Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: zDdHsYwVcACtofeCyhi44y+QiRTTY+liANs/hAYgxzQ=
Subject key identifier: 7D:AE:41:ED:67:F7:E3:7C:68:07:B6:46:AD:C8:21:5A:0D:43:81:54
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 019A4EF5211D006C7ACA8006F537CF5180BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 094F
Signing time: Tue 04 Nov 2025 13:01:18 +0000
Manifest this update: Tue 04 Nov 2025 13:01:18 +0000
Manifest next update: Wed 05 Nov 2025 13:01:18 +0000
Files and hashes: 1: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: zfm5UtWF6XxD5k422Bhbo3q6FzwFOZoArlxWb5KWLq0=)
2: W8Dpmpt_1-01qSbotVM15n3GSek.roa (hash: 8bMbdbcHjYf7KXHu+ym0lwgv0cPY/hCCrTp1Qv0O4sU=)
3: d-If6rwOnPiVqU22C8IZzGvMPvc.roa (hash: giLRuwy5wW+MIOBjFAF7Pd0PEoYtI2K0pgdHGw83fkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:21:1d:00:6c:7a:ca:80:06:f5:37:cf:51:80:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Nov 4 13:01:18 2025 GMT
Not After : Nov 5 13:01:18 2025 GMT
Subject: CN=7dae41ed67f7e37c6807b646adc8215a0d438154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fe:7e:5e:32:b6:67:e2:8e:4f:e4:03:d3:92:
bc:a8:ea:86:c7:ba:f7:0c:ce:dd:30:b7:59:75:62:
5c:3c:4a:d4:1f:2e:9d:ee:66:a4:0c:7e:cf:c3:96:
65:5f:db:63:de:95:81:cc:c0:2f:f7:52:26:d5:d9:
b0:70:bf:d4:db:50:0a:87:98:78:35:fc:fd:47:3a:
0d:b0:8b:4b:54:3f:e7:f2:b3:39:6f:8c:35:99:5d:
91:89:4a:3c:05:55:56:a3:fc:6b:ec:6a:67:0d:7f:
c3:02:4d:23:7e:c8:f2:dd:45:a3:29:20:09:ac:4e:
38:ad:43:bb:33:92:3a:17:28:97:ec:fd:7c:33:a3:
17:b7:fd:0a:5e:7a:ef:c3:96:3f:41:28:84:7a:28:
92:99:50:62:57:5a:03:b7:a6:67:e7:e3:fc:bc:bd:
07:b6:70:a9:8c:56:4b:7b:64:35:d6:9a:3d:5c:31:
0a:70:2f:49:37:cc:a1:63:05:d1:59:e0:17:8c:ef:
0a:ce:e6:79:f5:3d:57:2c:a3:f5:a9:4a:cf:85:34:
ea:22:48:42:8c:47:00:c1:4c:59:1f:a7:14:5f:09:
8a:bf:e1:27:fe:0c:2d:ca:14:b7:ec:11:a5:f9:ff:
2c:68:09:60:b5:eb:48:c1:4d:78:26:8f:60:20:5a:
5e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AE:41:ED:67:F7:E3:7C:68:07:B6:46:AD:C8:21:5A:0D:43:81:54
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e2:a6:01:2b:a3:26:7c:b9:a8:81:e8:8c:75:22:4c:ff:17:
e0:b9:e3:e9:20:65:b9:97:23:c9:fa:6c:18:62:1f:8d:a2:09:
ee:89:92:44:2d:9a:f5:8d:b2:c3:c6:0a:ea:10:87:ff:07:6e:
34:96:ba:4a:8b:3f:a6:28:8b:4e:5c:c5:a9:ba:4e:21:f7:e6:
62:0c:92:2c:0f:86:30:8d:1b:8b:85:0c:0b:9a:f8:25:4f:30:
85:cf:32:87:92:dc:50:86:aa:37:3a:6d:cd:03:d1:77:ad:df:
66:8e:d7:75:12:73:1c:cf:af:7b:ca:87:17:38:9c:cc:6c:f3:
9b:72:94:52:84:4c:86:25:0b:4c:8b:3d:3e:be:6f:cd:b4:12:
a6:50:37:a9:cb:51:59:00:43:e3:ff:56:fe:09:ae:47:28:be:
ce:eb:23:06:78:8b:d2:4c:84:88:c8:54:37:2e:f7:11:61:02:
b5:44:73:e3:ff:67:b5:aa:8b:65:2c:15:ff:6a:27:c9:9c:64:
87:a1:9a:56:ba:a9:d8:eb:bc:84:16:79:ad:5a:e6:7d:a9:4c:
7f:f3:c4:b5:be:7d:58:a6:8b:97:60:65:11:58:1e:f5:5c:44:
94:cd:71:fa:90:4d:83:cc:70:8b:1f:b2:7d:8a:15:a0:e2:e0:
f8:16:b9:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9SEdAGx6yoAG9TfPUYC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMDEwOTM4ZDllZjcyMTU4ZmM5OGJkNDVkZTcxYjBiMWE5
ZmY3MjkwHhcNMjUxMTA0MTMwMTE4WhcNMjUxMTA1MTMwMTE4WjAzMTEwLwYDVQQD
Eyg3ZGFlNDFlZDY3ZjdlMzdjNjgwN2I2NDZhZGM4MjE1YTBkNDM4MTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/5+XjK2Z+KOT+QD05K8qOqGx7r3
DM7dMLdZdWJcPErUHy6d7makDH7Pw5ZlX9tj3pWBzMAv91Im1dmwcL/U21AKh5h4
Nfz9RzoNsItLVD/n8rM5b4w1mV2RiUo8BVVWo/xr7GpnDX/DAk0jfsjy3UWjKSAJ
rE44rUO7M5I6FyiX7P18M6MXt/0KXnrvw5Y/QSiEeiiSmVBiV1oDt6Zn5+P8vL0H
tnCpjFZLe2Q11po9XDEKcC9JN8yhYwXRWeAXjO8KzuZ59T1XLKP1qUrPhTTqIkhC
jEcAwUxZH6cUXwmKv+En/gwtyhS37BGl+f8saAlgtetIwU14Jo9gIFpeZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2uQe1n9+N8aAe2Rq3IIVoNQ4FUMB8GA1UdIwQY
MBaAFN0BCTjZ73IVj8mL1F3nGwsan/cpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYt
Y2VmZjU0NmM5MzNlLzEvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYtY2VmZjU0NmM5MzNl
LzEvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASeKmASuj
Jny5qIHojHUiTP8X4Lnj6SBluZcjyfpsGGIfjaIJ7omSRC2a9Y2yw8YK6hCH/wdu
NJa6Sos/piiLTlzFqbpOIffmYgySLA+GMI0bi4UMC5r4JU8whc8yh5LcUIaqNzpt
zQPRd63fZo7XdRJzHM+ve8qHFziczGzzm3KUUoRMhiULTIs9Pr5vzbQSplA3qctR
WQBD4/9W/gmuRyi+zusjBniL0kyEiMhUNy73EWECtURz4/9ntaqLZSwV/2onyZxk
h6GaVrqp2Ou8hBZ5rVrmfalMf/PEtb59WKaLl2BlEVge9VxElM1x+pBNg8xwix+y
fYoVoOLg+Ba5pw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:45 2025 by rpki-client