Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
File: x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json)
Hash identifier: QKRr+ixNo2n2HQ0uTDcfPZ+vQ9s38b+l/AUHEO3ZN78=
Subject key identifier: 8D:0C:29:69:EF:0C:90:19:5C:2C:D5:49:2A:3C:61:2A:E4:D6:16:7A
Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
Certificate issuer: /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Certificate serial: 019A4D73A2A9A98D217A14711AB136546C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
Manifest number: 0744
Signing time: Tue 04 Nov 2025 06:00:15 +0000
Manifest this update: Tue 04 Nov 2025 06:00:15 +0000
Manifest next update: Wed 05 Nov 2025 06:00:15 +0000
Files and hashes: 1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: F1RxVkOQc5k9bFcvBomCTipThKoa+sE+jAjml+HgEOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:a2:a9:a9:8d:21:7a:14:71:1a:b1:36:54:6c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Validity
Not Before: Nov 4 06:00:15 2025 GMT
Not After : Nov 5 06:00:15 2025 GMT
Subject: CN=8d0c2969ef0c90195c2cd5492a3c612ae4d6167a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1d:6d:d9:89:d2:96:1f:e5:ce:6c:83:df:85:
47:5f:01:eb:75:a7:7f:d5:f1:ad:1e:e9:16:76:7f:
53:39:fa:c4:bd:d1:a2:4d:a3:11:65:83:2a:58:91:
44:1a:4e:a4:0f:03:55:a7:ae:0a:75:91:54:03:1b:
c3:ad:6d:f0:0b:69:e9:11:30:de:ff:3f:c7:b4:9e:
85:06:16:1c:3c:68:b4:81:c7:c1:9e:be:b4:16:14:
4d:04:f1:e5:ea:27:cc:39:94:60:81:6a:51:a1:1f:
88:23:9b:6f:05:c7:af:3e:ff:ee:9c:53:03:f1:a7:
80:08:cf:7f:b1:82:10:a7:35:46:24:43:50:de:c3:
d1:15:cb:23:71:4f:b6:48:06:25:2a:05:d3:5c:94:
93:18:ba:f2:92:1f:1e:1c:a0:d4:c8:a0:e7:3d:81:
8e:c0:9e:82:cb:0e:60:4a:01:51:67:98:fe:bd:c7:
15:d2:7c:90:ab:2c:12:4d:8c:67:00:53:88:55:c3:
03:50:f6:8c:a0:dc:eb:8f:5e:7f:95:36:36:e7:37:
0f:6a:1b:d2:6a:62:6f:8f:9b:27:5a:ca:dc:5d:66:
0c:db:f2:90:9a:d8:e8:98:38:86:68:e1:77:75:cb:
9a:f6:1e:ea:00:5e:30:4d:a7:d9:9f:ee:4c:5e:b9:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0C:29:69:EF:0C:90:19:5C:2C:D5:49:2A:3C:61:2A:E4:D6:16:7A
X509v3 Authority Key Identifier:
keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:c0:fd:75:c7:69:9e:88:af:15:a8:ae:01:af:89:74:45:b8:
62:20:e0:16:8b:37:d1:b2:94:b6:63:04:bf:e7:35:2b:58:e8:
77:60:bf:c4:49:19:e2:d3:57:79:06:18:7c:b2:80:d1:6a:de:
14:f8:c8:ad:99:72:fb:07:da:04:76:a5:d6:45:93:f5:2f:5d:
42:b0:24:89:c9:fd:18:8e:c2:bd:62:b3:9d:5a:91:75:af:6b:
d3:b6:b8:f1:12:bb:21:8f:4d:cb:a2:f0:fe:0e:9f:d0:17:6d:
ba:21:f4:60:26:9c:0b:9c:24:a0:1c:7e:16:f2:4e:0e:e8:51:
3c:fd:cf:0a:97:3b:6d:4b:f7:45:56:2d:53:17:5e:9f:5a:bb:
e9:02:a4:8d:7f:a8:e3:a3:e3:28:0b:2c:7e:a0:c3:d1:f2:9f:
97:88:ab:21:aa:b1:b8:73:0e:3a:0d:b5:cd:58:db:92:d9:55:
bf:2e:55:56:e2:85:05:5a:8d:04:08:14:72:08:fb:3f:2b:5e:
52:31:62:36:85:f9:78:ec:a3:d1:65:1f:53:2d:a2:2f:17:20:
ca:ca:36:97:4e:01:67:12:19:1d:22:dd:ed:dc:8b:fd:e6:bc:
38:13:02:a6:70:0b:f4:55:b2:25:0d:55:f0:39:22:7f:11:75:
fe:78:65:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:01:57 2025 by rpki-client