Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
File: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft (raw, json)
Hash identifier: /btpvRf1WO14TJtIj9vkAR6IM5P1aeAX1m24PiXvtdI=
Subject key identifier: 7B:EC:27:8B:FA:FB:F0:D5:C4:F7:D4:4C:3C:75:85:65:70:AD:7E:68
Authority key identifier: DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14
Certificate issuer: /CN=dd3873303d2d6e238a5bd85ed5867b643158fc14
Certificate serial: 0199FCFD83025F054220202D3A34B1A9CA06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
Manifest number: 9E
Signing time: Sun 19 Oct 2025 15:01:36 +0000
Manifest this update: Sun 19 Oct 2025 15:01:36 +0000
Manifest next update: Mon 20 Oct 2025 15:01:36 +0000
Files and hashes: 1: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl (hash: F22xrKQUCfwG/PTY40sOrqgHRwA1Nxde0fpvQDLAgLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:83:02:5f:05:42:20:20:2d:3a:34:b1:a9:ca:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3873303d2d6e238a5bd85ed5867b643158fc14
Validity
Not Before: Oct 19 15:01:36 2025 GMT
Not After : Oct 20 15:01:36 2025 GMT
Subject: CN=7bec278bfafbf0d5c4f7d44c3c75856570ad7e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:19:bf:50:1d:4c:c2:8f:d6:f8:a9:61:f9:
dc:7a:b7:09:54:3a:01:85:7d:8c:b2:98:5a:1e:ce:
7e:07:ed:80:14:32:59:06:17:b8:b6:46:33:44:2f:
91:d9:45:74:06:ed:0c:71:e3:cb:28:38:59:6d:9c:
3a:42:e8:3e:2a:89:d0:56:d0:9d:6a:d2:5c:e4:d3:
00:eb:40:eb:c9:55:3e:d4:f1:3a:df:47:46:1d:b5:
56:2f:97:1d:0b:1a:d7:df:70:b2:01:7d:6f:5e:45:
4c:a0:38:b1:08:97:78:43:73:ae:e8:94:6a:d4:15:
9c:44:76:6f:4a:15:0f:f0:4e:2d:e1:7e:a4:c7:e8:
65:d4:95:d7:92:af:6c:b2:c5:53:b2:2a:de:c6:c4:
0c:b7:ad:d7:37:83:4e:65:26:f6:f4:5b:21:8b:e8:
95:41:2f:b0:e5:d3:45:21:c0:68:fe:02:92:96:40:
d6:86:b2:13:92:0a:25:47:7d:89:1d:62:0f:bd:c0:
a3:46:19:fb:aa:3c:7c:c3:d4:0c:74:7b:31:ca:e9:
c9:a0:1e:09:7d:25:38:ef:bf:0f:29:97:cc:99:9d:
13:cc:92:da:66:f4:ed:e4:34:3d:77:de:aa:fd:f4:
97:32:8a:f9:c9:bf:36:4e:79:32:0a:91:e9:16:d6:
b0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EC:27:8B:FA:FB:F0:D5:C4:F7:D4:4C:3C:75:85:65:70:AD:7E:68
X509v3 Authority Key Identifier:
keyid:DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:18:ae:7e:8d:d5:9d:5d:13:de:ea:b3:df:27:d2:4f:30:d8:
75:e5:bf:c9:2f:3c:83:70:19:b4:f6:21:91:1b:39:fb:27:ba:
ff:0a:f0:0a:65:1e:75:93:d7:f6:e9:2d:70:3c:c6:50:b5:95:
b4:d0:47:d7:e8:ef:55:af:80:ce:9d:ef:73:80:e2:01:a7:e1:
82:2d:87:9a:2f:c3:34:04:60:3b:32:2b:a3:f8:f4:bc:66:6b:
55:64:e4:19:7d:16:f5:e9:fa:7f:31:29:58:32:0b:d4:bf:db:
61:57:74:f0:18:01:f7:0a:38:24:c6:f1:85:c9:3b:18:d2:4b:
71:94:54:6d:3f:bb:e3:66:bc:92:07:6c:be:50:fb:3c:fe:2a:
84:1b:e7:cd:59:bc:4f:f6:7c:ea:2a:2a:82:31:44:04:3f:bf:
f5:53:6d:e9:b6:ba:49:34:28:43:7c:ae:fb:ab:27:d5:65:c8:
0f:76:7d:aa:76:5b:07:75:11:ac:3a:67:37:cb:fc:4d:60:ad:
a0:e8:4d:ea:4d:2f:fc:24:c2:95:d1:97:9e:16:67:76:60:19:
6c:f0:28:ad:21:82:1c:d9:25:64:83:ba:97:83:22:e5:ec:0e:
f6:54:d6:8d:5f:a8:b4:b9:23:b6:6d:72:c4:4d:4b:6a:f8:2c:
e0:0c:1c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:24 2025 by rpki-client