Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
File: 3Feh-cEhycK2-U04p1-_3MVN8Fs.mft (raw, json)
Hash identifier: RZXJi5cCb1kRkiUYfcimEU7UFRA1PwjlLUdBOi8j/ww=
Subject key identifier: 27:6C:3C:48:3B:5B:D7:FA:15:89:FE:15:2C:C9:53:11:56:FB:01:38
Authority key identifier: DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
Certificate issuer: /CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Certificate serial: 019A4F622617735F4F5C6A673567C7A0AEE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
Manifest number: 0B83
Signing time: Tue 04 Nov 2025 15:00:23 +0000
Manifest this update: Tue 04 Nov 2025 15:00:23 +0000
Manifest next update: Wed 05 Nov 2025 15:00:23 +0000
Files and hashes: 1: 3Feh-cEhycK2-U04p1-_3MVN8Fs.crl (hash: 5hFhm4mTHfL/t9M03xRDn1IPDxBnU6l4HlKjOYEXC1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:26:17:73:5f:4f:5c:6a:67:35:67:c7:a0:ae:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Validity
Not Before: Nov 4 15:00:23 2025 GMT
Not After : Nov 5 15:00:23 2025 GMT
Subject: CN=276c3c483b5bd7fa1589fe152cc9531156fb0138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:a4:4e:73:b6:c5:8e:90:55:e5:9e:e3:2c:
03:19:1e:b8:7e:f1:27:8c:96:a2:67:1a:a1:f6:ca:
de:42:e7:6c:24:87:2e:09:d6:d4:4e:5e:5b:45:7f:
ba:3c:27:02:7f:33:62:39:e1:52:5d:03:65:a3:3f:
5e:15:1a:03:88:d7:41:84:05:c2:5c:0c:ff:ab:c6:
ce:a6:b3:a3:0f:48:70:95:14:af:4c:97:ce:0c:c1:
5b:b6:b7:36:2a:56:57:64:05:dd:d2:16:44:95:62:
96:58:3a:6c:3a:7f:09:84:ff:02:56:5f:a0:04:c0:
1a:3a:7c:09:c7:00:3e:ab:d3:71:34:56:2b:51:2e:
bc:7e:59:83:54:90:88:46:7c:53:e4:7c:76:8c:22:
8a:02:e2:a0:b6:d5:b7:45:46:2a:d5:57:44:eb:1d:
e6:5a:3d:a4:c0:fd:be:45:06:26:a9:e8:79:c4:cc:
66:09:75:fc:79:b1:43:82:e9:04:98:58:9c:70:d4:
82:91:f8:99:10:d8:92:b0:df:d6:7e:1a:b4:aa:7e:
f2:1f:ce:51:b0:93:1f:f5:70:55:0e:7e:62:53:d6:
d7:2e:53:07:ba:27:b4:ae:53:6b:73:e6:22:3d:9e:
98:8a:fb:c9:5f:3b:43:73:90:e2:cf:87:8b:00:30:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6C:3C:48:3B:5B:D7:FA:15:89:FE:15:2C:C9:53:11:56:FB:01:38
X509v3 Authority Key Identifier:
keyid:DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a4:35:a3:19:22:ae:fd:ff:0a:01:cd:b6:51:ea:b4:b6:79:
52:d6:72:cd:45:0d:0e:a5:06:70:f2:f2:c3:88:fb:be:2c:65:
d9:f4:ed:18:e2:d2:63:7d:dc:2f:b9:f9:ba:91:46:06:49:39:
d2:ef:8e:36:36:24:fa:b4:5b:5f:f2:ac:fc:e8:a5:b2:c6:11:
96:28:d8:f8:b2:66:34:dd:3f:1a:ed:e6:e7:1a:f1:f7:fd:31:
ab:b9:3f:e4:9c:18:77:84:10:dc:30:0c:62:65:03:80:b8:11:
8e:e3:56:f2:ef:8c:c0:d5:50:d9:2f:b8:a4:58:49:d5:ff:28:
2c:e2:6d:16:f6:c8:cb:aa:fa:2e:5e:af:11:c0:9a:d0:97:bd:
6b:01:8f:10:3f:0c:f9:79:d1:2e:3f:6b:cc:93:ed:45:f1:52:
98:83:08:71:17:1f:c8:c0:64:26:b3:1b:af:5b:f9:b3:03:15:
56:00:9a:d1:c9:20:2a:57:7f:54:3a:82:09:2f:06:75:f2:fa:
d6:b8:20:1f:cd:c9:84:e7:68:4f:7d:ee:c0:64:10:53:bb:a6:
c0:bd:26:1e:8b:d9:1d:2e:79:52:9c:21:cd:03:99:51:d2:6d:
8e:4f:33:cf:38:81:b5:08:f3:1d:8d:9e:58:64:ba:9d:1f:cf:
76:36:c4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:19 2025 by rpki-client