Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
File: 3Mx29__HFoYLOtY56_kdxN1hMAA.mft (raw, json)
Hash identifier: CvfAcRjl9C2sBVhfhpPjztuYYXyS+FZugLtOQBL4w4o=
Subject key identifier: 92:C2:76:0B:F1:A1:3D:39:E3:BB:53:26:27:C3:AF:E2:60:F7:EC:64
Authority key identifier: DC:CC:76:F7:FF:C7:16:86:0B:3A:D6:39:EB:F9:1D:C4:DD:61:30:00
Certificate issuer: /CN=dccc76f7ffc716860b3ad639ebf91dc4dd613000
Certificate serial: 0199FDD8E8D41FF639CCAE75322A9F5F4E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
Manifest number: 0AA6
Signing time: Sun 19 Oct 2025 19:01:14 +0000
Manifest this update: Sun 19 Oct 2025 19:01:14 +0000
Manifest next update: Mon 20 Oct 2025 19:01:14 +0000
Files and hashes: 1: 3Mx29__HFoYLOtY56_kdxN1hMAA.crl (hash: OtK46k9Mj0tYztPOsejeej4x7ID+P/DcT7oWFIvNCWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:e8:d4:1f:f6:39:cc:ae:75:32:2a:9f:5f:4e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccc76f7ffc716860b3ad639ebf91dc4dd613000
Validity
Not Before: Oct 19 19:01:14 2025 GMT
Not After : Oct 20 19:01:14 2025 GMT
Subject: CN=92c2760bf1a13d39e3bb532627c3afe260f7ec64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:50:bf:ca:fb:4a:2f:a8:28:80:65:db:66:02:
99:8d:1d:2f:8a:aa:7f:c4:56:c5:f5:54:9a:fb:00:
4e:0f:b1:1b:5c:1a:81:4e:e7:ce:e3:ae:1f:d1:d8:
47:a2:5c:6a:b7:07:cd:5e:a3:1a:43:b1:a4:33:22:
51:ec:ee:71:29:fb:1a:7b:f7:65:79:8a:d8:15:04:
13:2b:a3:da:48:b3:b0:e9:e4:c0:5a:35:7c:81:93:
8a:44:60:ee:50:12:94:6f:6f:3b:d0:31:1f:fd:d1:
19:22:11:a8:40:88:86:19:b9:6f:8e:d0:f1:92:94:
d3:02:cc:c2:b2:32:ba:2e:2e:12:14:78:0a:7a:b5:
a5:a3:36:e9:18:35:ac:f3:6a:dd:15:de:2a:cd:7e:
7f:ac:e4:a9:b6:de:b7:27:62:84:62:73:1a:35:20:
17:4c:74:13:de:48:d3:72:ac:49:00:78:44:d7:0e:
81:5f:84:ad:c0:49:b3:89:3b:14:1e:3f:0b:64:2d:
01:10:bd:bc:cf:78:39:8c:23:bd:79:d3:59:b6:df:
3d:14:1d:c0:26:16:93:05:60:0a:e7:31:37:2f:93:
4f:4d:2f:c1:46:ff:20:93:6d:34:f8:2c:e0:1a:72:
ed:82:03:52:0c:9a:a9:10:1b:cd:c8:d4:0d:74:f0:
4f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C2:76:0B:F1:A1:3D:39:E3:BB:53:26:27:C3:AF:E2:60:F7:EC:64
X509v3 Authority Key Identifier:
keyid:DC:CC:76:F7:FF:C7:16:86:0B:3A:D6:39:EB:F9:1D:C4:DD:61:30:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a5:f7:1d:16:f4:31:b3:2c:b4:d4:ac:b6:b9:3f:37:6d:d6:
68:45:ec:1e:29:92:18:72:90:a0:a5:9a:b7:fa:22:a9:b2:27:
8e:29:c1:fa:3d:b3:ba:04:0c:1f:f5:e9:2c:98:42:3b:35:8f:
03:e2:f1:f6:ec:bc:7e:1f:08:23:b1:49:9c:ae:9f:e9:64:8b:
91:b3:e6:bc:ef:f4:15:b5:25:eb:1d:ff:ac:50:82:1a:57:d1:
f2:d6:5a:a2:ac:db:cb:72:fb:cd:68:00:e3:2b:2e:d5:db:ec:
d3:e7:31:62:5e:b2:19:00:41:6e:5c:5a:62:57:ac:d1:a9:45:
a6:45:ad:7a:bd:d6:3e:0a:33:e1:07:89:4d:93:75:02:f2:1a:
92:56:be:ee:4b:0b:2f:2e:19:d2:66:6d:a3:57:fa:2b:50:a9:
ae:01:05:d7:3e:ca:bc:fc:d2:99:90:c0:e3:3d:cc:2b:1b:49:
e3:8e:32:43:11:45:25:a4:54:ba:7a:a6:2a:bc:5e:9e:61:90:
57:8f:38:b7:5b:d5:33:b6:71:ea:a3:1c:69:2a:5a:e0:13:a9:
d4:92:0f:1f:dc:94:07:d0:ac:cd:f4:1a:3d:53:ba:09:18:68:
f1:a7:78:01:2e:e8:cb:55:e3:9a:5b:22:14:e7:14:ab:c9:71:
3c:2e:6f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:14 2025 by rpki-client