Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
File: 3vg4UDz7wFKD_erdRkSke_14P84.mft (raw, json)
Hash identifier: kWpZR891aBvL5mVUewvrO3j/EuTQwQMXfR/TyKXn1Hc=
Subject key identifier: DA:80:3B:41:A4:61:26:11:30:52:DC:18:DD:22:F4:CD:3A:92:4D:EF
Authority key identifier: DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
Certificate issuer: /CN=def838503cfbc05283fdeadd4644a47bfd783fce
Certificate serial: 019A0110C1477AACBEEA80DC28369A2F0394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
Manifest number: 090E
Signing time: Mon 20 Oct 2025 10:01:06 +0000
Manifest this update: Mon 20 Oct 2025 10:01:06 +0000
Manifest next update: Tue 21 Oct 2025 10:01:06 +0000
Files and hashes: 1: 3vg4UDz7wFKD_erdRkSke_14P84.crl (hash: TLsYCgCg9R1767AoaUOxT4ESxEDLSzFpaq/b2FqIPTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:c1:47:7a:ac:be:ea:80:dc:28:36:9a:2f:03:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def838503cfbc05283fdeadd4644a47bfd783fce
Validity
Not Before: Oct 20 10:01:06 2025 GMT
Not After : Oct 21 10:01:06 2025 GMT
Subject: CN=da803b41a46126113052dc18dd22f4cd3a924def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:8a:c3:b3:51:35:7d:b5:89:9a:3b:a5:f6:
60:45:83:44:81:ca:6d:f1:30:24:24:9d:b2:9e:81:
29:67:89:84:0a:ca:35:01:ba:36:d2:7a:e2:5c:8f:
84:e9:29:91:fe:a9:31:f3:48:c6:af:b0:54:07:c8:
bb:6b:0f:da:d3:34:40:7b:d2:0b:e8:6c:86:eb:0e:
64:f9:2f:2c:c6:f0:27:1c:6d:c7:70:7e:e8:c5:25:
fc:d1:51:0e:93:74:c4:b8:f3:6d:12:41:72:a0:a1:
d0:ac:c6:44:66:c5:f6:24:19:de:29:e8:30:14:36:
44:8c:06:cc:d0:ef:ee:6e:30:b5:b3:77:5d:8d:34:
9b:84:19:59:77:96:af:36:9d:30:6d:73:9e:bd:8d:
e5:69:ca:b6:9c:8c:1c:7a:93:1c:b0:8e:45:9c:bd:
f8:94:23:dc:8c:91:5b:94:96:ed:43:3b:a4:da:0a:
30:50:b4:3b:ca:24:de:d5:47:be:f5:ce:a0:05:2a:
29:00:b4:09:49:7a:22:85:86:c2:5c:a7:de:4f:e3:
a2:83:04:09:5c:22:a2:03:7f:5f:73:c5:9b:77:e6:
c1:7c:91:39:a2:d9:38:ca:82:f5:cd:8d:5b:aa:4d:
36:3a:08:47:d9:1b:f6:8c:20:f5:6a:f9:9a:a0:5a:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:80:3B:41:A4:61:26:11:30:52:DC:18:DD:22:F4:CD:3A:92:4D:EF
X509v3 Authority Key Identifier:
keyid:DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3a:3f:e0:ba:06:86:11:b8:3c:6d:7e:d7:ba:7d:45:06:86:
d3:16:20:ea:4a:bf:58:cf:59:fc:63:66:a6:6f:41:fa:5d:4f:
fc:86:c5:cc:b0:0c:04:c1:ef:1c:56:53:53:13:fd:24:fa:77:
