Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
File: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft (raw, json)
Hash identifier: ib0bW5D8HKNgVnI6p+AAs6T9CFUU+NCqF64Ci8MoSTQ=
Subject key identifier: 73:E8:5F:63:92:6E:E6:7B:43:9B:8D:A5:41:BC:F4:AA:34:05:33:47
Authority key identifier: DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
Certificate issuer: /CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
Certificate serial: 0199FC58EA4F51386ED4F50D7620624D4E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 12:01:49 +0000
Manifest this update: Sun 19 Oct 2025 12:01:49 +0000
Manifest next update: Mon 20 Oct 2025 12:01:49 +0000
Files and hashes: 1: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl (hash: 4VqbNe5oSsSN2IRnJMcMspUIhpQ/V0ofaeyyeMmTfUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ea:4f:51:38:6e:d4:f5:0d:76:20:62:4d:4e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
Validity
Not Before: Oct 19 12:01:49 2025 GMT
Not After : Oct 20 12:01:49 2025 GMT
Subject: CN=73e85f63926ee67b439b8da541bcf4aa34053347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d5:03:f7:52:98:fd:c8:50:6d:e2:cd:7e:a9:
28:99:0f:ef:b8:6c:02:dd:87:e2:b6:5b:cc:36:a4:
f1:89:03:59:7d:33:60:85:96:45:6a:58:76:ff:e4:
59:8b:ad:44:c8:c3:d0:13:1b:ca:bb:de:df:73:27:
f2:95:46:d6:af:e1:7f:0e:1e:42:3f:7f:b6:4a:76:
f2:68:be:67:9b:4b:d5:0c:19:e8:3e:44:40:06:bd:
41:e1:8f:a7:69:0c:ee:37:02:08:2b:5d:47:1b:01:
15:34:ac:6b:79:1c:4e:75:8d:8a:2d:79:0b:06:77:
43:67:44:66:1d:d0:75:8d:65:c0:10:ed:a0:44:6e:
a6:ba:22:10:7d:b3:72:8a:1d:29:25:43:42:5e:70:
91:9b:8e:f7:e4:c1:72:e6:80:35:cf:48:6d:37:aa:
86:65:52:0e:62:81:f2:6e:45:cb:a7:66:d9:0e:a2:
ef:c9:27:e0:87:5f:0f:75:2b:0c:49:5c:3f:7c:a4:
c5:e2:a8:d6:1e:5c:0d:7c:e5:a1:af:3e:e9:5f:af:
13:a1:e2:e7:61:37:82:e8:46:0d:d6:af:7c:7b:e2:
06:82:64:a6:e0:8e:8b:33:d8:7c:dd:3a:de:77:5a:
3a:24:0a:58:9c:97:f7:64:66:cb:4f:a1:95:6e:52:
38:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E8:5F:63:92:6E:E6:7B:43:9B:8D:A5:41:BC:F4:AA:34:05:33:47
X509v3 Authority Key Identifier:
keyid:DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:26:cb:bc:91:d6:2b:d0:55:f1:35:04:e0:e2:31:65:4b:7e:
7a:49:4f:c2:cf:7d:15:2f:f2:87:df:59:42:59:fa:fe:29:4d:
ff:52:86:0c:d2:5f:83:8f:4f:f1:ab:f6:03:5e:51:4a:73:92:
2a:21:b9:b2:67:79:cd:85:54:2b:42:6e:38:e3:48:ee:6d:9c:
9e:ff:b1:7d:c7:88:5f:73:a0:06:f7:cb:8f:59:f1:97:7c:4e:
56:be:dd:01:ae:2d:e1:62:06:cd:2b:df:f6:12:eb:fe:55:c0:
3a:e7:77:74:ba:c9:dd:f4:63:9d:9a:50:e5:a3:49:05:c5:4d:
37:cb:50:65:a5:5b:7e:da:de:20:3d:4c:77:78:c8:ea:9d:f9:
96:31:d6:6a:e5:16:d8:38:00:c6:4f:d7:84:19:4a:2c:5d:e9:
fa:13:3c:88:42:f8:8b:9d:9b:78:eb:96:b7:dd:f7:fb:91:4d:
bb:43:ca:81:b0:fe:96:5d:c7:c7:d6:d1:bd:b9:e1:1d:5c:f6:
63:e9:36:48:2d:3e:98:b4:42:9c:f9:89:5e:22:7d:7f:08:73:
b8:6c:91:88:74:9b:34:ed:a7:95:09:ac:1d:8d:47:e4:a5:88:
c6:f4:d7:eb:79:82:5e:2f:b8:b0:5c:f7:9d:43:06:4a:2e:c8:
5e:cf:6d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:00 2025 by rpki-client