Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
File: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft (raw, json)
Hash identifier: W/byVhSsxv4ienwaYr4ZGIRYLWSE3VJb6zCtSXG30B8=
Subject key identifier: 11:DE:BD:EA:DB:FF:80:6A:10:29:0E:47:67:AE:72:7B:6D:4F:91:B7
Authority key identifier: DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
Certificate issuer: /CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Certificate serial: 0199FCC67EDD3727F114B3E95AF06E9C066A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
Manifest number: 0FE4
Signing time: Sun 19 Oct 2025 14:01:30 +0000
Manifest this update: Sun 19 Oct 2025 14:01:30 +0000
Manifest next update: Mon 20 Oct 2025 14:01:30 +0000
Files and hashes: 1: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl (hash: LgAnf262wHaVlBDUpoRZfafZYFjvq0RCcHmwC+qeJqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7e:dd:37:27:f1:14:b3:e9:5a:f0:6e:9c:06:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Validity
Not Before: Oct 19 14:01:30 2025 GMT
Not After : Oct 20 14:01:30 2025 GMT
Subject: CN=11debdeadbff806a10290e4767ae727b6d4f91b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:f7:56:55:f4:42:ef:3d:08:c6:31:9a:2d:
1d:bf:1a:18:92:0a:c4:be:02:0b:f2:1c:e7:9e:4d:
bb:e8:d9:49:d8:4a:d8:84:90:ea:8e:c3:df:90:67:
d3:ab:d3:5e:9e:0c:5d:cf:69:b8:80:25:58:72:9f:
d8:d5:ba:76:23:38:a9:a0:f5:2c:f2:33:16:67:0f:
cc:e8:52:0a:65:ce:18:28:79:f4:fc:c0:e1:a4:cb:
97:de:7f:51:bc:0f:61:3e:69:f9:75:58:d3:fa:d2:
61:ae:57:d1:ed:46:e1:90:a7:a1:fc:e0:0f:84:72:
4b:19:af:26:b6:29:c5:22:66:7e:cc:77:96:ba:df:
63:c4:b5:de:7b:2b:5f:fb:d6:52:15:8e:d6:71:21:
d3:4b:62:30:66:a2:c4:3f:a0:23:5e:c7:91:67:c4:
18:e9:b2:7a:99:af:85:44:bc:49:8a:7b:47:69:3d:
a9:3e:86:7b:ef:b2:15:9a:ab:c4:88:af:22:63:1c:
31:70:26:3d:6d:b0:a6:f6:47:bc:bd:56:a6:c0:54:
ba:5c:2f:65:3e:9a:a9:69:ad:12:b8:03:70:54:a9:
1d:f5:7f:01:5c:3f:09:18:27:f2:0e:15:16:85:d3:
10:ad:40:16:94:b8:3c:4d:32:96:f6:1d:1c:02:4f:
5f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DE:BD:EA:DB:FF:80:6A:10:29:0E:47:67:AE:72:7B:6D:4F:91:B7
X509v3 Authority Key Identifier:
keyid:DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:74:5a:a8:bd:16:a1:64:e6:7e:94:27:6e:27:0f:0b:c4:28:
e9:e5:07:1c:5a:07:68:fb:d2:10:cc:79:97:21:85:3d:c2:9d:
bf:b0:69:b8:98:52:47:93:78:d0:8d:40:57:56:87:af:14:a8:
1d:03:32:d8:43:97:7a:de:98:cd:00:90:58:29:b5:13:99:91:
d2:8d:a9:12:da:93:6d:87:ff:a0:97:df:0e:7c:e5:69:48:13:
51:b1:74:f6:b4:fd:21:44:88:6a:3f:b3:23:b9:8d:db:b0:7e:
47:fe:84:04:5c:fe:36:1d:dd:d7:e0:e6:da:bc:50:22:c0:9f:
94:bc:3f:01:e7:ca:d7:ae:9a:48:5d:15:2e:90:ce:8c:95:64:
b3:b1:ef:ad:f8:61:5a:5f:51:55:c7:17:83:eb:9c:39:da:52:
df:a7:56:d9:0b:2d:7c:00:2b:27:cc:7e:e3:93:31:86:ff:fb:
38:9d:aa:63:0e:8d:d4:a9:f1:37:62:9d:a6:61:e1:37:b0:b7:
0f:92:67:86:90:aa:bb:cc:07:3e:be:9b:a1:15:8d:db:58:7c:
c5:3c:e7:d5:bd:df:8d:b5:9a:bd:6a:a2:fa:20:80:d6:3b:dd:
eb:92:1a:83:d4:2d:af:c8:03:e4:e8:cd:85:7e:73:73:07:d7:
f1:57:50:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:51 2025 by rpki-client