8e:07:ae:96:94:ce:47:5a:9d:92:65:a6:28:12:e5:e4:54:ff:
fb:6e:78:0a:59:a1:ef:fa:05:f0:b5:03:8c:58:42:e2:e7:a9:
69:8b:63:62:d7:7d:1f:33:c9:49:60:2b:b8:83:47:20:2d:4c:
87:0a:b1:a4:88:6c:fa:83:ec:6b:2f:05:5b:70:75:17:59:ed:
ab:82:db:07:06:c4:24:a4:0f:39:25:4c:6f:e2:41:61:2f:ba:
6b:de:ba:d1:98:b3:97:6b:97:72:22:08:6d:7c:34:c1:77:8a:
04:40:4c:ad:26:a8:cc:77:bd:9d:af:1a:f0:3c:94:9b:3c:8e:
18:dd:52:c6:ce:d9:1d:26:fa:44:e6:8c:14:b1:57:85:85:62:
91:dc:7b:9e:0f:1c:9b:03:fc:8d:1c:97:63:ee:5c:53:b1:47:
d5:40:50:6a:00:54:00:0f:0f:71:bf:cf:8f:5b:e5:c7:a3:a1:
50:eb:5e:06:86:d7:2f:6a:e7:b8:13:cb:a3:5a:ee:d0:b1:62:
a4:76:d6:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBEMFHeqy+6oDcKDaaLwOUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZjgzODUwM2NmYmMwNTI4M2ZkZWFkZDQ2NDRhNDdiZmQ3
ODNmY2UwHhcNMjUxMDIwMTAwMTA2WhcNMjUxMDIxMTAwMTA2WjAzMTEwLwYDVQQD
EyhkYTgwM2I0MWE0NjEyNjExMzA1MmRjMThkZDIyZjRjZDNhOTI0ZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydWKw7NRNX21iZo7pfZgRYNEgcpt
8TAkJJ2ynoEpZ4mECso1Abo20nriXI+E6SmR/qkx80jGr7BUB8i7aw/a0zRAe9IL
6GyG6w5k+S8sxvAnHG3HcH7oxSX80VEOk3TEuPNtEkFyoKHQrMZEZsX2JBneKegw
FDZEjAbM0O/ubjC1s3ddjTSbhBlZd5avNp0wbXOevY3lacq2nIwcepMcsI5FnL34
lCPcjJFblJbtQzuk2gowULQ7yiTe1Ue+9c6gBSopALQJSXoihYbCXKfeT+OigwQJ
XCKiA39fc8Wbd+bBfJE5otk4yoL1zY1bqk02OghH2Rv2jCD1avmaoFqdJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqAO0GkYSYRMFLcGN0i9M06kk3vMB8GA1UdIwQY
MBaAFN74OFA8+8BSg/3q3UZEpHv9eD/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3ZnNFVEejd3RktEX2VyZFJrU2tlXzE0UDg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNzg1NTEtMDBlNS00NzdjLWI3MTIt
OTcxYmI0YTUyYjNmLzEvM3ZnNFVEejd3RktEX2VyZFJrU2tlXzE0UDg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9hNzg1NTEtMDBlNS00NzdjLWI3MTItOTcxYmI0YTUyYjNm
LzEvM3ZnNFVEejd3RktEX2VyZFJrU2tlXzE0UDg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzo/4LoG
hhG4PG1+17p9RQaG0xYg6kq/WM9Z/GNmpm9B+l1P/IbFzLAMBMHvHFZTUxP9JPp3
jgeulpTOR1qdkmWmKBLl5FT/+254Clmh7/oF8LUDjFhC4uepaYtjYtd9HzPJSWAr
uINHIC1MhwqxpIhs+oPsay8FW3B1F1ntq4LbBwbEJKQPOSVMb+JBYS+6a9660Ziz
l2uXciIIbXw0wXeKBEBMrSaozHe9na8a8DyUmzyOGN1Sxs7ZHSb6ROaMFLFXhYVi
kdx7ng8cmwP8jRyXY+5cU7FH1UBQagBUAA8Pcb/Pj1vlx6OhUOteBobXL2rnuBPL
o1ru0LFipHbWng==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:35 2025 by rpki-client