Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
File: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft (raw, json)
Hash identifier: NmA3YGZcT7HsoTHNFHaYN5OuGbd9dAw+emM90qp9dnw=
Subject key identifier: 97:FE:B2:6A:22:0D:6A:1E:CD:FB:42:63:08:5D:90:A3:35:F6:9D:07
Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
Certificate issuer: /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Certificate serial: 0199FB7CA05B80327955DA47DF6519F9DD14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
Manifest number: 0DF0
Signing time: Sun 19 Oct 2025 08:01:12 +0000
Manifest this update: Sun 19 Oct 2025 08:01:12 +0000
Manifest next update: Mon 20 Oct 2025 08:01:12 +0000
Files and hashes: 1: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl (hash: qlZEGE9Ym5bujFHvwT8ioEbXxEJjajZTWWlcak0DB4M=)
2: vmqKHuLzrPkqklGr2oHlX4A5H1s.roa (hash: HWx6FXZlLIKlHVfqDThyZuNv2Ccv+hNVkaueWiNq1XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a0:5b:80:32:79:55:da:47:df:65:19:f9:dd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Validity
Not Before: Oct 19 08:01:12 2025 GMT
Not After : Oct 20 08:01:12 2025 GMT
Subject: CN=97feb26a220d6a1ecdfb4263085d90a335f69d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7c:58:25:86:80:5a:a6:2b:b2:1e:ac:65:21:
f1:a8:eb:6a:0b:8d:9f:f1:f9:15:5d:34:b1:a7:d0:
12:65:0e:17:cb:16:60:13:30:6c:7e:25:bf:ca:b3:
20:47:b7:0d:4a:bf:5c:18:4d:07:9d:71:e1:bf:68:
8e:f2:74:c0:c1:2a:e2:e2:14:27:f8:bd:55:9a:7c:
3e:4b:d3:dc:04:34:61:8a:51:7f:16:d5:56:19:34:
91:b1:7e:71:7e:07:7a:c5:dd:55:7c:6f:d9:e6:d1:
e6:c1:9d:11:6c:ca:29:0b:80:f9:f9:7b:1b:57:4f:
e5:40:d9:5e:d1:e2:aa:a8:bd:64:f3:d2:b7:c3:59:
42:a1:09:be:a8:f2:f5:01:3a:32:39:79:d4:86:0e:
62:cb:34:82:ca:34:6b:a0:3c:cb:ed:8d:be:7e:54:
72:0b:5b:9e:ad:c7:c1:24:77:78:99:d6:51:8f:3f:
3d:b2:16:4b:37:3b:3f:21:e4:30:f4:73:3f:77:99:
a6:e5:d2:3f:97:5a:fc:93:4c:a0:e5:4e:e9:f7:55:
17:99:f6:42:33:20:1c:12:84:13:aa:9d:31:d4:14:
fe:5d:50:8d:76:cd:b1:f6:a9:5e:f5:9d:84:11:4b:
09:e2:ac:03:6b:09:42:b6:72:9f:2d:f4:7f:45:94:
17:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FE:B2:6A:22:0D:6A:1E:CD:FB:42:63:08:5D:90:A3:35:F6:9D:07
X509v3 Authority Key Identifier:
keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a4:bc:ac:27:2e:12:a2:dd:d8:77:56:ce:68:ed:6e:44:e0:
c2:b9:e5:ef:e5:24:2c:5a:a0:05:b9:d2:d4:5e:57:77:bd:db:
09:1b:e3:7b:dd:6f:27:8c:d3:7a:cc:21:fb:ae:2d:2b:ef:a8:
c1:72:19:d8:35:51:1a:29:1f:23:eb:73:90:1f:b8:62:1b:fa:
6c:01:52:ac:c7:1f:ad:49:58:4c:24:bb:c1:0e:9d:3d:b0:0c:
e5:f8:f0:05:96:72:03:6c:bb:ff:c6:21:4e:e1:4b:45:bf:49:
be:23:09:3a:f3:f2:8f:84:54:31:bd:a4:e0:b9:72:3a:f9:25:
8d:b0:d7:47:6b:8b:1f:85:0b:c4:ee:38:57:0a:78:0a:a0:1d:
17:f8:a3:c9:51:12:1a:3a:b0:dc:30:20:84:dd:cf:24:87:df:
44:10:64:39:4f:f8:59:be:20:62:dd:e7:3f:b3:71:66:c8:8b:
c9:47:21:6e:ba:49:b4:68:c0:3e:a7:94:06:b9:eb:40:ca:45:
02:6c:01:e2:a8:dc:b4:db:e8:fd:d3:12:7c:77:dd:16:14:7e:
6b:02:65:24:49:e0:be:d8:b2:07:50:75:82:00:21:dc:91:3b:
ad:c7:09:e1:1b:55:87:b9:b9:ee:be:04:5c:8a:96:7f:31:8f:
6f:b4:82:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:37 2025 by rpki-client