Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier: 1qis8+fkPh+tQl+rSP24aQjdQPjNckGEnugWPDpMDYs=
Subject key identifier: F3:33:1D:F5:80:0E:55:C5:3E:1A:20:B9:68:FF:C6:AE:7E:7A:5F:B5
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial: 019A4F995BA3ED85D4A66480AA67C1E2CA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number: 1305
Signing time: Tue 04 Nov 2025 16:00:41 +0000
Manifest this update: Tue 04 Nov 2025 16:00:41 +0000
Manifest next update: Wed 05 Nov 2025 16:00:41 +0000
Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: /t3ex0L+i0sFmwvBbfnulzhgOJu8etPuH2+d1xmgpx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:5b:a3:ed:85:d4:a6:64:80:aa:67:c1:e2:ca:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Validity
Not Before: Nov 4 16:00:41 2025 GMT
Not After : Nov 5 16:00:41 2025 GMT
Subject: CN=f3331df5800e55c53e1a20b968ffc6ae7e7a5fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:e9:7f:0a:40:d4:d7:85:76:aa:e7:76:29:
7a:a8:35:77:1d:34:c8:70:a4:93:05:10:b9:3c:17:
4d:12:72:e4:62:50:24:3f:14:81:e4:fc:ce:97:0e:
f3:3a:b3:aa:47:e2:0f:3b:13:b8:6a:9d:e4:f2:89:
77:3d:04:d6:8d:dc:ad:24:09:d7:b4:70:0b:35:be:
9d:1f:a6:06:45:59:fe:ea:00:b5:43:65:96:2c:fb:
5c:8a:88:f2:6c:ce:7a:dc:36:83:30:c6:39:e1:11:
5b:e8:1f:e6:03:49:bc:12:b3:7e:cd:a3:49:7a:1f:
bc:96:0c:02:86:14:33:29:c7:f3:83:e2:fe:cf:7f:
7d:5e:fe:b7:4e:55:7a:63:17:99:06:a7:49:f5:46:
f0:02:ee:8f:81:3e:c9:49:c5:e1:3f:a1:0e:ec:f2:
9b:8c:ec:e4:c3:90:f6:ad:d1:07:bb:f4:28:07:8b:
91:25:81:6f:ff:53:9c:07:b3:45:1c:20:4b:24:ad:
ed:7f:fc:c8:a1:3a:27:4e:45:df:43:77:d5:25:83:
1f:83:37:18:10:78:72:d0:4a:db:81:5d:ae:d7:5f:
39:08:ee:b1:68:fc:7d:de:00:ea:f4:46:7f:07:6c:
84:c1:0e:52:2b:4e:bc:a3:db:51:3a:d7:16:96:8e:
ba:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:33:1D:F5:80:0E:55:C5:3E:1A:20:B9:68:FF:C6:AE:7E:7A:5F:B5
X509v3 Authority Key Identifier:
keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4b:1a:b8:ff:5c:53:34:66:f0:69:7a:c2:a9:2f:a4:e7:de:
a5:c3:de:06:b2:7b:ff:92:68:8f:a5:88:cf:1b:8a:b9:f5:90:
e5:ea:fa:c8:3c:0c:4b:84:d3:91:b1:4f:ed:c3:60:2c:4c:17:
fe:03:77:f1:1c:99:33:35:bc:dc:e5:38:e5:c0:59:3f:71:14:
04:ef:38:ec:9f:8f:06:ae:16:8e:0c:d6:b9:c8:cc:81:e4:72:
a4:8b:d1:63:64:c3:3d:e6:a5:96:1a:0c:4c:10:66:14:2f:42:
68:d6:6f:c0:35:f3:68:1f:4b:0c:b0:40:04:b0:a5:ed:02:ec:
fd:d5:bb:7b:a0:56:fa:0b:52:1f:fe:56:11:d8:57:88:ef:32:
a4:39:5a:a9:2c:be:a8:ed:7c:c5:bc:b9:f7:22:b9:17:53:6d:
69:73:8f:a9:d5:ce:dc:b6:ba:89:d7:1b:8b:84:56:c9:4b:da:
ff:86:d5:7d:94:28:bf:27:3f:79:82:da:ca:7d:e7:23:ee:9a:
67:80:42:4e:e0:1a:40:a9:00:0b:b9:f8:81:31:f4:c2:86:93:
35:03:6e:9d:15:cd:c1:9c:d1:de:16:6f:97:51:2e:e6:65:ed:
16:d8:d4:0c:75:99:9c:af:2a:3b:9a:80:4f:fb:4c:d0:e2:8c:
e0:fc:24:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:47 2025 by rpki-client