Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
File: v9P33PxgiR_DiPpcHb118nuVGeI.mft (raw, json)
Hash identifier: 7wcY7mn/6tC4vk3Rp/iInm0vi6umH7FTJ9Zl3GFu3rQ=
Subject key identifier: DC:E2:9A:A9:F6:74:3D:BE:71:C2:F1:16:ED:4B:F4:4B:43:93:A9:91
Authority key identifier: BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
Certificate issuer: /CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Certificate serial: 019A4D06A94DC8245D7CDB070F975446A22F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 04:01:13 +0000
Manifest this update: Tue 04 Nov 2025 04:01:13 +0000
Manifest next update: Wed 05 Nov 2025 04:01:13 +0000
Files and hashes: 1: v9P33PxgiR_DiPpcHb118nuVGeI.crl (hash: prNczI6YwTo33cGPDCe1YtUcBCzsBfFxOh2d3V5aFrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:a9:4d:c8:24:5d:7c:db:07:0f:97:54:46:a2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Validity
Not Before: Nov 4 04:01:13 2025 GMT
Not After : Nov 5 04:01:13 2025 GMT
Subject: CN=dce29aa9f6743dbe71c2f116ed4bf44b4393a991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:63:84:fc:33:47:6f:94:5d:cb:70:35:ee:8c:
9e:95:b8:12:ba:0b:45:be:9d:d5:62:2e:9a:ea:ee:
17:32:ff:a7:d6:57:ad:91:7d:de:73:37:27:7c:43:
a9:17:fa:6a:b2:fe:b2:95:39:2e:b0:e2:48:99:cf:
84:38:08:4e:b9:8a:5a:08:be:31:96:25:77:bf:50:
0b:18:5a:1a:71:06:c2:29:99:ce:3a:7c:fb:f2:98:
47:9b:da:3a:93:0e:c7:ce:04:ab:07:36:0d:02:f0:
2f:a2:75:79:50:dd:83:df:f7:28:c7:9d:6e:bf:83:
c9:1a:79:98:82:4f:19:23:dc:79:e3:5d:ca:42:81:
3a:be:a5:3f:0d:dc:a0:fc:4e:a0:af:98:d3:3a:1b:
70:7d:24:5c:1f:a8:5b:55:2b:0b:b0:53:a0:64:e0:
6b:3c:79:b8:a7:dc:48:5b:d8:37:d9:ae:04:24:70:
06:66:69:22:ac:57:5f:e0:b5:56:56:a8:eb:ef:d4:
3f:8e:f9:24:6f:66:45:06:d7:dc:1c:16:6a:f5:c9:
64:14:99:69:1e:15:8f:71:4b:00:fd:34:cb:05:3e:
44:fe:f2:22:b8:eb:95:b1:70:d4:d7:52:c7:09:f6:
b5:b5:6f:21:9e:db:23:63:68:62:62:51:45:42:be:
d3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E2:9A:A9:F6:74:3D:BE:71:C2:F1:16:ED:4B:F4:4B:43:93:A9:91
X509v3 Authority Key Identifier:
keyid:BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:21:4e:bd:83:d7:46:c8:a4:66:c0:d1:1a:c1:27:c2:63:b2:
62:08:08:81:3f:4f:e5:9a:16:8e:36:45:8f:ce:f4:57:d8:d7:
07:1f:67:29:3b:d3:42:f8:90:ef:8c:5a:60:30:ec:a7:72:96:
cd:83:8b:12:1d:bb:81:63:23:eb:e7:8c:f8:ad:f9:ba:8d:4e:
bc:48:d7:73:a3:80:f3:a9:5c:1e:5a:61:29:69:23:d8:e0:8a:
ce:16:c3:e0:f0:76:4b:33:a0:45:19:04:e8:63:67:3c:15:15:
05:6f:ef:25:3c:18:52:b5:06:dc:29:8c:b2:f3:96:0b:89:f7:
dd:f5:6d:fb:67:90:21:28:ba:b8:95:bd:ce:ff:77:b7:c7:e6:
c7:33:79:fe:ce:e0:42:5f:67:67:53:22:9e:04:a0:22:74:77:
de:bc:d8:5f:c6:83:9a:1e:26:ed:24:93:c6:1f:a5:94:7d:bb:
15:fa:a5:6a:a3:8b:4f:5b:22:bc:f3:af:d7:b9:ea:64:7e:c6:
86:fa:13:dd:19:5c:f9:0c:a4:dd:5e:1d:6d:e3:a8:fe:48:f7:
c0:af:4c:1f:19:1f:97:36:69:14:49:16:10:d1:28:b1:b9:af:
86:f1:9d:50:fe:7b:56:73:0f:37:7a:33:75:16:af:ed:b1:53:
70:3d:28:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:23 2025 by rpki-client