Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
File: t3CHf-B99JohaBSt5wHQh7EWk7Q.mft (raw, json)
Hash identifier: 9PbC5W5rOUVQi5myP5STw67Q9guyFnFwlksa22vOY9Q=
Subject key identifier: 6C:F8:4A:53:C9:08:E5:07:35:FC:99:D4:A3:C8:A9:15:5A:9B:22:4E
Authority key identifier: B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
Certificate issuer: /CN=b770877fe07df49a216814ade701d087b11693b4
Certificate serial: 0199FC8F264EC32A5461FF5592A3262288DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
Manifest number: 0527
Signing time: Sun 19 Oct 2025 13:01:03 +0000
Manifest this update: Sun 19 Oct 2025 13:01:03 +0000
Manifest next update: Mon 20 Oct 2025 13:01:03 +0000
Files and hashes: 1: t3CHf-B99JohaBSt5wHQh7EWk7Q.crl (hash: bkE1j2LiX4Up0ekWJLWSJPX8+j0BFopbCrWJxh7DUog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:26:4e:c3:2a:54:61:ff:55:92:a3:26:22:88:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b770877fe07df49a216814ade701d087b11693b4
Validity
Not Before: Oct 19 13:01:03 2025 GMT
Not After : Oct 20 13:01:03 2025 GMT
Subject: CN=6cf84a53c908e50735fc99d4a3c8a9155a9b224e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6a:62:80:8d:a3:58:f1:fe:32:75:33:33:35:
13:61:20:e5:85:08:9d:8a:fb:e4:19:82:a9:6c:3f:
1e:fa:7c:f8:b6:89:25:ed:e1:44:fe:a8:bb:fc:81:
70:52:59:90:d6:8c:a9:0e:34:d5:6e:90:af:35:fa:
74:9a:6f:bf:89:1f:75:5b:c9:66:18:e0:5b:7a:55:
9e:e8:d1:c1:88:cc:42:95:97:79:b8:84:42:fb:47:
8c:f5:9a:46:af:9d:59:36:9a:da:16:72:7f:19:1c:
ea:0c:98:bf:f0:d4:92:a4:25:8f:c9:88:c5:9f:5d:
94:59:62:70:b7:0d:57:2f:60:88:cb:82:4d:86:87:
48:de:f7:37:83:5a:37:ba:5a:21:a4:bd:d2:d3:e8:
b8:59:92:2f:3d:a9:27:02:61:43:c9:5c:47:7d:90:
89:8d:bf:15:bf:9e:81:db:00:a0:bd:4d:14:9f:9a:
fd:c9:87:13:20:fd:ef:73:07:16:af:44:db:23:54:
61:57:3f:71:38:93:7d:6d:50:41:38:47:2b:48:1f:
70:f9:81:42:2e:2a:c5:0e:4a:06:c2:68:1a:2f:77:
95:a2:20:17:16:ca:b0:13:08:55:51:87:3d:a0:11:
68:a8:16:63:5d:18:9b:36:41:a5:e6:75:f2:ff:56:
10:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F8:4A:53:C9:08:E5:07:35:FC:99:D4:A3:C8:A9:15:5A:9B:22:4E
X509v3 Authority Key Identifier:
keyid:B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:69:c6:8c:0e:82:33:ad:88:87:0a:c2:d9:28:39:81:f3:99:
0d:a4:2f:84:27:92:61:37:26:62:da:b8:8d:64:a9:58:6f:7a:
70:f2:cb:0b:98:f8:4e:0d:95:23:1f:c8:65:4f:f2:8c:b2:7d:
32:68:12:f3:5d:65:60:4f:99:a6:f8:9d:68:13:a4:be:28:7f:
e8:dc:ff:3c:cb:88:dc:68:bd:13:fc:ba:a6:86:4c:b0:8b:64:
f2:d6:0d:69:d6:f8:3a:18:e6:b7:67:3c:ea:25:f9:47:59:f2:
bb:95:a4:d5:16:7d:75:f2:24:c8:d0:24:d0:80:f4:eb:a9:ee:
cb:24:2c:a6:d8:46:a6:14:dd:f2:c4:c5:40:1c:bf:e9:8e:d5:
b5:79:16:d8:cd:b4:92:4b:14:1b:30:88:74:27:75:a9:a3:36:
dd:31:a8:b1:d8:ff:13:04:f7:a0:0f:57:31:d8:f4:5a:96:53:
7b:58:32:b6:94:21:f6:a8:04:24:34:e3:e8:fd:cf:65:f3:7c:
f6:36:da:80:c9:1e:77:db:3d:ff:14:f5:22:03:87:46:c8:21:
11:7f:68:0f:8a:bb:16:70:c1:14:c5:4b:f8:a9:51:ee:79:61:
4b:3e:cd:ec:f6:a0:da:d9:95:ec:35:03:b7:cf:e9:a1:65:f1:
dc:1f:dd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:35 2025 by rpki-client