Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier: sN4W5dmhvIoknKD7Jhvyr8AdjEbBKweFNHlt86gx48s=
Subject key identifier: 25:36:6B:7A:78:88:0E:0A:53:00:6B:A7:1F:A7:86:6D:58:FC:61:67
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer: /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial: 0199FBEBC1C97AF1879EB245A88FE4209AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:35 +0000
Manifest this update: Sun 19 Oct 2025 10:02:35 +0000
Manifest next update: Mon 20 Oct 2025 10:02:35 +0000
Files and hashes: 1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: zkwbH71irGv/QEg+dfnnIDJiUfd96CJsoxpfHGY6mqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c1:c9:7a:f1:87:9e:b2:45:a8:8f:e4:20:9a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Validity
Not Before: Oct 19 10:02:35 2025 GMT
Not After : Oct 20 10:02:35 2025 GMT
Subject: CN=25366b7a78880e0a53006ba71fa7866d58fc6167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:b4:87:b4:2c:a5:9c:01:fc:bc:e1:33:a1:
9d:ca:b6:56:28:7c:cd:39:f0:c5:4a:4f:ed:d0:8a:
18:85:a7:1e:f4:26:8a:ee:a4:98:f9:d0:02:07:25:
36:68:8c:1f:95:6f:ad:61:6c:75:98:7c:64:5a:75:
c7:80:b0:92:75:1e:86:17:c4:09:3e:b1:77:93:c0:
bc:14:74:77:6e:9c:c5:d0:34:4a:4b:35:1b:b2:c4:
06:9c:9c:ac:73:44:e2:7c:4f:23:53:c1:50:29:43:
a1:9f:97:cb:09:16:92:1d:3d:26:06:d4:21:17:47:
39:03:d5:bc:df:d6:8c:31:52:21:8a:f6:37:53:82:
6c:86:f0:04:70:3d:86:d2:2e:4a:7c:67:37:c2:85:
c6:46:b9:ad:a9:a7:d6:08:40:e2:a7:7b:6d:17:6d:
ef:56:4c:54:44:30:23:d5:68:24:50:e3:54:f1:91:
75:64:05:9d:d9:a1:ec:b6:e3:02:88:a3:42:22:99:
4d:9e:dd:40:1a:ff:86:ed:c4:75:a9:32:9b:51:89:
a1:7a:3a:8a:44:36:aa:96:7d:52:c8:2f:07:65:5d:
4c:fd:0e:2a:29:05:17:71:82:08:30:19:4f:10:d5:
dc:2f:f5:5d:0e:b1:b4:42:65:8c:eb:91:b9:60:b5:
b7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:36:6B:7A:78:88:0E:0A:53:00:6B:A7:1F:A7:86:6D:58:FC:61:67
X509v3 Authority Key Identifier:
keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:27:c3:06:be:ab:31:6f:c4:a4:0c:87:2c:be:c8:12:af:cc:
5e:06:70:3b:6a:6f:28:84:02:91:44:ad:45:6c:fb:18:94:5f:
9c:b6:71:b6:9e:65:b6:66:eb:31:75:24:e9:b5:3a:f4:40:1d:
34:a9:66:ca:f3:d0:cb:38:76:11:a7:4d:17:dc:eb:a7:12:9e:
b5:3c:04:aa:5e:d3:0c:63:5b:13:ac:6a:b5:e5:87:72:fc:9c:
7e:cc:06:1e:5d:4d:18:fa:4f:dc:57:ab:f8:36:dc:9b:fb:f9:
ae:59:74:03:8c:c7:cb:81:68:e0:2d:a4:e1:b4:58:e6:bf:28:
e2:fd:f1:2b:6c:d1:53:64:1c:f9:b5:e8:4e:3b:12:2f:f0:99:
3b:11:e5:4e:e6:8a:95:6a:d5:b6:05:59:83:07:42:0e:0a:e9:
6a:2c:9d:1f:eb:08:73:58:80:98:f0:6a:05:22:0e:09:ef:aa:
0a:c8:93:65:42:53:0e:b7:46:48:d5:f0:64:2f:2f:be:15:8e:
ae:a1:91:0e:88:4a:0c:3c:33:f7:88:69:61:7c:a9:2d:c0:a1:
49:45:5c:42:ca:af:39:41:6f:27:46:41:23:6a:f4:8b:0b:e3:
ee:a9:b5:92:dc:36:f8:a2:02:81:91:ec:63:74:d8:58:ac:9e:
cc:f4:2c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:16 2025 by rpki-client