Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
File: 04G3AXBRkLnOnRsYRTU4TnHKMWU.mft (raw, json)
Hash identifier: olSsqUjThRlw1oLH0biohLsCeG1iwBY+7t5cWMRVoGQ=
Subject key identifier: 3B:B0:CE:33:FC:D1:81:74:D6:DE:06:70:92:9E:80:BE:4F:2B:B7:3D
Authority key identifier: D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
Certificate issuer: /CN=d381b701705190b9ce9d1b184535384e71ca3165
Certificate serial: 019A4EF4B7108D6A39BF41877CC8D80DA15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:00:51 +0000
Manifest this update: Tue 04 Nov 2025 13:00:51 +0000
Manifest next update: Wed 05 Nov 2025 13:00:51 +0000
Files and hashes: 1: 04G3AXBRkLnOnRsYRTU4TnHKMWU.crl (hash: xvom1TBT41auyL8Nrdy1nQVA02/YZf5vGC6jxfNaB4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:b7:10:8d:6a:39:bf:41:87:7c:c8:d8:0d:a1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d381b701705190b9ce9d1b184535384e71ca3165
Validity
Not Before: Nov 4 13:00:51 2025 GMT
Not After : Nov 5 13:00:51 2025 GMT
Subject: CN=3bb0ce33fcd18174d6de0670929e80be4f2bb73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:31:4b:6f:71:8a:d2:5f:8b:86:c2:06:36:
4f:c3:2f:cf:8c:57:82:e1:64:9d:fc:09:71:38:eb:
72:d6:44:8b:62:8a:dc:56:a9:7f:01:ef:85:78:b2:
d8:00:13:c3:dc:4b:69:03:58:f9:47:63:7b:88:56:
fd:a2:c8:f9:63:19:c7:e0:c0:2c:cb:cb:87:59:a0:
c5:dc:f7:79:34:df:0e:d1:73:bb:5d:a8:20:9f:c0:
4f:c2:7d:a5:d0:7a:2c:2c:d8:29:cc:15:9b:a8:c7:
c9:ce:67:91:b9:e7:f0:cd:da:85:29:e1:d8:63:8e:
f1:25:ed:a9:20:4c:b7:32:ff:6a:49:f7:b2:55:72:
7f:d4:48:87:95:29:4a:aa:74:e1:be:01:c3:14:15:
2b:39:6a:d8:a6:96:6e:3c:df:11:2f:91:d5:e3:dc:
b6:ef:82:b9:53:e1:6b:ed:97:cf:58:da:fb:b3:1f:
6d:7c:41:a2:5b:f7:f6:34:62:0e:b9:b6:82:4b:48:
99:ce:9c:68:45:77:ac:77:c2:36:aa:43:74:cc:86:
4e:08:6a:5d:b6:0a:cf:2b:8a:83:d9:4d:f8:c3:52:
6d:5f:76:cc:48:5d:e6:04:b8:c9:cb:cc:d8:b0:6d:
c3:6c:f4:5d:88:59:c8:fe:9a:d7:ef:55:11:e4:02:
7d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B0:CE:33:FC:D1:81:74:D6:DE:06:70:92:9E:80:BE:4F:2B:B7:3D
X509v3 Authority Key Identifier:
keyid:D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:17:d7:16:ff:25:af:90:58:b3:46:33:d4:75:96:91:7e:25:
ab:fd:fa:df:a9:58:11:fc:24:b6:b3:44:10:21:89:6a:1a:a5:
8b:0d:0b:11:90:7d:5b:f7:f4:61:05:a5:14:42:92:81:03:af:
00:16:77:cb:61:44:0f:c2:c2:23:a0:1d:cb:e6:08:01:dc:72:
80:69:ab:35:65:40:80:ae:7c:ff:19:60:30:52:cf:a2:37:78:
ca:da:f3:5a:6b:3e:ab:7c:65:fa:27:8d:fc:f8:43:ed:7b:a4:
84:60:69:05:e5:00:0f:47:d7:cd:a2:b9:f5:90:3d:61:de:73:
00:d9:80:0e:b2:40:76:46:4a:fd:8f:61:d3:6f:3d:fc:5b:fc:
7e:cd:a5:c9:fa:7c:72:58:48:a5:7a:e7:da:f5:35:80:3e:ba:
c1:dd:b5:38:64:c8:b6:de:1f:76:66:46:5d:af:24:76:f4:55:
ca:6c:18:21:2e:2c:03:63:5f:25:c7:fa:a2:a0:4a:eb:9a:21:
cb:ca:64:1f:e0:52:b5:72:d7:12:dd:f2:c1:85:22:e6:08:59:
10:3b:4d:dd:f2:ad:d4:9b:dc:e2:7b:ea:0f:ed:f7:0e:2f:60:
0e:f4:9f:5f:32:18:8d:24:77:7d:0a:d6:da:bd:5d:61:85:6c:
ce:83:2f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:41 2025 by rpki-client