Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
File: t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft (raw, json)
Hash identifier: AaDKPYKOTptLZ4dn55bsdrmUPHfEY/+3qMdtjGYr7/0=
Subject key identifier: 38:77:53:73:B3:CA:4E:E2:4D:23:00:05:31:AC:E0:E8:85:13:DF:27
Authority key identifier: B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7
Certificate issuer: /CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
Certificate serial: 019A4FD07AFEB2FF9335EA3EADFD31E23D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
Manifest number: 0610
Signing time: Tue 04 Nov 2025 17:00:54 +0000
Manifest this update: Tue 04 Nov 2025 17:00:54 +0000
Manifest next update: Wed 05 Nov 2025 17:00:54 +0000
Files and hashes: 1: CrtWfCL7i9NVihI1TfWhriARtZk.roa (hash: GvkPNrJjcp+5LqZSEnG2rMaRPFf5goGwB+oAHuiRPHA=)
2: t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl (hash: +9qLyThj27D+PXsc56BwBKdP3ir79uBg00T5UHIqW1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:7a:fe:b2:ff:93:35:ea:3e:ad:fd:31:e2:3d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
Validity
Not Before: Nov 4 17:00:54 2025 GMT
Not After : Nov 5 17:00:54 2025 GMT
Subject: CN=38775373b3ca4ee24d23000531ace0e88513df27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:fa:c3:0e:3b:0e:50:a0:ff:99:9e:dd:10:
c3:7a:26:cd:24:3b:ca:ea:14:c2:ca:90:f0:b2:9b:
76:53:2b:7f:7a:40:85:2e:c6:43:af:4d:52:a8:8d:
95:75:9a:0d:75:65:96:85:14:cd:79:17:bb:d4:a6:
aa:52:8a:9b:36:49:75:ed:f3:55:43:7d:9a:61:fb:
19:13:49:e7:31:13:93:d4:6f:c9:18:e0:5d:37:95:
fc:1e:bf:ef:86:5b:35:f5:12:9a:81:52:27:b5:93:
50:ee:75:aa:a0:0c:3c:96:f9:4a:dd:14:f0:a5:18:
41:4e:b6:83:cd:ff:5e:7f:bd:9f:29:df:79:22:c7:
b0:b3:33:a4:16:59:0e:9b:6b:54:43:c2:b0:21:05:
ff:86:f1:f0:2f:45:fa:c0:16:24:e1:12:cf:ae:14:
be:70:d7:df:18:39:bb:03:a7:16:a0:76:68:42:4c:
f8:99:a0:3d:00:01:6d:5f:b5:85:41:89:22:d4:bc:
83:16:ce:2e:9b:72:03:f5:9e:e5:bf:27:ab:b2:b2:
b7:cf:7b:ec:b9:1b:8d:17:ed:47:54:fd:27:4a:0f:
fd:6a:df:9b:f3:b7:73:d7:dd:33:5a:52:39:a7:2c:
82:64:57:52:e4:75:10:09:85:57:21:14:62:a6:0a:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:77:53:73:B3:CA:4E:E2:4D:23:00:05:31:AC:E0:E8:85:13:DF:27
X509v3 Authority Key Identifier:
keyid:B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a3:cd:67:4b:0b:2c:15:47:d2:a2:6c:7f:cd:a6:69:83:5a:
3d:e6:d5:67:ce:8c:3c:62:6c:68:2c:45:ff:dd:71:f4:08:d5:
c1:bd:ac:3c:f3:bb:df:1a:8e:85:26:63:20:40:87:9f:8f:ab:
b2:0b:a0:60:31:c8:52:30:6a:58:28:a0:d9:ab:2c:f6:da:78:
31:bf:c7:7a:8e:85:95:e7:16:78:2f:d3:b1:38:4d:b5:bd:5d:
36:d4:18:63:a3:c1:91:4f:3e:37:67:9f:cf:99:35:d9:6d:6a:
a5:62:08:0c:49:9f:cd:35:e1:da:e3:3d:ea:04:b7:c7:98:49:
9e:4d:c3:01:a3:87:8b:8d:be:99:d3:63:14:38:ec:ad:ac:8e:
9d:71:1c:cc:48:5a:7a:ca:7d:03:86:59:97:96:38:40:70:14:
61:4b:07:c1:15:d6:74:cc:7b:f0:c6:ee:89:52:5c:a3:96:d8:
65:2d:69:39:4a:0f:97:9d:57:54:83:9e:83:a5:da:9d:36:18:
4f:06:23:17:33:c9:00:8d:4e:d9:e4:92:0f:b2:41:8f:f1:91:
15:53:1c:aa:60:68:62:fa:82:6d:9e:5b:52:b3:1d:9b:99:a0:
1e:75:c2:57:3a:76:e7:c1:40:48:97:c2:97:97:cf:02:c0:e8:
ed:0f:09:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0Hr+sv+TNeo+rf0x4j2NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NzMwYzgzMjIxMThjODFjYTg0YmFiMWI3ZTA4OTBhOWM4
NWU5ZjcwHhcNMjUxMTA0MTcwMDU0WhcNMjUxMTA1MTcwMDU0WjAzMTEwLwYDVQQD
EygzODc3NTM3M2IzY2E0ZWUyNGQyMzAwMDUzMWFjZTBlODg1MTNkZjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfz6ww47DlCg/5me3RDDeibNJDvK
6hTCypDwspt2Uyt/ekCFLsZDr01SqI2VdZoNdWWWhRTNeRe71KaqUoqbNkl17fNV
Q32aYfsZE0nnMROT1G/JGOBdN5X8Hr/vhls19RKagVIntZNQ7nWqoAw8lvlK3RTw
pRhBTraDzf9ef72fKd95IsewszOkFlkOm2tUQ8KwIQX/hvHwL0X6wBYk4RLPrhS+
cNffGDm7A6cWoHZoQkz4maA9AAFtX7WFQYki1LyDFs4um3ID9Z7lvyersrK3z3vs
uRuNF+1HVP0nSg/9at+b87dz190zWlI5pyyCZFdS5HUQCYVXIRRipgqDtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDh3U3Ozyk7iTSMABTGs4OiFE98nMB8GA1UdIwQY
MBaAFLdzDIMiEYyByoS6sbfgiQqchen3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iMzhmZDctOWU2OC00MjZiLWExMDAt
MWMwZmQ4OWRiY2I0LzEvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9iMzhmZDctOWU2OC00MjZiLWExMDAtMWMwZmQ4OWRiY2I0
LzEvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6PNZ0sL
LBVH0qJsf82maYNaPebVZ86MPGJsaCxF/91x9AjVwb2sPPO73xqOhSZjIECHn4+r
sgugYDHIUjBqWCig2ass9tp4Mb/Heo6FlecWeC/TsThNtb1dNtQYY6PBkU8+N2ef
z5k12W1qpWIIDEmfzTXh2uM96gS3x5hJnk3DAaOHi42+mdNjFDjsrayOnXEczEha
esp9A4ZZl5Y4QHAUYUsHwRXWdMx78MbuiVJco5bYZS1pOUoPl51XVIOeg6XanTYY
TwYjFzPJAI1O2eSSD7JBj/GRFVMcqmBoYvqCbZ5bUrMdm5mgHnXCVzp258FASJfC
l5fPAsDo7Q8JWQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:03:56 2025 by rpki-client