Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
File: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft (raw, json)
Hash identifier: e1wl+uHBLiUKD9FZJ42d+us5FQ+ok/ftuJHt6nnpfXs=
Subject key identifier: C8:41:71:16:E2:13:8B:99:33:F1:BB:5B:44:42:7B:F6:E9:74:D6:29
Authority key identifier: DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
Certificate issuer: /CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Certificate serial: 019A533F4C579E965B65BE46E88C3430C30C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
Manifest number: 0646
Signing time: Wed 05 Nov 2025 09:00:48 +0000
Manifest this update: Wed 05 Nov 2025 09:00:48 +0000
Manifest next update: Thu 06 Nov 2025 09:00:48 +0000
Files and hashes: 1: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl (hash: oEVQ6pbe3ZszFZa3/In2IxJpvvIRynPL2aI0iFRwKrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:4c:57:9e:96:5b:65:be:46:e8:8c:34:30:c3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Validity
Not Before: Nov 5 09:00:48 2025 GMT
Not After : Nov 6 09:00:48 2025 GMT
Subject: CN=c8417116e2138b9933f1bb5b44427bf6e974d629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:56:a8:4d:4d:b0:5b:32:f8:44:9f:ce:e4:
44:72:67:22:d1:97:09:a1:b8:a3:78:e2:da:dc:3a:
c7:39:f4:2f:69:f5:58:c5:7f:06:ae:67:34:6e:41:
06:49:c0:d3:f5:5c:59:3e:01:fd:ae:0c:4b:0a:52:
7c:65:60:c4:53:3e:f6:c2:fb:26:b5:4e:d1:00:96:
e9:33:61:3d:fd:fb:0c:f8:9d:1c:9c:22:0d:4c:d0:
08:07:c1:de:25:25:32:1d:c2:19:21:bd:94:c2:b4:
e1:74:c2:2c:49:7c:f5:0b:97:0d:af:0d:d0:4f:24:
a3:b2:1f:9d:53:ad:2d:7b:38:f0:6b:f5:b3:da:54:
de:40:c5:ab:9d:09:e1:ed:a8:00:c7:4d:e4:14:f2:
a5:3f:58:05:5b:26:c0:66:58:48:11:09:d7:11:de:
13:84:c5:51:1d:68:fc:74:37:2b:e3:cd:c0:73:61:
f5:d2:2a:08:f9:cf:2d:c3:d1:e0:15:bc:5e:26:7d:
2a:87:92:ad:48:99:35:23:c7:74:fd:1c:cb:bb:f0:
21:2b:44:25:4f:d0:4e:6f:aa:d7:1d:e7:cf:05:f2:
e2:dd:4a:55:30:12:00:cc:5e:ef:44:cd:fd:8f:b9:
23:c6:4e:53:a2:fc:df:cd:8b:dd:d4:ea:86:d7:ff:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:41:71:16:E2:13:8B:99:33:F1:BB:5B:44:42:7B:F6:E9:74:D6:29
X509v3 Authority Key Identifier:
keyid:DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:31:93:8c:ae:6a:de:50:a9:73:85:63:37:0a:6f:83:21:10:
1b:5e:11:ab:f0:36:ec:21:a6:4e:40:d8:7f:7e:be:4b:a2:c9:
39:d2:c7:94:77:b0:9f:85:90:7d:2c:99:da:0c:7b:85:15:b0:
29:67:8d:fa:8c:b9:29:c9:b8:9b:99:c2:37:38:38:78:bf:b9:
35:ce:48:ac:d1:8a:90:c9:3e:b1:5b:aa:8f:c4:f9:5b:7b:75:
71:df:c5:be:b8:f1:a4:4d:c8:b9:65:e7:00:50:a2:57:9e:2a:
26:3f:3b:ec:a1:74:cc:ce:ca:cf:04:72:2a:ec:3e:0c:fb:45:
34:fa:96:34:e1:8d:f6:69:e5:ec:df:63:e1:65:6f:bf:c8:7d:
6c:4b:03:d7:2b:3d:d4:ef:1f:09:2f:47:e8:86:d6:dc:cd:e7:
e1:1d:cb:46:e8:95:9d:f8:37:0c:94:50:90:5b:c2:77:15:25:
2e:d6:6d:b8:c5:27:f0:f9:1b:75:b0:ae:83:db:48:fb:0f:63:
a7:ad:7b:64:88:c9:c7:ba:c0:ad:19:fd:3e:41:0e:ed:52:7a:
9b:62:95:e4:3c:8b:62:cb:64:04:74:dd:7e:3f:03:0d:93:bb:
fb:d2:33:80:eb:56:20:98:b3:9b:9d:e3:89:89:15:af:24:ac:
02:d7:13:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:50:54 2025 by rpki-client