Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: EJg3Vb6UKKm4emySJwVha6bUT41lPIo8u1GN0xLA9wA=
Subject key identifier: FC:CA:BC:75:00:DB:58:F8:04:64:CE:ED:3F:37:67:C5:7A:1E:95:1F
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 0199FE7D7ADA699A750E89D73E113F8BD5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 05CA
Signing time: Sun 19 Oct 2025 22:01:00 +0000
Manifest this update: Sun 19 Oct 2025 22:01:00 +0000
Manifest next update: Mon 20 Oct 2025 22:01:00 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: egL+RXtLJpYfqhjC0rSnD5bz1Arvnt2ci3aQGvbOtoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:7a:da:69:9a:75:0e:89:d7:3e:11:3f:8b:d5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Oct 19 22:01:00 2025 GMT
Not After : Oct 20 22:01:00 2025 GMT
Subject: CN=fccabc7500db58f80464ceed3f3767c57a1e951f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:77:04:b5:73:d1:0e:85:03:f4:22:62:61:
74:76:2a:e7:36:66:f6:73:bf:be:91:e2:03:fb:23:
77:c4:fd:ae:a4:31:ca:fa:51:a9:7a:1d:d6:80:b8:
c2:18:0d:05:4e:af:28:45:49:6c:c2:97:9b:28:c7:
f3:52:31:29:94:b2:fe:00:92:e3:97:ea:fe:b1:9d:
bb:56:0a:7d:af:fa:f1:eb:52:b6:3e:06:5f:cb:6f:
97:81:bf:64:fe:3d:ca:ee:92:34:56:f1:03:47:2b:
ac:12:04:7f:97:19:fa:a0:0a:4a:9b:13:73:38:29:
03:92:49:83:06:42:d0:66:fe:83:b2:62:54:76:f7:
40:8f:2b:5b:c8:9c:1a:cf:c7:2d:d6:19:74:21:c7:
37:3c:e4:b3:1f:52:c2:ce:6e:98:c6:3c:ef:5a:72:
0f:d4:0f:8d:10:27:86:71:a5:7c:d3:9a:a4:cb:06:
86:2e:11:b0:d4:51:d5:99:5c:96:56:a5:f9:1e:5c:
60:77:8a:9e:94:7d:57:66:e5:f4:99:57:98:65:aa:
18:66:fd:50:ce:21:4d:4b:41:ad:c2:be:ac:0f:9e:
af:6c:ff:c6:86:e2:6c:74:98:4c:64:65:43:29:7b:
77:8a:2e:c8:d5:88:89:91:8a:9a:cd:82:65:e5:b3:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CA:BC:75:00:DB:58:F8:04:64:CE:ED:3F:37:67:C5:7A:1E:95:1F
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a5:a2:dd:98:ee:ec:59:cf:55:e0:e5:e2:8a:fc:58:21:ad:
ea:6e:70:2f:49:c1:3d:4b:18:d6:e2:d8:47:52:91:57:5e:97:
d1:ff:f1:96:82:5a:d5:27:0f:35:dc:7c:31:ff:df:a4:f1:48:
64:42:f0:dd:33:0e:71:f0:ac:d6:26:15:7f:28:0c:02:e7:ce:
fa:f4:e7:1c:b2:95:0c:07:5b:32:88:81:4d:09:43:96:46:25:
a9:4d:88:83:7c:f6:6e:48:9c:98:29:58:d8:b2:58:64:46:1c:
ce:0f:da:db:9b:ed:f9:e2:e2:0f:5d:e1:d6:e2:a2:46:5e:49:
37:df:da:06:05:0a:af:23:2c:35:f8:d4:9d:e6:a7:c5:c7:00:
7b:d4:9d:93:63:32:a5:92:81:3e:d8:a0:66:e9:25:72:89:70:
36:a6:b7:fd:75:a8:d5:7d:73:9e:d4:94:37:e0:7b:40:c6:22:
78:ea:72:39:4d:29:7b:73:0a:fa:b5:da:4a:fd:74:c9:43:47:
e2:ce:ab:ff:a1:c4:c5:d8:b2:49:e2:51:58:a6:0f:0e:68:17:
81:5f:8b:54:5d:5e:6e:af:a2:2c:3c:7c:1d:26:84:c9:0f:ef:
1d:a9:85:bd:5c:56:72:7c:ac:40:ba:46:2b:06:71:f4:97:e2:
af:9f:c5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:49 2025 by rpki-client