Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
File: R3BGWvTHI2RwAFnnll08iepGPNc.mft (raw, json)
Hash identifier: ITTc5jQ7Fw/OHZxZQ3Bpk8Ct6pYXra8QGk4obiVeeyE=
Subject key identifier: 16:B9:12:5A:85:40:91:87:07:53:6B:65:F6:FE:57:12:F4:AC:87:E0
Authority key identifier: 47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7
Certificate issuer: /CN=4770465af4c72364700059e7965d3c89ea463cd7
Certificate serial: 019A4EF45F58B725470F421A6B36405F29C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
Manifest number: 10C3
Signing time: Tue 04 Nov 2025 13:00:29 +0000
Manifest this update: Tue 04 Nov 2025 13:00:29 +0000
Manifest next update: Wed 05 Nov 2025 13:00:29 +0000
Files and hashes: 1: R3BGWvTHI2RwAFnnll08iepGPNc.crl (hash: vc1ngRkTEHMZp2Gzw3JGNEsxtS9amqbhveRcF+T5Fyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:5f:58:b7:25:47:0f:42:1a:6b:36:40:5f:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4770465af4c72364700059e7965d3c89ea463cd7
Validity
Not Before: Nov 4 13:00:29 2025 GMT
Not After : Nov 5 13:00:29 2025 GMT
Subject: CN=16b9125a8540918707536b65f6fe5712f4ac87e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ee:d8:73:77:0d:65:1d:94:7d:8d:fd:88:74:
98:81:5c:ee:3a:4f:8b:c2:49:43:83:57:6c:23:3d:
6a:a5:3b:ab:d5:62:e9:f6:66:2f:ba:36:85:3f:c1:
8d:89:e8:fa:2b:db:9a:01:da:a8:02:f8:b0:28:bc:
3a:ed:bf:5a:f5:d5:a1:70:4a:54:c6:90:75:99:54:
e4:32:06:b1:34:5e:3f:66:6a:32:cf:3b:9a:46:72:
9b:a6:92:b7:f2:e3:bb:f2:33:62:a7:be:f8:e5:50:
62:8b:af:5c:0c:22:7f:4e:3a:b0:14:17:12:bb:d6:
1e:d9:1a:1f:4f:13:7a:7e:61:92:8d:6f:27:8c:25:
86:fe:74:4d:fa:0f:48:61:34:8a:6c:99:d0:cf:2b:
bb:0b:53:67:e5:43:5e:0d:6e:ae:02:eb:5a:e1:ed:
d8:84:c6:07:01:10:2f:b3:e9:9f:58:1d:be:af:bf:
e3:71:84:35:b1:fb:44:ff:ed:b5:06:56:98:d2:f2:
60:21:30:95:13:34:02:10:7b:b8:53:90:24:d8:6a:
60:1e:8b:c1:1b:11:eb:f3:a0:9a:a9:c4:7d:c6:66:
68:e0:4f:06:ff:bc:a8:c5:cc:49:02:21:49:77:17:
5c:bc:07:67:c1:fe:d8:95:22:1d:42:fe:0a:0c:84:
e9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B9:12:5A:85:40:91:87:07:53:6B:65:F6:FE:57:12:F4:AC:87:E0
X509v3 Authority Key Identifier:
keyid:47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:57:02:47:29:3d:61:9c:d8:3f:ee:09:b1:76:91:08:73:b7:
68:54:13:a1:80:20:86:4a:7b:3c:67:9f:95:1b:a8:00:0b:d1:
17:2d:56:f4:b3:d3:be:f2:66:31:5e:39:05:c1:f6:98:b6:d9:
ce:38:6c:ef:cb:19:df:73:f2:96:8a:24:2a:86:9b:cd:90:2a:
c1:59:cd:ba:ad:e4:bc:11:e8:b3:b6:e0:a4:ef:10:d9:21:b9:
a3:d9:37:63:d7:4b:2e:a6:c4:5d:28:2a:5e:53:45:5a:54:c0:
74:c1:df:5e:77:ce:49:b0:38:3f:a1:ff:a3:8e:c6:5c:2a:39:
b6:ba:f5:fc:12:6c:8d:db:9f:85:67:65:28:de:2b:38:18:ce:
5a:4e:b1:70:53:27:c8:97:27:f6:77:2b:b8:ff:89:75:66:f5:
62:55:42:68:17:cd:d8:74:2a:b6:27:15:b7:16:6d:f9:36:00:
2f:e2:2b:88:d8:f3:54:b3:98:17:32:d0:9f:7d:b7:b9:4f:e8:
bb:04:49:ea:04:be:a3:73:f4:3f:d6:ce:74:40:8e:c4:1e:c2:
8f:b5:c2:38:93:c3:c5:d7:a3:59:9e:30:b4:45:d9:4c:d5:09:
41:6b:b6:7a:fb:9c:65:9a:f4:7f:6d:fb:cb:d1:e0:8f:dc:50:
c8:44:ef:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:00 2025 by rpki-client