Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
File: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft (raw, json)
Hash identifier: M7LnSyoKvta0iOrx9Rm0mUVdN0u+jA0aLISWY0b43qo=
Subject key identifier: 93:0A:3E:CC:8A:CF:CE:33:90:6B:0A:43:84:C7:F4:AA:4F:F9:FB:7F
Authority key identifier: DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66
Certificate issuer: /CN=dd19b5047acc57dfdd2f87045764956f4b603066
Certificate serial: 0199FBEBC1C82FEDDD6024E034C2860A1AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
Manifest number: 0DFD
Signing time: Sun 19 Oct 2025 10:02:35 +0000
Manifest this update: Sun 19 Oct 2025 10:02:35 +0000
Manifest next update: Mon 20 Oct 2025 10:02:35 +0000
Files and hashes: 1: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl (hash: tkaDb2VZbUWXE3SKH4BsiJGiqzeyk0uwRUVY/kyWGI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c1:c8:2f:ed:dd:60:24:e0:34:c2:86:0a:1a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd19b5047acc57dfdd2f87045764956f4b603066
Validity
Not Before: Oct 19 10:02:35 2025 GMT
Not After : Oct 20 10:02:35 2025 GMT
Subject: CN=930a3ecc8acfce33906b0a4384c7f4aa4ff9fb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d7:df:e7:65:a6:40:a0:8a:54:a3:41:d3:b7:
f2:2f:90:26:3c:16:c0:c7:a7:bd:2a:b9:79:26:32:
2f:f9:3f:d0:55:8e:1b:e3:e2:91:b3:1e:2d:e2:d0:
b5:5a:3d:6d:26:02:2e:5c:e3:ea:5d:bf:06:60:c8:
fd:49:63:35:95:67:ea:c4:e7:d8:a0:02:50:97:66:
31:5b:9f:4d:0f:16:f4:70:e4:3e:6e:13:c0:b8:85:
a7:0e:a3:68:fb:a1:dc:40:c1:43:7d:a6:16:11:e6:
83:15:da:50:36:a6:30:19:bb:11:96:4e:9e:20:54:
72:2e:3d:c5:92:77:32:6b:88:91:0e:df:51:62:94:
90:ae:cd:f5:97:fd:4e:5e:09:68:b9:dd:09:a7:cc:
35:69:c1:5d:93:e5:a1:be:97:b7:4b:27:7b:b3:ed:
d9:bf:9e:cd:0c:b3:1b:27:74:c6:2b:b3:f5:9b:ba:
de:12:82:b5:3c:1d:d0:b3:18:cb:28:c1:e3:f2:82:
b3:8c:89:e1:ea:fa:1e:ff:32:a7:f4:14:93:b6:a6:
be:6d:8a:6a:4e:50:1c:f3:ca:7e:1a:73:7d:aa:e0:
40:3a:eb:47:55:81:bb:69:29:a6:15:44:8e:54:af:
be:1d:e7:75:9c:21:d9:37:7f:39:35:6c:c6:8e:25:
e6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0A:3E:CC:8A:CF:CE:33:90:6B:0A:43:84:C7:F4:AA:4F:F9:FB:7F
X509v3 Authority Key Identifier:
keyid:DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:00:dd:01:fd:e9:a0:98:f0:72:56:72:2d:f8:45:05:cd:ad:
b0:71:f8:35:93:97:7d:12:9c:48:18:dd:f3:74:fa:b9:11:d6:
fa:b0:d2:97:e7:f1:44:e0:12:08:70:40:ed:34:f4:fe:ec:3b:
1d:ce:da:54:4c:39:6e:57:41:51:f1:7b:e7:f6:01:62:8f:1f:
2c:29:7e:0c:4a:29:d7:1b:1c:a5:04:0c:c9:30:b3:c6:49:0e:
7a:99:a0:7c:f8:c2:a0:90:b6:fb:4d:fe:97:7a:59:87:9b:6b:
70:7a:c5:6c:b1:9e:1f:7f:7e:55:11:dd:0a:ed:8f:91:a0:f6:
9f:f7:bf:84:0f:5a:dd:b7:55:bc:94:42:f9:ef:53:2d:1c:02:
37:56:67:87:20:86:fe:5e:6e:b3:04:a3:1d:3b:1d:9f:3d:ce:
30:d5:74:25:34:33:aa:cf:33:97:0b:a3:4f:11:af:4e:9a:f5:
e5:05:b1:f3:c8:81:06:9e:c8:12:53:9c:df:2e:27:a1:4d:d3:
15:75:ee:ec:77:50:22:1a:da:3f:09:21:c3:e8:65:b0:00:fc:
57:94:53:9f:67:6b:09:70:9c:54:b8:11:d1:0a:df:32:9e:93:
a3:38:ef:46:73:30:a4:45:f3:43:40:73:69:80:04:0f:23:e8:
8a:6a:d8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:24 2025 by rpki-client