
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
File: 3vg4UDz7wFKD_erdRkSke_14P84.mft (raw, json)
Hash identifier: 4g89ziVRQTvdTJeCqZmPPrIXZ8cGfINd9squlJUcDyM=
Subject key identifier: B9:C8:0C:6A:30:69:5E:BA:DE:2D:48:ED:F6:01:5C:51:CE:8E:21:BE
Authority key identifier: DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
Certificate issuer: /CN=def838503cfbc05283fdeadd4644a47bfd783fce
Certificate serial: 019A4E4FB1D22555720D108B666A958013FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
Manifest number: 0936
Signing time: Tue 04 Nov 2025 10:00:36 +0000
Manifest this update: Tue 04 Nov 2025 10:00:36 +0000
Manifest next update: Wed 05 Nov 2025 10:00:36 +0000
Files and hashes: 1: 3vg4UDz7wFKD_erdRkSke_14P84.crl (hash: pOh1tjdDQ9w+CUNrTpxeuf9D0i32nhm4SMx9fJ5U6VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:b1:d2:25:55:72:0d:10:8b:66:6a:95:80:13:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def838503cfbc05283fdeadd4644a47bfd783fce
Validity
Not Before: Nov 4 10:00:36 2025 GMT
Not After : Nov 5 10:00:36 2025 GMT
Subject: CN=b9c80c6a30695ebade2d48edf6015c51ce8e21be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:5d:ad:8a:3f:d1:10:6a:4a:ca:5d:5e:96:
3a:50:21:eb:5e:c9:ff:e7:8b:77:36:c5:2e:36:92:
94:40:06:1f:3e:2d:f8:9b:b0:80:27:e8:dd:e7:e5:
ce:fa:a5:48:cb:27:87:cc:4c:16:fa:79:66:0f:9a:
f1:af:9d:5d:53:7e:7f:53:7e:70:7d:98:f8:9d:fe:
cb:55:33:c3:97:85:cf:06:f9:4e:3c:af:8d:b5:64:
e2:e8:09:5c:aa:04:40:87:81:7b:3a:82:81:7c:bc:
ea:09:78:f6:6c:d0:31:04:96:90:72:14:00:b6:dc:
39:76:18:79:9b:89:8c:70:e9:d7:90:56:fc:75:00:
b2:0c:f8:32:0b:8f:9f:ff:c2:b7:c0:f5:ed:3c:5c:
94:d9:78:e6:75:ab:7c:8c:93:15:68:1f:54:78:f7:
57:0a:5a:43:f1:58:4e:a4:b6:ea:d5:17:41:bc:1d:
15:d3:be:0a:41:8a:c9:6f:4c:1f:53:81:f6:2c:22:
73:d2:9e:72:41:f9:cd:a5:50:6e:ce:d9:4a:16:25:
b8:c1:ee:c6:bf:f2:7b:cb:0f:96:fb:45:ad:1b:22:
b4:ed:7a:37:d2:51:b6:b8:50:29:f7:97:56:20:96:
33:05:8a:e6:6b:ef:b8:55:08:0a:62:90:ea:7c:ec:
1a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C8:0C:6A:30:69:5E:BA:DE:2D:48:ED:F6:01:5C:51:CE:8E:21:BE
X509v3 Authority Key Identifier:
keyid:DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:12:d7:ec:48:37:2b:af:23:3d:96:b7:d9:ab:66:6a:fd:01:
62:24:53:66:75:f0:ff:c2:de:00:53:87:ca:93:cc:06:d7:9a:
d2:24:f2:76:2a:ba:dc:15:a4:6c:f9:d1:6d:b0:f0:b6:c7:ef:
24:0d:e2:48:2e:c1:32:a4:14:c4:1c:18:ed:d1:7a:80:9a:ac:
84:61:51:79:f2:ee:69:a5:b2:54:c8:3a:fb:75:4f:ac:f5:1c:
36:24:55:9f:67:cf:bf:ba:a4:91:e2:eb:70:fe:e4:15:e1:93:
7c:62:a0:d9:82:04:a8:b2:78:98:99:51:7d:a8:23:c5:11:21:
63:2f:77:9c:8c:18:72:1e:8d:48:53:27:e1:f2:21:63:f1:92:
56:c7:37:8d:8a:a4:55:c8:b0:37:95:22:57:44:eb:c7:90:b7:
1d:6d:a2:e3:78:d5:29:bc:76:67:25:8c:92:f2:7f:6f:5c:e7:
f0:fc:c0:d8:e2:db:89:6f:1b:77:4d:69:03:6d:6d:d3:5d:69:
79:18:55:29:20:a9:21:68:ee:b1:42:f4:d0:9a:66:65:af:79:
e5:c7:8b:68:c8:9f:50:10:28:f7:c5:c4:15:4d:14:f1:91:57:
44:a2:d0:76:11:2d:48:81:73:0e:4c:be:91:48:e4:ee:4e:e1:
f7:a8:af:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:28 2025 by rpki-client