Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
File: cs3rVmQuM1iXcef9pxu3HgF_nZY.mft (raw, json)
Hash identifier: nfpKpy+QHp53QWMZtR+7pDFklH6uQlQm/Jc39wCmtf4=
Subject key identifier: 77:C3:1A:2D:C0:7F:60:6F:90:6B:E0:24:69:8B:A5:9B:B8:6D:D0:3E
Authority key identifier: 72:CD:EB:56:64:2E:33:58:97:71:E7:FD:A7:1B:B7:1E:01:7F:9D:96
Certificate issuer: /CN=72cdeb56642e33589771e7fda71bb71e017f9d96
Certificate serial: 0199FCFD2BA1630770B3396F40ED7565B510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
Manifest number: 0C00
Signing time: Sun 19 Oct 2025 15:01:14 +0000
Manifest this update: Sun 19 Oct 2025 15:01:14 +0000
Manifest next update: Mon 20 Oct 2025 15:01:14 +0000
Files and hashes: 1: cs3rVmQuM1iXcef9pxu3HgF_nZY.crl (hash: pa0RvKlkvhPph+H3G8SBj+EhppTJDiXXCOBr2KqvxM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:2b:a1:63:07:70:b3:39:6f:40:ed:75:65:b5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cdeb56642e33589771e7fda71bb71e017f9d96
Validity
Not Before: Oct 19 15:01:14 2025 GMT
Not After : Oct 20 15:01:14 2025 GMT
Subject: CN=77c31a2dc07f606f906be024698ba59bb86dd03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:bf:9d:99:a8:65:6b:25:94:cd:04:2e:9e:
c9:44:a0:8a:38:79:4a:5e:ec:31:b5:f5:bf:fe:f5:
17:c7:8d:5f:96:f4:ee:05:27:0b:b7:db:ab:82:f7:
c4:7f:60:db:0a:ba:0b:66:e8:53:10:22:9b:5a:d4:
50:c9:8f:1c:8a:e6:b2:50:54:90:6a:38:28:5f:a8:
36:38:0a:33:98:59:02:8a:b7:af:f7:6d:28:71:36:
da:64:e3:d8:ec:52:20:78:a5:15:17:e5:af:16:0f:
3e:a8:69:ad:cf:96:fa:00:f0:81:19:9e:a0:1c:db:
c8:46:e8:5a:77:97:b4:5d:14:2f:1e:ff:f9:12:47:
d1:31:ec:35:aa:c5:09:ed:49:ba:b8:7a:78:2e:21:
34:dc:3b:8e:54:3b:f7:f1:80:32:bd:23:46:9a:13:
35:de:4a:4d:fa:9f:37:74:56:9c:23:d7:5e:85:a5:
8f:70:db:b1:a1:4b:9e:1b:03:03:8b:eb:9d:26:8b:
33:db:37:45:04:c8:a4:fc:07:3d:d2:07:39:4d:6e:
f8:b9:f5:67:f0:6f:c5:57:be:7f:e5:0d:45:c1:ec:
a2:5f:0d:04:83:ab:63:a3:5d:30:b4:c5:db:9b:6d:
00:df:33:5c:31:c7:99:f7:81:9a:07:8a:a0:11:5c:
36:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C3:1A:2D:C0:7F:60:6F:90:6B:E0:24:69:8B:A5:9B:B8:6D:D0:3E
X509v3 Authority Key Identifier:
keyid:72:CD:EB:56:64:2E:33:58:97:71:E7:FD:A7:1B:B7:1E:01:7F:9D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:01:6a:a8:f5:5b:fa:c6:e4:6f:db:19:8d:9d:28:aa:09:22:
fa:60:d7:fe:33:ac:7e:0d:27:5e:72:90:ea:07:23:e1:b3:d6:
64:19:57:1b:9a:61:ee:4c:c3:8a:c6:0c:a3:a9:23:aa:65:4d:
29:17:74:bc:4c:ba:76:ed:59:2b:07:94:8e:3c:a0:86:47:80:
fe:c1:9d:8e:ac:94:cb:dd:d3:4d:76:66:19:9e:83:11:c0:13:
27:ab:71:a9:a8:e9:85:a4:6f:06:29:b5:8f:fa:ea:ef:bd:24:
84:7a:08:f5:3a:1f:0f:d4:ff:79:a7:88:73:46:08:3c:11:e5:
c4:eb:db:5f:4e:5b:4e:4c:da:69:d6:87:e4:06:f3:ff:75:3a:
5d:87:e9:b8:9e:c8:d9:69:aa:dc:60:7d:e9:85:be:05:0d:bc:
31:e5:b4:96:c3:e0:4b:55:0a:aa:f0:e7:a9:60:50:80:7b:f8:
a8:86:cb:60:02:39:24:aa:0e:32:7a:53:e6:5f:d1:e2:d1:23:
f5:94:73:4f:f4:fe:6a:5d:5f:9d:f8:a9:fa:43:0d:6f:7e:ef:
be:ec:29:4d:cf:dd:27:19:22:98:95:bd:a9:e5:91:3d:11:95:
82:a3:97:75:6a:04:5a:f5:87:a0:b0:29:67:d1:19:e6:9c:75:
6f:dd:cc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:01 2025 by rpki-client