Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
File: tj8U3_NUhamVlBKGMDe4XfqfE9g.mft (raw, json)
Hash identifier: 3/WsTw3wodPPVgJxXcCp/WJVTLa8QQCeSkN9ft5ysAU=
Subject key identifier: CB:04:56:70:23:ED:D4:DA:E4:E1:33:73:FF:84:4B:79:75:87:E4:03
Authority key identifier: B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
Certificate issuer: /CN=b63f14dff35485a9959412863037b85dfa9f13d8
Certificate serial: 0199FD341AB64F84B27040280EBC2050D42B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
Manifest number: 0618
Signing time: Sun 19 Oct 2025 16:01:14 +0000
Manifest this update: Sun 19 Oct 2025 16:01:14 +0000
Manifest next update: Mon 20 Oct 2025 16:01:14 +0000
Files and hashes: 1: tj8U3_NUhamVlBKGMDe4XfqfE9g.crl (hash: LZf05k7IUHgvpfubL2RzGnnhU0zhz6ECG6N7lJJVIdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:1a:b6:4f:84:b2:70:40:28:0e:bc:20:50:d4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63f14dff35485a9959412863037b85dfa9f13d8
Validity
Not Before: Oct 19 16:01:14 2025 GMT
Not After : Oct 20 16:01:14 2025 GMT
Subject: CN=cb04567023edd4dae4e13373ff844b797587e403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:94:c6:f0:d5:54:30:0d:b2:9d:7d:03:5a:
3f:1a:b7:c4:3b:f9:67:14:cf:71:b1:88:e8:27:eb:
7c:25:e2:d5:05:1b:81:15:bd:7e:8a:26:9e:f9:db:
b6:d9:62:d0:ba:1b:10:58:6b:48:52:f6:2a:ee:a9:
46:ba:a7:ce:b5:f8:ca:5e:53:02:6c:46:8e:27:b1:
a1:38:21:cb:36:4e:03:3e:83:1a:81:8a:cf:bc:d7:
5c:ab:d1:35:c0:38:29:dd:7c:ce:7c:7b:99:d1:e0:
e5:32:b5:1d:14:c8:b2:15:ef:3a:c3:cb:2d:9d:fe:
e7:42:26:e6:82:12:fc:68:b8:08:b1:9a:f5:46:3f:
81:f7:e9:a1:c8:5c:bb:61:59:f2:b3:c7:96:d6:cf:
1c:50:cf:ed:90:4c:61:01:b9:75:ed:68:ce:d0:22:
c0:ea:f4:23:1a:c8:e7:2c:5b:3b:93:0a:53:27:b2:
a7:53:af:d0:14:ae:2e:82:30:92:6c:b3:40:e9:b8:
b6:cf:2f:a4:6c:3d:a6:c8:a7:72:25:8a:31:c9:5a:
4f:89:7a:3e:89:50:54:f8:5a:eb:ef:13:b5:ae:92:
70:94:09:12:99:2c:fb:30:62:0f:f9:e4:12:0c:0c:
a6:fd:6f:ea:7c:1b:7c:73:32:ac:55:1f:3f:b9:30:
df:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:04:56:70:23:ED:D4:DA:E4:E1:33:73:FF:84:4B:79:75:87:E4:03
X509v3 Authority Key Identifier:
keyid:B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c4:88:6e:87:47:e0:4e:b1:8b:a2:ac:b6:78:32:b9:db:f9:
fc:b1:71:47:4b:4b:52:8e:5e:18:df:90:b3:56:12:a5:25:c0:
ea:7b:46:76:30:db:60:70:4e:a4:78:6e:74:92:5b:12:bd:c9:
08:ae:9d:90:5c:d7:99:c9:b1:4e:8f:9b:a4:0f:73:17:8a:06:
c7:f1:2d:f9:6e:df:72:a6:60:c1:30:ed:be:b1:13:e3:50:52:
21:f8:83:88:30:d7:79:5c:14:46:81:a5:f8:84:c4:a4:b5:ec:
e5:98:1e:67:bf:04:94:58:83:da:1b:a1:db:62:cb:5c:22:63:
b0:44:93:4f:36:5e:64:03:7a:81:56:40:7f:90:c2:8c:0b:5b:
43:68:ce:ac:47:07:2e:72:47:6b:bc:f9:8e:57:7d:e9:de:91:
5e:17:e9:a5:a3:e2:30:0e:da:7a:bb:ba:af:c1:b1:12:a6:96:
7f:0d:45:df:15:a4:5d:b5:3b:e9:e4:1b:78:55:86:08:08:85:
30:9d:1d:05:3f:a1:17:8a:11:29:44:e8:d9:dd:ed:76:69:cb:
ce:62:41:72:84:c4:c4:a4:28:72:59:1b:9a:4a:7a:e2:2b:4c:
de:81:73:ff:45:3b:f6:23:86:85:4f:a6:56:d2:41:7b:05:06:
67:e2:69:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:35 2025 by rpki-client