Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
File: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft (raw, json)
Hash identifier: LUpVeduWyagbtbVgnOa+C3lheM4AbmRBXrpiMWhmXu8=
Subject key identifier: 89:F6:E3:16:59:A3:C1:72:E1:D4:A3:78:EC:66:D3:13:77:8E:AA:49
Authority key identifier: DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
Certificate issuer: /CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Certificate serial: 019A4EF59B9F2E68B5D25EEED3864955C51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
Manifest number: 1684
Signing time: Tue 04 Nov 2025 13:01:50 +0000
Manifest this update: Tue 04 Nov 2025 13:01:50 +0000
Manifest next update: Wed 05 Nov 2025 13:01:50 +0000
Files and hashes: 1: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl (hash: HVNgbPSNSL8ADe2b8yUB4nE0g3GUdy7yVDV4WZXvV9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:9b:9f:2e:68:b5:d2:5e:ee:d3:86:49:55:c5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Validity
Not Before: Nov 4 13:01:50 2025 GMT
Not After : Nov 5 13:01:50 2025 GMT
Subject: CN=89f6e31659a3c172e1d4a378ec66d313778eaa49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:47:fe:d4:1b:d5:0b:a9:31:65:2f:3d:9d:
6f:b0:5e:48:55:5e:2c:c4:f5:d0:ef:d2:07:b3:c0:
b6:ae:7e:2b:c9:c9:c7:35:b3:79:30:1d:10:8d:0c:
9d:9d:25:79:22:a7:1a:1b:64:31:2f:a8:46:1b:68:
58:92:05:e5:93:4d:8a:4d:8c:54:a7:43:2d:15:e5:
17:23:79:b0:c2:54:34:6f:ec:fd:98:e0:09:ed:ef:
3c:af:8a:f7:97:14:ec:f6:c4:3c:20:36:16:60:2a:
f5:12:ae:7a:f5:6c:a5:b0:92:50:f9:48:78:61:61:
26:88:2c:04:be:0b:f4:ce:c3:5a:1b:48:11:ca:18:
70:73:bf:83:f3:37:53:24:e4:23:95:b7:45:c2:96:
49:2d:4c:73:65:e6:17:fa:df:b8:bc:c1:ad:83:4e:
5a:1c:e3:71:ac:46:e1:8b:6d:a0:7a:5f:dc:fd:23:
bd:24:30:20:84:a8:47:e9:b2:80:6f:c8:36:e4:da:
f9:08:af:1d:3b:8b:20:44:23:08:96:33:0d:de:6b:
60:ed:9c:74:66:c7:07:34:0a:cb:67:72:53:be:b4:
84:be:9d:a8:b5:0a:14:37:05:34:b2:4a:b5:61:3a:
25:a8:05:7f:60:3e:e0:2c:d6:88:8d:c5:ec:b9:84:
18:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F6:E3:16:59:A3:C1:72:E1:D4:A3:78:EC:66:D3:13:77:8E:AA:49
X509v3 Authority Key Identifier:
keyid:DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:20:81:29:be:ee:a4:3f:5d:53:09:0e:5e:90:d2:2d:e5:47:
9b:49:a4:52:bb:39:e2:02:0f:0e:d6:38:6e:7d:2a:a2:b9:9c:
90:47:dc:df:3e:1d:f4:67:c3:b3:1f:fe:54:88:46:c6:2b:fb:
5d:7d:29:27:f2:f5:db:a6:2e:4c:18:c1:ea:3f:ff:6d:d4:f4:
3d:c6:fd:18:bd:68:b2:54:30:c7:f6:9a:c5:f6:3a:e8:0a:8b:
4e:b5:c0:4f:8f:a1:52:4a:ad:84:13:d7:f8:37:1c:7e:9e:dc:
e6:a5:ff:4a:cf:c0:9a:5a:4b:23:9f:10:18:d3:1d:3a:a7:89:
a3:7f:57:72:06:42:90:3c:47:23:ca:24:c3:39:c7:e8:84:cb:
15:86:74:ef:ba:b8:49:bf:d6:3b:1d:3b:79:ae:a2:07:ec:11:
6c:02:f8:44:78:1b:37:cb:43:ec:de:f3:3d:ae:de:17:a1:f5:
4b:23:4c:09:8d:4e:7d:34:6c:73:ea:2a:45:3e:0f:8a:c1:a0:
61:a6:b9:bf:19:16:5b:29:78:5d:15:8c:14:4e:f7:fb:14:9a:
01:d5:68:5f:1e:03:99:e6:db:dc:90:08:ed:47:96:90:56:56:
e5:87:f9:71:17:0e:f9:b6:15:16:0b:c1:a3:25:06:e3:c9:46:
4b:a6:1e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:26 2025 by rpki-client