Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
File: 3mshhKwi402MRNprhFSbunH9VT0.mft (raw, json)
Hash identifier: qBvQj6sLxp0McQyJ/mR5VQdQ3rmup7BcU3o5qW2CGj0=
Subject key identifier: 81:0E:53:D3:BE:BB:16:99:2F:3E:FC:3A:10:E8:4B:B6:30:50:4B:AE
Authority key identifier: DE:6B:21:84:AC:22:E3:4D:8C:44:DA:6B:84:54:9B:BA:71:FD:55:3D
Certificate issuer: /CN=de6b2184ac22e34d8c44da6b84549bba71fd553d
Certificate serial: 0199FB7CB8015C230587225E4B9A5AB018D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mshhKwi402MRNprhFSbunH9VT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
Manifest number: 0C
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: 3mshhKwi402MRNprhFSbunH9VT0.crl (hash: isQlMuwU+cynp6hsdY9JN1CilHh/2KlWq7fpXjg6jgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mshhKwi402MRNprhFSbunH9VT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b8:01:5c:23:05:87:22:5e:4b:9a:5a:b0:18:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6b2184ac22e34d8c44da6b84549bba71fd553d
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=810e53d3bebb16992f3efc3a10e84bb630504bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:06:82:ec:66:f3:58:c6:1b:7e:d5:cc:24:6c:
31:e5:1a:01:82:26:8c:90:e3:2c:03:da:9e:21:fa:
50:eb:46:82:5c:aa:12:50:c3:b4:db:e9:a4:09:e1:
fd:4e:94:12:b9:4f:b9:be:d2:09:04:dc:42:aa:c0:
5b:ee:c5:85:6f:3b:21:e1:b9:6e:d1:13:6e:0e:30:
47:82:a5:3a:46:17:e1:f6:57:58:63:14:d7:2c:f0:
a8:3a:24:bf:a4:a8:76:17:00:31:92:7a:15:90:61:
2f:b8:74:24:21:28:a7:27:f8:20:68:cf:fe:f6:71:
19:43:ae:2f:d1:b2:4e:15:e8:04:6f:c6:d6:ca:02:
b8:a4:1d:25:b5:19:71:95:a1:ed:b9:4e:14:ca:d0:
04:bc:0e:11:65:74:3e:5f:4d:95:c1:5e:38:af:b1:
8a:6b:05:47:1b:bc:66:9e:19:9a:7b:a6:06:1e:5d:
fc:5b:95:f4:2e:05:88:94:41:13:db:29:eb:49:79:
7d:00:6b:f0:26:d6:ff:13:31:67:25:8b:dd:f3:86:
86:0f:e3:5e:48:0b:55:96:cf:ac:5d:48:72:f1:d0:
c9:88:af:c0:a8:65:f1:f5:75:e6:33:b7:ac:e6:e9:
6f:f4:bb:6a:45:c7:de:c9:79:4a:3a:ca:77:80:08:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0E:53:D3:BE:BB:16:99:2F:3E:FC:3A:10:E8:4B:B6:30:50:4B:AE
X509v3 Authority Key Identifier:
keyid:DE:6B:21:84:AC:22:E3:4D:8C:44:DA:6B:84:54:9B:BA:71:FD:55:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mshhKwi402MRNprhFSbunH9VT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4d:9f:1e:c3:61:28:d7:38:3c:95:11:6b:1f:b4:3b:16:cc:
e8:b2:2b:30:21:c1:72:e5:f1:ba:9c:ed:25:bf:3b:b7:b9:18:
90:85:b8:90:de:24:3b:f3:30:d6:1e:58:bb:d4:c5:6f:20:70:
7a:02:ab:04:36:15:4d:fe:3e:95:0d:c4:e3:a8:12:83:f0:be:
31:5e:0e:23:50:7b:90:ce:77:03:f9:3c:98:33:5e:73:a9:e6:
74:bb:6c:8e:ae:82:2b:fc:9a:e4:ab:f4:57:fe:0e:ff:96:23:
08:72:04:fd:58:9a:f0:bd:f0:3b:07:b4:9c:cd:65:27:14:60:
c7:8c:2e:61:1c:3b:53:f6:01:87:8c:b3:e4:70:18:75:7f:77:
9a:e0:6b:7d:ea:82:d9:f0:80:d8:5d:d5:e2:15:c9:34:40:38:
18:9c:78:21:93:4e:97:19:ff:05:ff:b4:fa:27:b4:f3:04:2c:
ef:29:90:a8:46:77:68:41:b0:d7:0c:a7:52:9f:b6:8f:7d:03:
02:4c:83:79:73:1f:5e:e4:5f:d6:d1:4b:d9:c2:bf:15:e4:a7:
10:86:a3:f6:04:bd:8d:f8:e9:36:e4:4e:60:9a:b2:49:e7:25:
a6:7f:1b:f9:36:75:45:22:2f:b5:f1:8c:3a:f6:39:a4:62:08:
0b:ff:7c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:00 2025 by rpki-client