Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
File: 3rwtwyLztJZucDtdjIi3FvDZsOk.mft (raw, json)
Hash identifier: 6sQAI5Uhghxs/6Ouqo8wkIOfhRgSv72bRlEZO54aSto=
Subject key identifier: B0:6D:95:AC:C2:1A:1A:DF:94:1C:72:FE:EB:19:54:DA:EF:E2:42:64
Authority key identifier: DE:BC:2D:C3:22:F3:B4:96:6E:70:3B:5D:8C:88:B7:16:F0:D9:B0:E9
Certificate issuer: /CN=debc2dc322f3b4966e703b5d8c88b716f0d9b0e9
Certificate serial: 0199FBEB5186560D5296154369F551EB6026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
Manifest number: 14A0
Signing time: Sun 19 Oct 2025 10:02:06 +0000
Manifest this update: Sun 19 Oct 2025 10:02:06 +0000
Manifest next update: Mon 20 Oct 2025 10:02:06 +0000
Files and hashes: 1: 3rwtwyLztJZucDtdjIi3FvDZsOk.crl (hash: TEF7G8BnSWjH0swVNVO4on7koD3zlJHsre/ldEYMooE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:51:86:56:0d:52:96:15:43:69:f5:51:eb:60:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debc2dc322f3b4966e703b5d8c88b716f0d9b0e9
Validity
Not Before: Oct 19 10:02:06 2025 GMT
Not After : Oct 20 10:02:06 2025 GMT
Subject: CN=b06d95acc21a1adf941c72feeb1954daefe24264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:13:40:e2:a3:f3:68:02:19:ed:69:5b:6d:d9:
05:d0:ce:9e:15:2f:36:11:01:9d:9b:91:6f:cd:03:
f8:ee:d1:ec:d0:7b:5e:11:95:b8:15:4c:9c:d8:6e:
e8:32:ce:5f:e4:a1:97:02:b3:10:5b:6c:05:7e:6a:
7b:34:0b:11:1d:0f:e8:2e:c7:73:d1:75:5f:6b:a9:
1a:11:19:39:fd:87:98:f6:52:1a:4a:06:b9:d4:8a:
94:a3:a6:c0:09:bd:47:59:19:8e:9b:ec:e2:d6:28:
d3:01:78:75:71:3f:b6:1c:ab:0f:e8:7f:a7:88:19:
ea:ec:42:63:5b:56:62:20:62:1c:4d:0e:f1:f1:7f:
40:d6:4f:55:e3:17:96:e4:80:32:1e:24:28:71:87:
ee:38:d0:bd:a3:e1:0a:fa:28:4c:08:ee:ee:70:b9:
82:d6:8c:b8:04:4f:b0:31:a2:ad:98:91:96:ef:1b:
b7:a9:fd:44:98:a4:13:3a:98:7a:9d:fb:2a:9c:ba:
35:be:b3:2f:43:d9:85:ca:77:25:4e:3e:d4:95:1c:
d0:a2:8c:0b:1a:1f:24:ff:84:0e:b0:4f:9b:72:60:
74:23:aa:20:9e:bb:fd:fe:2a:cb:ac:12:28:c1:6f:
f9:c0:0a:c1:03:83:4c:fb:24:f2:a5:b9:28:91:bf:
3e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6D:95:AC:C2:1A:1A:DF:94:1C:72:FE:EB:19:54:DA:EF:E2:42:64
X509v3 Authority Key Identifier:
keyid:DE:BC:2D:C3:22:F3:B4:96:6E:70:3B:5D:8C:88:B7:16:F0:D9:B0:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e1:87:90:1c:34:ec:29:3f:39:86:ea:6a:bf:a1:04:d8:a7:
c7:c4:4c:75:0a:77:24:a1:cf:7a:20:75:f4:88:da:c5:e0:8e:
a3:5b:a0:77:81:f0:9b:b4:24:46:92:5f:92:eb:e2:03:26:67:
22:ae:8e:c4:4d:b9:1a:2e:6b:bf:9a:c4:26:7a:d3:8b:c4:4c:
3e:7a:5e:ea:51:dc:13:94:96:04:5f:09:66:f4:01:ac:d0:59:
9f:6f:1c:50:d8:c9:79:9f:1c:29:ae:12:b8:23:38:6f:a9:08:
e1:00:a5:48:cb:65:82:df:9c:35:44:df:93:55:77:95:80:c2:
00:3e:1e:e5:3f:cf:c3:9d:24:00:0e:6b:bc:63:4b:8a:83:2f:
9e:86:1d:fd:c6:b6:2b:44:b3:9e:a1:7b:be:e3:5f:2e:52:11:
78:ee:69:48:89:1f:73:35:16:aa:17:c1:b7:d0:4a:6c:a4:de:
e8:a5:ec:c8:46:f1:6b:e7:ec:4d:03:15:08:ea:b8:b3:90:29:
97:7f:c5:a2:21:21:3d:e5:6d:c4:75:d3:c3:6d:38:b9:dd:12:
f9:fb:11:0b:a1:01:03:64:5e:28:9b:c2:64:b4:1d:74:99:b9:
99:e2:76:6c:75:98:db:99:66:12:84:69:34:dc:a7:79:8b:4e:
d7:44:1d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:28 2025 by rpki-client