Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
File: 3EtKGKfhUaN9peTM2qnn29iOnZM.mft (raw, json)
Hash identifier: Tomr4jQSQh0Yvg+py1SkieATpoIXOLyeYXms0JR/XZs=
Subject key identifier: EA:0B:4D:0C:15:BE:EF:C3:99:7D:37:D1:01:11:C5:8D:2B:CA:3D:CF
Authority key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
Certificate issuer: /CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Certificate serial: 019A4FCFE105E6187B9176061CE46EE0F46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
Manifest number: 06B6
Signing time: Tue 04 Nov 2025 17:00:14 +0000
Manifest this update: Tue 04 Nov 2025 17:00:14 +0000
Manifest next update: Wed 05 Nov 2025 17:00:14 +0000
Files and hashes: 1: 3EtKGKfhUaN9peTM2qnn29iOnZM.crl (hash: A4X8xgnYg5aqv8u3+LFnutQ+mFt/WBszx5SovDlzsuI=)
2: Q6We2_Kzknmf_FU65X_ThS9Li9U.roa (hash: T5kdvis2FcaJDZX7ZiymCfqr46qyRqmHtR1xf7wekhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:e1:05:e6:18:7b:91:76:06:1c:e4:6e:e0:f4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Validity
Not Before: Nov 4 17:00:14 2025 GMT
Not After : Nov 5 17:00:14 2025 GMT
Subject: CN=ea0b4d0c15beefc3997d37d10111c58d2bca3dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:60:60:ee:0a:fa:95:ab:30:61:e4:3e:f9:
0d:45:89:b7:43:8e:85:17:5e:1b:47:1b:67:35:d3:
ad:9d:6f:d0:6f:b7:ca:28:48:f1:12:bd:b3:f9:47:
7b:79:17:dc:e3:45:60:3a:70:a3:8b:aa:48:f6:92:
2c:b9:46:a0:2a:4b:06:d6:5c:f7:42:c0:2a:ed:42:
b6:d1:cb:61:6e:e6:3f:38:ad:8a:1c:95:94:de:d9:
68:41:a7:81:7e:ee:22:70:5f:96:ec:b0:c5:43:9a:
d7:60:10:a9:30:f4:e5:a8:52:4a:57:83:80:64:bf:
9e:f5:0e:bc:a6:38:48:d7:6b:8b:27:ca:ba:f5:b0:
dc:36:f5:01:85:5c:e7:8a:22:bb:2e:b3:f1:0b:fd:
7a:d9:75:7e:78:23:64:6d:16:6b:f4:a3:85:6b:36:
45:11:dc:d0:e8:56:de:9a:96:20:97:63:6e:6c:29:
51:9a:4d:df:40:54:39:04:dc:f9:c6:fa:4e:48:6d:
4d:b7:fd:6a:8f:ed:7f:3e:41:0e:1d:27:a7:51:c3:
25:c7:5d:28:f3:02:09:10:4f:85:21:cc:90:8c:e2:
d8:11:74:a2:23:79:9d:1f:b7:44:d8:90:35:de:9a:
78:a3:3f:4c:8c:50:fe:aa:81:9b:88:4d:6d:b0:52:
94:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0B:4D:0C:15:BE:EF:C3:99:7D:37:D1:01:11:C5:8D:2B:CA:3D:CF
X509v3 Authority Key Identifier:
keyid:DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6e:fc:8f:97:cb:ae:15:cc:95:c4:f3:0e:1e:cf:75:cb:42:
fb:47:5b:d8:90:29:1f:5d:1c:7d:6c:4c:35:d8:5c:2f:28:9a:
92:55:d7:b2:64:1c:5f:88:01:e1:79:a1:01:28:36:0f:6e:4b:
f5:50:12:c3:78:37:7e:a2:1a:f4:71:70:9a:5e:ae:e0:f9:58:
84:31:7c:43:ae:71:f5:69:fc:83:1b:e2:3d:d4:6f:4c:5e:3d:
bb:da:86:da:79:03:90:e4:6d:42:c8:c4:a9:ab:e7:2a:2d:5e:
0f:8d:b5:59:7f:a8:67:25:ea:19:ae:4e:02:0d:92:3a:26:25:
18:56:ae:0c:dc:a4:f0:bd:55:87:d5:ff:5c:ce:2d:65:f1:63:
9e:8f:1e:d9:2f:96:53:bf:91:9b:f6:27:4a:f0:73:40:6a:35:
16:59:af:15:c7:8c:37:60:3d:91:80:73:ca:5f:d6:6b:b2:fe:
21:f9:3f:33:44:e7:c0:b5:36:a3:0d:8a:f2:f1:b0:a9:91:07:
fc:16:9d:8b:47:67:7b:c1:1f:c6:5d:cd:51:fb:f0:2a:52:6d:
59:60:a8:a8:8d:6b:51:6a:e6:bb:da:f7:91:fc:2c:58:64:4b:
d0:9a:16:bb:c6:a4:ab:6f:cb:87:ad:03:c4:5c:19:25:f7:2a:
6a:77:62:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPz+EF5hh7kXYGHORu4PRqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGI0YTE4YTdlMTUxYTM3ZGE1ZTRjY2RhYTllN2RiZDg4
ZTlkOTMwHhcNMjUxMTA0MTcwMDE0WhcNMjUxMTA1MTcwMDE0WjAzMTEwLwYDVQQD
EyhlYTBiNGQwYzE1YmVlZmMzOTk3ZDM3ZDEwMTExYzU4ZDJiY2EzZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRFgYO4K+pWrMGHkPvkNRYm3Q46F
F14bRxtnNdOtnW/Qb7fKKEjxEr2z+Ud7eRfc40VgOnCji6pI9pIsuUagKksG1lz3
QsAq7UK20cthbuY/OK2KHJWU3tloQaeBfu4icF+W7LDFQ5rXYBCpMPTlqFJKV4OA
ZL+e9Q68pjhI12uLJ8q69bDcNvUBhVzniiK7LrPxC/162XV+eCNkbRZr9KOFazZF
EdzQ6FbempYgl2NubClRmk3fQFQ5BNz5xvpOSG1Nt/1qj+1/PkEOHSenUcMlx10o
8wIJEE+FIcyQjOLYEXSiI3mdH7dE2JA13pp4oz9MjFD+qoGbiE1tsFKUWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoLTQwVvu/DmX030QERxY0ryj3PMB8GA1UdIwQY
MBaAFNxLShin4VGjfaXkzNqp59vYjp2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNjFhMjEtMGI1YS00MzY3LTg0MWUt
M2RkMjkzZjc0ZTVlLzEvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zNjFhMjEtMGI1YS00MzY3LTg0MWUtM2RkMjkzZjc0ZTVl
LzEvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl278j5fL
rhXMlcTzDh7PdctC+0db2JApH10cfWxMNdhcLyiaklXXsmQcX4gB4XmhASg2D25L
9VASw3g3fqIa9HFwml6u4PlYhDF8Q65x9Wn8gxviPdRvTF49u9qG2nkDkORtQsjE
qavnKi1eD421WX+oZyXqGa5OAg2SOiYlGFauDNyk8L1Vh9X/XM4tZfFjno8e2S+W
U7+Rm/YnSvBzQGo1FlmvFceMN2A9kYBzyl/Wa7L+Ifk/M0TnwLU2ow2K8vGwqZEH
/Badi0dne8Efxl3NUfvwKlJtWWCoqI1rUWrmu9r3kfwsWGRL0JoWu8akq2/Lh60D
xFwZJfcqandi1A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:18:57 2025 by rpki-client