Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
File: 3DU3KrVODfO_UU1fCMpS5De9kaQ.mft (raw, json)
Hash identifier: Cz66/GbexoC8XuNhhJwfISFid8ijx3jyYPxnFfR4xkQ=
Subject key identifier: A1:B2:4D:83:89:02:62:16:1E:0A:A8:91:DA:86:E6:15:8D:F6:8F:41
Authority key identifier: DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
Certificate issuer: /CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Certificate serial: 0199FB7CC7DB489324876672AA0BD3E6F7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
Manifest number: 0633
Signing time: Sun 19 Oct 2025 08:01:22 +0000
Manifest this update: Sun 19 Oct 2025 08:01:22 +0000
Manifest next update: Mon 20 Oct 2025 08:01:22 +0000
Files and hashes: 1: 3DU3KrVODfO_UU1fCMpS5De9kaQ.crl (hash: VHgR80VA3PbgxNuD9xJV+nNglxS7OQB2SX3XIXfpm9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c7:db:48:93:24:87:66:72:aa:0b:d3:e6:f7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Validity
Not Before: Oct 19 08:01:22 2025 GMT
Not After : Oct 20 08:01:22 2025 GMT
Subject: CN=a1b24d83890262161e0aa891da86e6158df68f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:c2:18:80:68:f7:30:fa:6a:83:ba:47:f8:
8e:ee:ef:72:86:f3:6a:16:3a:e4:29:94:dc:18:3c:
c1:8e:3a:6d:b7:d0:fa:cc:38:63:aa:35:7b:1b:f6:
de:3e:6c:8c:df:94:56:1f:38:42:6c:1d:19:d0:dc:
52:79:de:5c:1e:95:6e:5a:36:61:23:e8:b7:2c:f8:
31:22:3f:3c:e1:c0:38:27:f0:57:6d:cf:70:aa:88:
68:57:89:17:1b:21:81:a9:2a:b0:75:62:b9:8b:eb:
18:d9:bf:87:33:96:4b:f1:d9:c1:a7:58:b5:71:21:
cc:37:4f:e8:4b:b4:1a:f4:47:76:d2:ff:c3:1a:fc:
82:64:40:8c:f9:c4:3d:dc:d7:66:78:83:b7:7e:af:
ca:47:b9:cc:d9:48:f9:25:a0:aa:b4:d4:b9:8d:b1:
96:be:06:a1:52:fd:01:a2:3c:b7:5e:d9:fb:01:f8:
bb:b0:27:2f:5c:bc:90:b7:ce:17:20:45:6c:35:b4:
25:00:22:b1:b9:2e:6b:a1:87:84:00:0e:f0:5f:4b:
93:9f:e7:13:e1:fa:1f:a1:63:ac:6d:74:6d:85:66:
be:22:76:ed:ee:9d:98:f5:a3:5e:cc:8c:d1:22:87:
44:53:4c:00:e7:74:e5:3b:5b:58:31:a3:b2:8b:1c:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B2:4D:83:89:02:62:16:1E:0A:A8:91:DA:86:E6:15:8D:F6:8F:41
X509v3 Authority Key Identifier:
keyid:DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ff:67:90:54:e0:d7:58:c8:0b:66:37:c9:aa:cf:8f:33:2d:
0c:0e:ca:12:dc:36:8f:d1:cd:1d:97:2d:bf:9a:08:06:f9:73:
c5:ce:cd:f9:a7:67:2f:fe:42:52:50:8a:77:67:3b:d6:ff:ae:
7b:e2:3c:2c:02:f5:71:c4:c4:33:5d:00:cd:ff:74:f0:73:87:
f8:a6:35:e5:76:c9:2d:6e:cd:9f:bd:5e:80:f0:92:9a:49:45:
51:d7:22:e3:40:f8:8d:58:d7:65:8d:f6:9d:a6:d5:a8:d0:dc:
61:71:93:b3:dc:62:f1:21:7f:7d:6b:bc:e4:41:bd:8e:5d:4d:
d6:7d:a2:68:d2:0f:02:79:2b:22:22:14:9c:e0:c9:f8:85:3f:
cb:c7:3b:0c:e3:0d:c3:97:73:e1:37:e6:0d:8d:9b:3f:e6:06:
1b:58:06:5e:fe:7b:19:cc:19:cb:a4:02:ed:1f:47:45:87:ce:
5c:72:63:43:6e:32:50:9e:81:4b:8b:99:4b:66:e6:4a:72:e8:
e5:5b:27:bd:a5:4d:5c:10:d5:be:1f:9d:9c:67:00:ab:07:81:
5d:ec:82:e1:a8:b0:a4:53:71:f6:48:05:a2:69:3a:6d:08:e8:
b6:f8:47:17:0f:d0:9f:9b:0d:6c:3c:83:86:12:0b:5a:d8:b0:
d3:4e:06:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:56 2025 by rpki-client