Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
File: g-3hynyzX11h-NWctQNumT6kO3A.mft (raw, json)
Hash identifier: m9sBQ5j5BBUirIJ5qSffgVbvWwBnbFuoda/oyXhaKAs=
Subject key identifier: 8A:16:A4:47:F8:EA:15:BF:7F:9C:3D:33:88:4F:85:38:A7:8F:A0:17
Authority key identifier: 83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70
Certificate issuer: /CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70
Certificate serial: 019A4EF48F3BED6A5D3F34F694F7C7BAF7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
Manifest number: 0F34
Signing time: Tue 04 Nov 2025 13:00:41 +0000
Manifest this update: Tue 04 Nov 2025 13:00:41 +0000
Manifest next update: Wed 05 Nov 2025 13:00:41 +0000
Files and hashes: 1: g-3hynyzX11h-NWctQNumT6kO3A.crl (hash: z6XXVKSDxhhF9wvrPz5uG7hf145pnZt2Xum8LGsSkfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:8f:3b:ed:6a:5d:3f:34:f6:94:f7:c7:ba:f7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70
Validity
Not Before: Nov 4 13:00:41 2025 GMT
Not After : Nov 5 13:00:41 2025 GMT
Subject: CN=8a16a447f8ea15bf7f9c3d33884f8538a78fa017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:1a:1a:99:ba:2f:e0:ab:c0:be:d2:6a:7b:
41:cd:b7:e6:c4:47:6b:c9:39:8f:bd:d1:f7:e2:4d:
36:0f:df:3a:44:d6:25:95:ca:6d:83:f2:54:6b:54:
35:74:b5:ba:cd:bb:91:06:55:34:58:3e:32:77:da:
cd:e4:27:70:00:b8:10:31:89:b7:9e:28:40:41:69:
43:34:47:e5:ea:4e:58:d1:d8:41:fe:ac:c6:8c:e1:
d4:1a:cf:61:a7:91:ce:26:23:b7:ee:02:92:9f:ea:
da:3f:57:12:72:f1:c9:fd:e9:35:c4:b0:21:4d:62:
c0:ee:9e:90:e2:50:8b:2b:ff:7e:d7:67:bb:2e:bb:
cf:06:2b:12:da:d3:b5:24:4f:1f:0d:a7:8d:f3:e7:
f1:68:53:b2:2b:0f:c3:91:2d:9d:db:b5:61:a8:bc:
77:dc:7c:46:92:02:de:37:79:92:1c:9e:80:9d:b6:
75:1c:5e:e3:96:2c:64:f5:42:68:ab:e3:79:bf:e9:
68:ac:43:86:88:7f:fa:b4:94:fa:c2:cf:78:ff:0f:
a1:ce:8b:04:fc:55:af:3d:87:bd:4f:64:14:71:73:
04:c6:7c:92:f0:12:12:05:95:71:63:74:bd:65:d6:
e0:be:07:8e:2e:47:a4:69:0f:92:91:b4:31:cd:e2:
62:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:16:A4:47:F8:EA:15:BF:7F:9C:3D:33:88:4F:85:38:A7:8F:A0:17
X509v3 Authority Key Identifier:
keyid:83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:40:ca:5d:e8:91:17:be:16:4c:f6:50:02:48:1e:54:50:2f:
a6:99:6e:6a:64:48:70:7b:a9:98:ce:79:e1:6f:5c:1a:8d:8c:
3f:4f:a0:b8:73:c0:c3:61:69:7a:d0:a8:90:72:97:ef:58:46:
3b:39:64:59:c3:52:de:b6:79:9d:c3:88:1c:03:25:f4:65:b7:
60:17:98:72:73:2b:b6:6a:ea:7d:4a:ef:d0:cd:d4:02:92:76:
87:62:e3:5e:02:ed:89:1b:d5:cd:98:80:63:f6:99:b4:bb:ae:
6b:36:81:7d:92:79:01:62:83:54:eb:9f:cd:86:19:6c:6b:fb:
65:d6:02:23:81:a7:50:90:57:fa:d4:99:4c:f3:14:30:15:69:
ef:1f:dc:50:3f:e5:32:1d:a8:a2:51:7b:b3:55:43:af:15:ee:
50:41:e1:04:01:63:74:38:b5:43:71:1e:b7:a6:92:53:73:10:
d5:37:02:92:63:5f:15:56:d5:61:44:ab:1e:57:ed:01:ab:9f:
32:b2:6c:5b:70:c8:4f:6e:c5:a1:2d:8a:b8:3f:1a:ee:19:ee:
df:14:30:6d:8f:a7:7d:5e:5e:8a:d8:45:07:4b:e5:60:da:d5:
e0:9f:5b:70:f1:ce:16:9e:94:75:c5:30:bb:f7:6b:33:27:30:
43:c2:d9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:34 2025 by rpki-client