
7d:8b:6e:0d:35:a0:b8:b9:07:ff:10:82:0f:7b:ed:
c6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:96:2C:D0:F0:10:2C:B7:77:A4:03:6C:D4:FD:DF:0C:0C:6A:18:FB
X509v3 Authority Key Identifier:
keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d4:86:8a:9e:b7:1a:fe:73:dd:b0:21:36:7e:dc:f1:89:d5:
32:6f:ab:54:f1:46:a4:e6:1a:e7:b1:6d:94:3a:d6:01:9f:2d:
f5:50:3b:56:f4:9e:d2:55:5b:0c:0f:66:1b:b6:09:ea:85:28:
d8:c2:b6:18:41:35:38:8c:94:15:7c:4b:91:a6:dd:84:4b:bb:
39:d7:fd:71:74:93:c0:85:9e:ae:81:c4:52:33:ab:9e:c1:58:
e5:97:28:4b:b8:1f:e2:05:99:ae:b2:ae:5b:91:12:22:b6:5a:
15:20:43:f8:31:1c:99:f4:b5:2d:40:77:3b:87:bc:5b:4e:4d:
76:80:3a:0c:ec:3e:9f:ee:56:e0:b4:72:c1:7d:b1:7a:24:91:
cc:f6:af:11:10:3a:c4:f3:01:0b:07:cf:59:7d:e5:b8:80:53:
9b:8c:80:85:e6:86:47:05:f7:26:99:09:21:f6:37:e5:87:ac:
7a:85:5e:1c:98:d3:94:44:59:db:37:8a:8f:1f:48:15:86:0c:
18:f8:c3:a6:10:2b:3f:d3:58:b3:a8:eb:7a:c3:a5:cb:71:e1:
da:38:1e:bc:d2:8c:21:e8:d5:49:e0:b6:83:24:c3:7d:97:42:
5c:81:98:03:4d:39:74:06:d3:12:84:02:49:7e:f6:30:2f:0a:
ae:d1:e1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:47:08 2025 by rpki-client