Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
File: 3xT-bNqQya_oB1kNLVA3SnaijhM.mft (raw, json)
Hash identifier: nJkjf5U6y1vJqLD9e7Tf7sRoyZeraFe/Te9HTcPeHUA=
Subject key identifier: 42:E1:04:4A:37:62:A9:C6:97:43:89:10:96:47:A6:47:0E:F2:19:F9
Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Certificate serial: 0199FB45D59479CE6037CA1E5AE068A9DB83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
Manifest number: 12DB
Signing time: Sun 19 Oct 2025 07:01:21 +0000
Manifest this update: Sun 19 Oct 2025 07:01:21 +0000
Manifest next update: Mon 20 Oct 2025 07:01:21 +0000
Files and hashes: 1: 3xT-bNqQya_oB1kNLVA3SnaijhM.crl (hash: gT5YZEdpYoAAsZTa3dNzndlK9tT8oAe2A3C5JDJVoXc=)
2: Swt5oFMQEQM3RtDOFxZCp2VObOM.roa (hash: d7VQjqZCXdGvodDw1gYlaDWjc+rRxAbFcC4KKSSYHOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d5:94:79:ce:60:37:ca:1e:5a:e0:68:a9:db:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Validity
Not Before: Oct 19 07:01:21 2025 GMT
Not After : Oct 20 07:01:21 2025 GMT
Subject: CN=42e1044a3762a9c6974389109647a6470ef219f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:8e:52:88:b5:5d:fd:71:0d:be:ab:29:8f:
dd:fe:38:f5:14:d9:94:e8:6d:42:35:57:cd:b7:64:
ec:6e:76:e9:15:29:f2:92:99:1f:cd:7e:02:91:c4:
ee:38:21:78:7f:6d:ce:b3:6f:24:88:37:f2:ea:2b:
7d:de:92:5d:0c:91:48:3b:4e:01:09:7d:c1:07:b2:
21:72:26:fc:8c:00:98:61:61:1d:da:56:9b:72:27:
d4:b9:76:73:fd:8f:cc:b4:37:7c:16:dd:ba:f6:76:
7f:3f:e4:1a:f5:5e:e0:16:0e:ea:bd:8d:9d:19:af:
51:47:cc:db:ab:0b:5e:b7:ad:ad:67:5e:6e:4d:aa:
89:0c:2e:ac:63:96:27:14:ae:3c:35:74:76:36:70:
74:48:fa:1a:f4:be:31:42:06:3d:dd:2d:d0:ef:5d:
85:5b:97:54:36:e2:72:4b:fe:5f:26:88:6d:6e:62:
04:35:bf:d3:bd:ef:02:c3:77:be:e1:fe:12:ea:e7:
f5:da:fb:21:c3:ab:23:32:d3:20:95:0b:45:a5:6b:
06:9b:6d:69:d3:32:de:1a:04:78:95:26:9b:4c:a7:
ef:eb:26:22:27:6d:2f:20:2e:18:de:96:a1:ed:cf:
7f:2e:27:f9:15:a3:ff:d2:b2:80:4f:f4:a9:36:ee:
fe:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E1:04:4A:37:62:A9:C6:97:43:89:10:96:47:A6:47:0E:F2:19:F9
X509v3 Authority Key Identifier:
keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2b:5b:21:03:55:97:52:ba:e1:c1:9e:df:99:83:72:49:b9:
9d:de:aa:d5:76:38:48:b1:b1:63:12:c5:75:e2:9d:bc:ae:30:
a2:80:85:a8:41:2f:2d:61:53:2a:6b:1d:cd:66:1e:71:75:97:
cf:89:95:ee:cf:8a:ba:b8:d6:30:e0:88:08:23:a1:41:68:77:
1d:07:e8:bd:cf:a7:16:a6:b9:30:14:84:4d:7e:73:94:d9:d6:
6a:9d:7b:b8:a6:02:0e:90:9a:f4:57:ea:9c:50:91:65:6d:87:
0d:f2:0d:02:9a:2e:1d:a7:a7:93:82:a7:d4:05:b9:38:51:3c:
74:5a:6b:a1:12:24:d3:70:1c:ce:d4:f5:c0:61:cf:20:30:8a:
2b:44:f4:8e:fe:2b:40:a7:62:ae:56:0c:b6:0b:30:60:6f:c8:
aa:59:d0:7f:c7:77:8d:90:4b:8f:f1:ff:2c:da:72:a8:ee:7d:
c4:d5:41:49:9b:bd:7a:dc:7d:e8:63:67:7e:7d:23:5b:c7:3a:
4b:09:2d:3c:77:cc:fe:5d:f5:3e:f7:66:9e:ed:1b:0a:f1:5f:
c6:ba:f2:a8:d6:db:4c:b2:d6:b6:da:22:aa:be:1f:5f:79:e1:
67:6d:db:d9:9b:9d:c3:c4:18:be:4d:e1:4a:65:1f:8e:20:d2:
0e:6b:17:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:55 2025 by rpki-client