Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
File: db3TijiDJA5GxLGsi7-DF96P-IU.mft (raw, json)
Hash identifier: dFzsCxcJgQtrglf9/Cg2flR5kpnydQmKxStEzr6yes8=
Subject key identifier: F8:0A:10:0C:CD:84:CF:DC:41:8F:40:AD:CD:30:C3:4E:F8:4E:24:FC
Authority key identifier: 75:BD:D3:8A:38:83:24:0E:46:C4:B1:AC:8B:BF:83:17:DE:8F:F8:85
Certificate issuer: /CN=75bdd38a3883240e46c4b1ac8bbf8317de8ff885
Certificate serial: 0199FB45C8892F40028F4A189A22460EE306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/db3TijiDJA5GxLGsi7-DF96P-IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
Manifest number: 13EE
Signing time: Sun 19 Oct 2025 07:01:18 +0000
Manifest this update: Sun 19 Oct 2025 07:01:18 +0000
Manifest next update: Mon 20 Oct 2025 07:01:18 +0000
Files and hashes: 1: db3TijiDJA5GxLGsi7-DF96P-IU.crl (hash: cYtKj25IeOr52DOD8DpJm0jc4e3dUGUm5rwvae/mttY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/db3TijiDJA5GxLGsi7-DF96P-IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c8:89:2f:40:02:8f:4a:18:9a:22:46:0e:e3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bdd38a3883240e46c4b1ac8bbf8317de8ff885
Validity
Not Before: Oct 19 07:01:18 2025 GMT
Not After : Oct 20 07:01:18 2025 GMT
Subject: CN=f80a100ccd84cfdc418f40adcd30c34ef84e24fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:09:7b:00:57:48:50:e0:a0:a7:69:ce:8e:
b2:6b:5f:99:bb:21:08:bb:a7:05:89:21:b7:50:52:
06:84:4f:5c:6d:69:10:7a:b5:aa:76:48:c2:59:85:
17:35:b7:41:9c:23:83:37:bc:c3:27:0e:e4:55:75:
86:e8:c7:4e:3d:15:c7:83:41:ef:71:39:f0:ea:bc:
ba:23:e8:3c:28:ba:9c:16:62:c3:4d:56:30:41:9a:
60:61:60:f9:f9:49:8a:ff:57:5c:eb:08:a5:97:17:
33:7e:81:d5:39:b2:e4:dd:d2:f5:5b:c3:9b:db:55:
78:1f:bf:3d:f1:12:d8:b8:ff:56:26:35:ee:98:1f:
89:5b:79:98:83:17:3e:22:23:6f:31:ff:8f:d7:3a:
1b:dd:ab:17:c8:b6:da:e6:74:e3:93:88:92:fc:e7:
43:4b:02:a4:1e:14:fe:63:00:75:54:e4:be:87:55:
19:00:03:33:07:37:51:45:02:75:67:84:76:fd:03:
bb:ce:4e:37:50:e2:7c:1e:80:b4:c1:8e:cd:02:db:
b5:12:f3:f3:fa:8d:48:74:28:ce:dc:36:f9:ea:4a:
91:c0:bd:8a:3b:ae:13:69:cf:97:b0:a9:70:09:66:
09:26:2d:7e:91:22:36:78:9b:01:69:96:5a:49:9c:
97:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0A:10:0C:CD:84:CF:DC:41:8F:40:AD:CD:30:C3:4E:F8:4E:24:FC
X509v3 Authority Key Identifier:
keyid:75:BD:D3:8A:38:83:24:0E:46:C4:B1:AC:8B:BF:83:17:DE:8F:F8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/db3TijiDJA5GxLGsi7-DF96P-IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:75:ea:73:c6:d3:93:f9:a3:8f:be:04:1c:83:8b:a9:52:be:
66:bf:78:34:0f:f1:b5:19:c7:47:13:53:9c:4c:9d:37:fb:31:
9a:f5:e1:13:c9:c8:b0:a7:51:49:ce:7c:c2:36:18:10:7f:4f:
ee:c0:27:25:64:d8:3b:33:35:b3:66:0b:25:a1:7e:dd:64:47:
3f:27:37:a5:06:78:ba:7a:d2:04:45:2f:85:a6:ef:b0:aa:51:
8a:71:e8:6d:07:74:36:fa:9b:17:1f:65:6e:f8:a1:9f:18:f3:
37:e7:69:ff:20:6a:bf:49:2e:61:d3:ce:8d:f5:f6:08:75:f9:
0a:31:d7:f1:34:4b:a5:80:de:fe:03:53:35:99:9a:6f:d1:df:
15:64:44:34:9a:17:fd:bb:57:a6:ab:96:35:5a:a5:f8:ef:36:
b0:b4:d4:c4:0d:91:55:6a:48:fa:39:4a:2b:bf:a1:3f:b7:4c:
ce:ee:a5:5c:57:b9:7a:dc:34:c0:b8:7e:a2:aa:4a:f6:4c:a5:
92:b7:79:e0:b0:e2:86:f8:60:f8:02:2e:07:05:32:c3:d1:d2:
10:5c:6d:65:76:f2:94:48:2f:fa:b9:2a:53:62:7f:76:f9:63:
de:e2:ee:c6:65:f9:49:e9:df:9b:36:e6:70:23:5f:c3:12:2b:
fd:73:39:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:51:36 2025 by rpki-client