Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
File: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft (raw, json)
Hash identifier: ubWwBIWsmfOdUFZjl6RjJ3s1Sd+J7gceCN+ytshs0ho=
Subject key identifier: 94:E4:38:18:90:A8:86:71:98:36:26:C4:80:5C:D8:BA:D0:01:03:91
Authority key identifier: DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
Certificate issuer: /CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Certificate serial: 0199FDD8DA3CD3345B7E76A77AE551BC06E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
Manifest number: 165A
Signing time: Sun 19 Oct 2025 19:01:11 +0000
Manifest this update: Sun 19 Oct 2025 19:01:11 +0000
Manifest next update: Mon 20 Oct 2025 19:01:11 +0000
Files and hashes: 1: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl (hash: GdkJ8mve1DhPVE7Ov9QeggE4G9qJ9IififfGCMkeJLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:da:3c:d3:34:5b:7e:76:a7:7a:e5:51:bc:06:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Validity
Not Before: Oct 19 19:01:11 2025 GMT
Not After : Oct 20 19:01:11 2025 GMT
Subject: CN=94e4381890a88671983626c4805cd8bad0010391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:73:9b:07:f9:51:32:17:47:f7:9f:45:3f:
8d:e4:3c:5b:4c:0b:d9:8c:9b:c9:57:55:59:a0:7a:
fe:14:2c:37:f3:b6:1b:64:71:0d:c0:72:63:98:72:
e0:f4:37:5d:cf:9e:2a:85:61:7a:9e:78:2a:57:19:
d7:c4:56:38:b0:57:5f:10:df:f6:17:76:d7:2f:b6:
16:5f:bf:c2:42:1b:e0:85:ff:67:65:38:da:db:ed:
3f:20:d2:11:2f:a1:4f:f9:ff:fc:32:ab:27:a5:4f:
ad:f0:7e:5c:83:65:f1:d4:49:f8:76:2f:25:34:96:
e2:d1:8e:9d:a9:d2:8e:da:24:17:fc:39:45:a1:71:
6b:fe:76:0f:d1:c6:86:dd:4d:a2:2b:d3:e3:b3:e9:
b5:45:0f:85:a1:38:0f:d6:93:7a:d9:0a:6e:0c:38:
d0:53:c3:6d:31:cc:03:c0:e7:c1:a9:c7:fe:5b:b0:
47:94:78:68:4c:56:fb:59:d3:45:04:12:8a:68:71:
94:9a:ba:5f:03:9a:7b:a9:14:7e:b3:d0:7d:ba:05:
dd:65:40:2b:ea:c7:f1:94:99:d1:64:0c:fd:8e:b1:
a5:12:5d:6a:1d:3e:2b:35:3c:d1:75:d0:d0:13:f8:
ff:ad:b1:07:f9:03:48:d8:0e:37:f0:06:70:29:0c:
ff:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E4:38:18:90:A8:86:71:98:36:26:C4:80:5C:D8:BA:D0:01:03:91
X509v3 Authority Key Identifier:
keyid:DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2b:ca:5c:5e:49:c5:5e:39:38:de:89:28:ef:af:b5:d0:61:
d9:1c:9a:3c:8b:52:0a:97:21:cf:5e:87:2e:27:cb:f0:ea:45:
21:45:32:39:93:1b:ae:06:74:88:02:81:83:ba:c4:67:50:7b:
99:4b:fc:a7:94:74:35:80:60:d4:4d:fc:84:ef:7d:5b:8e:52:
a5:57:8f:e9:e4:08:f7:c8:a0:92:19:38:7a:ac:57:45:04:5d:
64:af:c4:8c:aa:4c:a1:32:4a:0b:22:a1:5d:3a:31:8a:69:91:
77:9f:28:f1:0b:06:fa:7b:36:eb:d8:5f:71:cc:67:4c:4a:f5:
08:df:8d:b0:88:1a:ed:3a:62:01:19:6d:69:82:4e:a1:43:c9:
de:06:cb:eb:76:79:a1:29:37:ba:c2:59:f4:ac:12:4e:01:02:
e3:6a:07:e7:6a:a1:cb:ad:fc:fb:47:4c:47:35:21:95:64:8c:
c3:b7:18:fa:e0:32:08:e9:23:53:72:6e:99:88:fb:db:17:e7:
cc:15:1c:a8:70:71:5e:08:29:9e:e6:b4:89:cf:83:82:f3:b2:
78:e2:61:62:6d:8c:08:2f:46:d8:3c:b2:42:8d:2b:44:6f:86:
da:da:0f:ff:9f:18:18:ee:d0:ed:0b:f0:55:14:60:16:8f:f6:
46:f1:13:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:26:48 2025 by rpki-client