Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier: ytXId/JQfFQBgLdLDCfUKSalGuhoCCOBG2rmYCuEOXU=
Subject key identifier: 20:D8:E4:44:E6:F9:3B:36:89:35:C6:B1:C5:B1:C2:52:9F:E1:8B:5F
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial: 019A4EF52F650F51FDB561DC9C97F84645F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number: 0F28
Signing time: Tue 04 Nov 2025 13:01:22 +0000
Manifest this update: Tue 04 Nov 2025 13:01:22 +0000
Manifest next update: Wed 05 Nov 2025 13:01:22 +0000
Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: G7aGyRQLq0i8KqAU9Y7exovEhxDrNDfG/2NGA2YwWnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:2f:65:0f:51:fd:b5:61:dc:9c:97:f8:46:45:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Validity
Not Before: Nov 4 13:01:22 2025 GMT
Not After : Nov 5 13:01:22 2025 GMT
Subject: CN=20d8e444e6f93b368935c6b1c5b1c2529fe18b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:40:5f:5d:27:16:60:86:32:81:8a:52:33:89:
04:4e:3a:06:cb:95:ad:57:76:c3:68:7e:8e:b3:14:
93:99:96:c4:8d:00:54:dc:18:6a:66:66:ff:7a:d8:
57:d0:25:86:a2:d0:69:e3:5a:af:0f:72:d1:43:25:
ce:a3:5a:39:4a:7e:fa:24:45:e6:04:c3:7c:84:f8:
1b:b3:e6:98:4b:fa:e2:e4:63:a4:0a:92:37:8c:e7:
a3:50:86:9a:bf:18:93:8d:79:9b:53:a6:ac:e2:4c:
c8:70:37:20:a3:73:32:57:d3:fa:64:a8:d6:fb:86:
38:b2:7e:73:09:ca:27:c8:9d:dd:9e:76:ad:43:bf:
7e:8c:fb:dd:1a:6e:a9:e8:21:bd:cd:4b:da:8a:f5:
8f:4f:7b:ec:47:f2:a1:0e:ce:c5:dd:2e:49:8b:3d:
2a:7d:9f:a0:57:41:36:8e:db:aa:b3:4c:97:c5:eb:
52:6b:da:98:e4:dd:9f:bd:64:1e:ea:b4:88:dc:d4:
87:9f:0e:af:3f:b6:10:ca:1c:09:55:59:87:0a:c8:
27:b4:e1:e4:fe:d1:9f:f2:b7:1b:6d:97:4b:ee:7a:
56:c1:ba:01:6d:dd:0a:55:7e:98:e2:ed:dc:bd:66:
9b:df:60:98:2b:d0:1e:5f:8f:8d:7c:bc:c3:48:d5:
47:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D8:E4:44:E6:F9:3B:36:89:35:C6:B1:C5:B1:C2:52:9F:E1:8B:5F
X509v3 Authority Key Identifier:
keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:14:6c:b9:9b:62:fd:0f:6c:4f:28:92:ba:d3:e6:e1:d4:9a:
0f:f0:2f:9c:05:80:07:91:87:93:02:72:03:78:46:c9:fa:c4:
3c:4d:7f:a9:13:56:f5:a4:81:c0:ac:01:ac:49:b8:76:2c:86:
b3:47:70:20:f1:69:90:c4:b5:11:4a:74:a7:7b:88:b2:2a:ac:
40:d0:cd:00:cf:80:ba:b0:dc:6a:54:21:a7:24:ed:61:54:98:
25:97:d3:81:11:92:4b:84:72:f7:d8:90:d3:09:b1:05:71:80:
34:ab:48:c8:e0:28:c3:83:51:46:39:fc:d9:1c:ad:e0:09:22:
c1:be:34:2c:44:31:1e:52:67:38:10:78:15:63:3c:d2:e3:d0:
73:80:df:66:9f:7f:a7:c0:c8:4a:ee:3d:c4:82:8b:b5:f9:b0:
bc:be:2a:d5:15:a4:93:d7:11:89:f5:f6:d0:71:60:e3:23:d6:
40:ef:a2:62:2f:9e:fd:f7:87:a8:05:83:76:da:2b:f3:3a:69:
97:92:19:2a:3e:42:c2:ef:57:2e:f8:15:30:bf:14:a3:df:ca:
d9:ea:79:43:ea:4f:0c:73:b8:9b:07:ef:67:b2:45:52:19:3d:
98:23:30:6a:07:2a:4b:51:e9:3e:32:4d:f3:f9:ea:6f:02:e7:
47:41:c3:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9S9lD1H9tWHcnJf4RkX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZjhhYjVmNzRkYzkwZTlmZmJhOGQ0Mjk4OGVkNWE3NzQ4
YzFkMDUwHhcNMjUxMTA0MTMwMTIyWhcNMjUxMTA1MTMwMTIyWjAzMTEwLwYDVQQD
EygyMGQ4ZTQ0NGU2ZjkzYjM2ODkzNWM2YjFjNWIxYzI1MjlmZTE4YjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EBfXScWYIYygYpSM4kETjoGy5Wt
V3bDaH6OsxSTmZbEjQBU3BhqZmb/ethX0CWGotBp41qvD3LRQyXOo1o5Sn76JEXm
BMN8hPgbs+aYS/ri5GOkCpI3jOejUIaavxiTjXmbU6as4kzIcDcgo3MyV9P6ZKjW
+4Y4sn5zCconyJ3dnnatQ79+jPvdGm6p6CG9zUvaivWPT3vsR/KhDs7F3S5Jiz0q
fZ+gV0E2jtuqs0yXxetSa9qY5N2fvWQe6rSI3NSHnw6vP7YQyhwJVVmHCsgntOHk
/tGf8rcbbZdL7npWwboBbd0KVX6Y4u3cvWab32CYK9AeX4+NfLzDSNVHzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDY5ETm+Ts2iTXGscWxwlKf4YtfMB8GA1UdIwQY
MBaAFN74q1903JDp/7qNQpiO1ad0jB0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82YTcyNWEtNDJlNC00MjcwLWI1YWYt
NDUzZmMxYmNiY2Q1LzEvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82YTcyNWEtNDJlNC00MjcwLWI1YWYtNDUzZmMxYmNiY2Q1
LzEvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBRsuZti
/Q9sTyiSutPm4dSaD/AvnAWAB5GHkwJyA3hGyfrEPE1/qRNW9aSBwKwBrEm4diyG
s0dwIPFpkMS1EUp0p3uIsiqsQNDNAM+AurDcalQhpyTtYVSYJZfTgRGSS4Ry99iQ
0wmxBXGANKtIyOAow4NRRjn82Ryt4Akiwb40LEQxHlJnOBB4FWM80uPQc4DfZp9/
p8DISu49xIKLtfmwvL4q1RWkk9cRifX20HFg4yPWQO+iYi+e/feHqAWDdtor8zpp
l5IZKj5Cwu9XLvgVML8Uo9/K2ep5Q+pPDHO4mwfvZ7JFUhk9mCMwagcqS1HpPjJN
8/nqbwLnR0HDeg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:49 2025 by rpki-client