Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
File: 3pj4NjKYKX-6uupodyArXEQOWpA.mft (raw, json)
Hash identifier: U+cL0VSK7dOcMAQW1qd6xi5rWC/qv0X545g7FK6xndw=
Subject key identifier: F8:DC:95:27:C6:06:7A:6B:B6:3A:75:89:00:19:E8:7D:E8:A7:29:65
Authority key identifier: DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
Certificate issuer: /CN=de98f8363298297fbabaea6877202b5c440e5a90
Certificate serial: 019A50E3E16993E51903A5F78B9A72618621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
Manifest number: 0D9D
Signing time: Tue 04 Nov 2025 22:01:42 +0000
Manifest this update: Tue 04 Nov 2025 22:01:42 +0000
Manifest next update: Wed 05 Nov 2025 22:01:42 +0000
Files and hashes: 1: 3pj4NjKYKX-6uupodyArXEQOWpA.crl (hash: uVlRMvz4AH/H9RJN/M97DENWeX2vGtRPsmsVhOnkVzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:e1:69:93:e5:19:03:a5:f7:8b:9a:72:61:86:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de98f8363298297fbabaea6877202b5c440e5a90
Validity
Not Before: Nov 4 22:01:42 2025 GMT
Not After : Nov 5 22:01:42 2025 GMT
Subject: CN=f8dc9527c6067a6bb63a75890019e87de8a72965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:1e:06:ed:b3:be:b5:67:f7:8f:95:bc:f6:
c9:6c:a1:3a:d8:e9:e5:9c:50:e4:e6:f5:66:1e:df:
e9:05:e7:8c:f3:a8:00:f3:1d:73:1a:1b:5a:c7:2c:
bc:ba:a4:04:55:9c:c6:4d:f3:e1:00:45:73:33:8e:
a0:a0:b9:e6:4d:8a:c6:02:a6:08:60:e6:4a:a2:81:
1a:53:b1:71:6c:b6:4f:c2:8f:d7:fb:4d:c7:69:1c:
ef:50:5a:ca:15:57:96:10:e9:1a:5d:17:cb:9c:a0:
bd:71:6d:a8:cb:67:73:17:c2:25:e5:2c:ff:1c:5a:
57:af:87:ec:60:fd:07:b2:cb:52:6d:ca:de:3e:77:
45:ff:fd:b8:fe:9d:5a:52:15:ef:8f:6d:9e:f4:09:
4e:60:dc:19:15:97:78:37:56:0f:ef:fd:01:cb:fc:
14:c7:16:ca:70:7e:f8:8b:df:16:f8:4a:34:ec:a9:
68:d3:c9:bf:34:90:a3:0a:04:32:c8:d0:cf:23:6a:
06:f8:03:ed:53:a9:c9:c0:15:ac:cb:cf:83:fe:d9:
80:3f:69:69:f4:33:b2:ac:4e:26:64:93:be:26:5e:
34:00:9c:67:2a:aa:eb:fc:11:fa:d4:fe:2f:9b:67:
b0:d1:10:7e:d2:48:36:69:f4:38:d8:af:55:83:07:
88:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DC:95:27:C6:06:7A:6B:B6:3A:75:89:00:19:E8:7D:E8:A7:29:65
X509v3 Authority Key Identifier:
keyid:DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2a:4c:37:c9:a9:41:e5:af:0d:c2:40:05:3f:75:1a:a3:58:
e5:21:94:c8:71:30:ca:60:8e:04:5d:38:ba:a7:3f:36:1e:df:
11:79:63:b8:f1:1b:86:39:f4:3c:41:69:29:44:6d:1d:fd:e6:
57:2b:22:ff:f1:06:d6:85:09:83:b2:71:7a:d1:00:0e:b0:a0:
f7:82:80:47:1d:01:7c:43:1a:98:5a:41:a5:f7:2d:1f:f2:52:
eb:38:98:49:cf:93:90:ea:29:fa:e2:81:fd:5f:9e:32:fb:c1:
79:7f:e8:04:70:7a:14:35:37:a0:54:6f:01:ef:83:4b:e9:84:
36:37:6e:40:2c:56:6b:70:c7:5d:20:cf:3d:6e:5a:79:80:dd:
54:12:02:e8:7e:3f:92:47:77:d6:f6:4d:d6:fc:f1:19:5b:24:
51:ae:44:ea:8d:36:1e:f6:7b:da:07:b2:3e:97:19:ad:d9:58:
9d:b4:10:ee:34:b6:f0:e4:e4:19:e2:ad:34:24:02:54:00:c6:
cf:b5:ab:28:3a:ad:bf:95:87:d0:19:87:50:19:9f:8a:cb:29:
3a:d7:cf:ae:ed:a9:2d:f9:ee:1a:a3:7b:ef:24:51:b9:4a:14:
8f:5e:6f:ef:97:48:8c:74:ae:44:a9:04:f3:83:3d:fa:6d:4e:
e0:ee:9a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:21:20 2025 by rpki-client