Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
File: 3tvumMupuOYloRR7s7VRl9LQoFc.mft (raw, json)
Hash identifier: dBu0ph+TK3U3HoJIOmvbnAd+VAlkbVP0E75/Wf+uZ5g=
Subject key identifier: BD:E9:0B:0B:84:22:17:27:C6:4E:EE:3E:2E:AE:FA:C2:A6:58:DC:65
Authority key identifier: DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57
Certificate issuer: /CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057
Certificate serial: 0199FBEBC6869E61A8AB62F65F88E2FD67B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
Manifest number: 074A
Signing time: Sun 19 Oct 2025 10:02:36 +0000
Manifest this update: Sun 19 Oct 2025 10:02:36 +0000
Manifest next update: Mon 20 Oct 2025 10:02:36 +0000
Files and hashes: 1: 3tvumMupuOYloRR7s7VRl9LQoFc.crl (hash: CO2Bf5rpDYNVGnY8w2ojmNijTtsPwZWLf/CAyy45TF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c6:86:9e:61:a8:ab:62:f6:5f:88:e2:fd:67:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057
Validity
Not Before: Oct 19 10:02:36 2025 GMT
Not After : Oct 20 10:02:36 2025 GMT
Subject: CN=bde90b0b84221727c64eee3e2eaefac2a658dc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:28:1e:09:0c:49:aa:f5:3e:71:b9:40:ac:
ed:17:9c:b2:58:b5:47:3d:ed:80:c1:2d:b9:fe:93:
7e:e6:c5:48:e2:59:bd:86:4a:71:b1:30:f4:48:2e:
07:77:4d:81:4b:46:fa:52:2e:81:1b:16:ec:04:3b:
12:c6:7b:14:79:75:0b:df:41:5a:4f:3e:c5:b0:4b:
61:dc:4a:72:81:60:25:ca:8c:04:87:ee:9b:22:cb:
53:46:b6:78:64:d2:91:d4:ca:9b:2c:af:cf:ef:3a:
32:94:6e:8f:6c:aa:b6:d1:f2:6d:81:74:76:cc:df:
6a:d2:a1:48:98:6f:3c:7b:71:f5:ad:3a:08:29:d3:
5a:82:42:db:77:22:af:e8:d9:55:90:56:35:e9:f7:
53:e1:08:cb:1e:7a:3d:54:29:85:c0:3b:3b:00:4b:
fd:0c:54:f4:2f:b4:8a:62:db:85:1d:11:e9:c0:ad:
f8:b4:b5:f2:5d:e4:d0:0b:6e:92:95:31:bf:a3:c4:
0e:6c:08:ee:b7:1d:e4:f3:86:3d:47:98:05:73:96:
ea:55:4c:1a:42:10:cf:a4:32:e5:54:fa:10:1a:49:
c6:86:54:37:90:fa:3e:81:33:18:e2:3a:65:80:78:
5c:47:f4:f1:f9:11:3b:25:1d:f9:ac:6f:8d:37:d6:
ca:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E9:0B:0B:84:22:17:27:C6:4E:EE:3E:2E:AE:FA:C2:A6:58:DC:65
X509v3 Authority Key Identifier:
keyid:DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ed:50:af:ce:c5:34:16:b4:c6:9e:64:33:07:3f:72:d9:f7:
65:33:f4:9f:dd:cd:97:06:96:62:e1:22:cc:b5:eb:8c:c5:c8:
85:44:0d:e2:89:9c:ed:de:7b:86:0a:7f:b3:67:7e:11:a5:8e:
ce:90:3e:a6:bd:8c:14:be:e2:c6:56:52:5f:30:56:d5:41:04:
a1:ac:2c:b7:03:5d:0c:12:40:8c:b1:e6:6a:7a:8e:c3:84:f0:
eb:d6:bb:77:a3:39:ec:81:7b:17:d7:55:09:3b:5b:c5:18:07:
c5:6c:e3:62:94:5d:60:53:5d:7f:ab:60:2b:f1:07:3e:fc:e7:
d9:0b:95:f2:c3:fb:42:67:03:68:17:5c:90:e2:8d:66:11:22:
8c:d0:99:3a:62:7d:42:d0:aa:6d:fb:d3:36:3b:af:91:f9:3a:
67:8f:b6:28:e6:8f:8c:c4:96:14:2e:d2:9a:f7:aa:cd:fa:9c:
51:91:a6:e8:fa:70:58:ba:a8:12:3e:c7:c9:b0:6c:1c:bc:bf:
4e:41:50:dd:0a:6f:68:8c:f6:e1:c5:a6:8c:05:86:2f:4c:6b:
e5:cb:a0:45:82:bc:b7:82:d3:a0:be:3f:b2:23:c9:ac:e5:c4:
76:a4:5b:cd:70:72:4f:ae:99:61:9b:4d:bc:91:59:2d:fb:05:
70:c9:dc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:31 2025 by rpki-client