Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: eJxoh6qP2Aywvrk9a3Hk4QRJOUFeM/ibADrHI3qjvOk=
Subject key identifier: 71:DE:11:9C:F6:A2:89:8E:FB:8F:AF:F2:22:B2:CF:7F:6F:A5:F6:7F
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 019A4F993E72AC22984110FC365FFD270C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 05F4
Signing time: Tue 04 Nov 2025 16:00:34 +0000
Manifest this update: Tue 04 Nov 2025 16:00:34 +0000
Manifest next update: Wed 05 Nov 2025 16:00:34 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: KV9VILQXC4TisvyM7UbA+TYshSeQqpCfMkJ6NO+vHv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:3e:72:ac:22:98:41:10:fc:36:5f:fd:27:0c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Nov 4 16:00:34 2025 GMT
Not After : Nov 5 16:00:34 2025 GMT
Subject: CN=71de119cf6a2898efb8faff222b2cf7f6fa5f67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:e8:5d:5c:44:57:df:fe:e9:b8:bc:b8:f1:
10:f2:9b:5a:04:7c:4b:1c:22:e1:17:2c:3f:c9:5f:
74:47:b1:5c:be:70:37:9e:c2:ba:9d:61:47:ea:87:
ce:fd:77:76:06:17:4b:2d:ed:cc:b6:63:75:0c:d4:
a5:cb:d9:b5:9b:d2:35:73:7f:e7:c1:bc:f7:f0:80:
47:25:ce:d2:09:20:6d:4f:f2:1b:90:ca:9f:b6:52:
dd:62:4e:2c:51:39:13:19:d6:3c:fd:6d:f5:da:1e:
73:a7:36:f0:93:21:75:ec:01:fe:77:99:dd:d6:c6:
09:c7:30:a7:25:73:0f:b4:a7:03:0f:08:14:82:58:
f7:5d:e7:b8:7d:2b:15:2b:93:c2:ec:b8:76:40:2c:
3f:30:4b:8f:29:bc:c9:39:3f:28:d7:3e:7f:66:c7:
8f:0e:80:bb:31:95:8c:25:91:82:f5:14:e5:a4:9c:
d8:bc:62:6c:cd:08:94:7b:53:6c:9d:77:4a:92:33:
7f:56:83:fd:11:49:43:33:85:c2:ff:eb:70:0b:69:
a1:3f:20:f0:3c:73:7a:5e:12:09:56:91:58:c9:ca:
c1:4e:b3:35:06:8b:09:a7:86:90:f0:94:13:2d:3a:
b9:80:5e:ca:81:6b:98:7a:0d:f2:e9:17:d1:0b:0e:
fb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DE:11:9C:F6:A2:89:8E:FB:8F:AF:F2:22:B2:CF:7F:6F:A5:F6:7F
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c8:3e:7a:b3:a4:f4:02:f3:7e:95:a0:17:e6:6a:00:d2:cc:
63:ea:1e:f3:b9:09:56:b8:3d:03:8e:a6:36:aa:41:98:4c:47:
ac:1f:06:2d:e9:a3:bc:91:90:14:fd:26:66:4a:a2:7f:34:ac:
9a:08:7c:05:88:6a:78:f9:c4:fd:53:5c:5b:0d:99:e7:03:c9:
7d:e4:61:c1:c1:01:12:3f:5d:f2:be:e9:a7:05:3b:ff:e0:61:
ed:0c:39:b4:90:ed:c1:45:d1:ae:d7:4a:7e:4e:e6:5e:4d:02:
7c:51:ae:70:23:4e:8c:94:5d:71:5e:e6:2c:aa:9a:47:89:fc:
e3:b0:f5:62:b6:a7:40:1e:ab:3c:91:eb:4e:2e:52:6c:4a:fc:
82:cd:71:79:ef:1f:bb:90:87:10:d2:cb:86:93:58:ed:b3:c6:
97:6a:1c:18:98:ab:ac:b9:82:fd:73:0f:7e:ff:eb:ac:01:a2:
45:3b:7a:cb:a9:93:3c:e2:e4:87:8e:ad:a0:8d:79:fb:79:bc:
c2:02:f0:6a:a4:1e:ee:2a:e0:61:19:4f:40:36:42:12:cd:26:
f1:21:36:16:80:c4:9f:08:9d:cf:62:0d:89:3a:21:cf:90:82:
55:02:7e:8a:b7:c4:1b:11:ca:cf:c2:c7:04:b0:59:79:24:bd:
9a:56:f4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:36:47 2025 by rpki-client