Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier: u3UFgp3evCuSxMfIZHHFdodzEwHlo/oeGCS/QEHRkEE=
Subject key identifier: EA:C6:28:BA:1A:C9:19:4A:E4:B1:A9:C5:58:AD:D3:F6:1E:26:31:C6
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial: 0199FC8F27F79A416F6D8270DD6A1AF86DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number: 12DA
Signing time: Sun 19 Oct 2025 13:01:04 +0000
Manifest this update: Sun 19 Oct 2025 13:01:04 +0000
Manifest next update: Mon 20 Oct 2025 13:01:04 +0000
Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: +bGG4W9YISdWIvpYKyqtLx9EsR7SE2bcVcXEZj7uctw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:27:f7:9a:41:6f:6d:82:70:dd:6a:1a:f8:6d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Validity
Not Before: Oct 19 13:01:04 2025 GMT
Not After : Oct 20 13:01:04 2025 GMT
Subject: CN=eac628ba1ac9194ae4b1a9c558add3f61e2631c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:91:70:32:b7:7f:5f:1e:4e:87:dc:de:ff:b6:
54:77:33:84:17:f4:7e:35:cf:ab:2a:cc:ed:ae:99:
ca:6b:f6:dc:fa:e5:36:6b:9a:bb:ba:6a:d0:b9:15:
a4:71:09:3f:87:ab:6a:39:2b:c5:41:6d:6e:c9:fb:
2b:a9:b4:e3:58:59:c5:73:c9:88:bf:3d:69:13:fb:
7e:83:02:08:ef:ea:b3:b8:26:3c:34:48:dc:95:f7:
4c:9d:bb:d3:60:54:08:2a:cc:85:99:75:7f:ce:e7:
bf:bf:f8:00:8a:49:81:9a:09:f7:62:39:87:3c:04:
9a:ec:8a:6b:58:9a:54:28:b2:bf:8e:e2:10:35:b2:
a4:b7:33:04:a1:f8:6f:b4:a4:b8:43:5e:4e:c5:44:
69:b3:6f:3a:57:cf:94:9f:a0:79:6d:17:39:c7:15:
02:f0:5e:c4:39:99:df:2d:a2:af:81:4d:91:ef:00:
47:0a:38:3e:47:e3:ff:34:17:e5:1a:25:20:e8:2c:
3f:67:a0:45:fc:10:a6:92:fb:be:d9:15:2a:b8:69:
7f:97:9d:21:35:34:a0:13:15:11:29:06:02:1a:7c:
89:33:7a:88:45:03:5f:b2:c3:a1:40:29:c0:ad:65:
09:8f:61:b5:c3:17:97:d9:69:87:fb:a0:89:41:ad:
7c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C6:28:BA:1A:C9:19:4A:E4:B1:A9:C5:58:AD:D3:F6:1E:26:31:C6
X509v3 Authority Key Identifier:
keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b0:e8:6f:47:a0:24:5e:bb:7a:90:3c:51:cf:02:48:10:c2:
17:d7:8a:8f:d4:96:9d:61:29:97:d2:0a:61:21:f3:87:ef:87:
00:5b:19:8c:ec:a8:af:33:08:12:72:5a:19:aa:e6:f1:e3:10:
29:e3:15:94:35:ef:f2:95:1c:43:dc:40:3a:8b:00:31:2a:1d:
57:3d:c1:fd:c9:2e:67:74:5e:16:e9:b2:4e:78:43:51:04:3f:
49:35:a5:55:b8:f6:7a:f8:2a:9f:46:9c:f6:61:76:44:cc:69:
b4:8b:f9:d5:20:56:e9:d7:95:d2:f8:72:dd:3f:8e:4c:c5:74:
b6:38:d5:ad:11:c7:c4:62:0a:ae:cf:3c:63:10:fe:21:ff:e4:
10:ea:39:41:1b:f8:4d:8c:04:f2:bc:6b:f5:72:80:7f:4b:c3:
06:75:39:b7:61:c5:d1:68:b9:a6:bf:b8:f6:c4:91:07:ba:70:
03:92:2e:1b:e5:c6:5e:4c:e7:3c:d0:3a:f9:1a:96:c3:93:68:
ed:5d:d7:d4:ef:0a:40:06:c1:ac:1d:41:f5:2b:61:8b:1f:c2:
5f:36:8d:b2:d9:a2:0b:e5:c9:00:0c:0f:28:02:1a:04:f5:cf:
da:2b:23:8d:74:b8:d6:f1:ce:30:ad:ee:07:28:14:7a:d6:a7:
eb:41:57:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:38 2025 by rpki-client