Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: 3smIFYqpeR/VgzWk+WmR2p5zU5l0ua6aqomGlnMeAAA=
Subject key identifier: 79:45:B3:24:DA:53:DA:5A:2E:2A:94:7F:4A:26:6F:E9:CA:5C:D0:ED
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 019A4D075A551E68604A7739296319C18725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 04:01:58 +0000
Manifest this update: Tue 04 Nov 2025 04:01:58 +0000
Manifest next update: Wed 05 Nov 2025 04:01:58 +0000
Files and hashes: 1: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: fFjpV8/lHsegLlCdnYc2w8IXikVe/c0kiTi15D3WNxI=)
2: zwiEAg55TtHyIaM_PRVFnX4DSAo.roa (hash: ylKaMThBpY1ZvZheIftHUUCXqnEHukLo3wFRWG0DpZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:5a:55:1e:68:60:4a:77:39:29:63:19:c1:87:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Nov 4 04:01:58 2025 GMT
Not After : Nov 5 04:01:58 2025 GMT
Subject: CN=7945b324da53da5a2e2a947f4a266fe9ca5cd0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ed:6c:ce:f0:4d:5f:a6:df:42:26:0b:69:77:
f4:97:80:34:4f:bb:a8:2b:8b:16:e1:e9:55:85:a3:
a9:ee:cd:dc:4b:bb:b7:71:e3:59:30:53:ac:ef:2b:
4b:75:ea:e2:8d:b8:e0:1a:63:fc:1d:f5:04:b0:20:
e2:35:4f:b6:4d:a3:02:43:d9:2b:f5:a0:2f:e5:7f:
b1:36:79:35:08:91:1d:d8:4b:47:bf:96:0d:6a:69:
e9:89:0b:25:4d:4b:27:26:00:8a:c5:f7:e9:cd:d6:
8a:a8:9b:66:97:f4:06:12:d7:02:79:85:fd:1b:d9:
0a:3a:39:1b:53:69:55:8d:45:9d:df:85:6c:3d:51:
ce:71:84:6e:54:ec:bb:9e:35:10:7b:d6:c3:78:eb:
2c:33:b1:55:69:81:b1:ac:70:00:3b:e1:a3:3b:5e:
1c:d7:3a:01:ab:c2:66:61:01:0e:0e:e9:c4:1e:ac:
5f:1c:b7:d4:b5:6d:ab:c6:80:df:28:3a:c3:ab:e8:
2c:ce:ae:93:e8:bc:9d:4c:68:15:b8:63:6e:7f:82:
68:42:79:21:1a:ee:0b:91:09:89:e7:d8:97:81:d7:
53:49:47:47:1d:75:be:74:b6:30:ab:28:97:3e:de:
d5:54:14:0e:fd:8c:bd:5c:2a:f1:89:f2:51:44:db:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:45:B3:24:DA:53:DA:5A:2E:2A:94:7F:4A:26:6F:E9:CA:5C:D0:ED
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d1:fe:af:fa:a2:62:d7:0e:c6:91:77:3d:bf:86:a6:1a:6a:
05:da:4b:75:35:70:d6:11:af:36:52:08:cb:36:36:5a:0a:79:
c9:75:9d:b7:88:2b:f9:13:d1:dd:76:b2:64:8d:0b:fc:d9:4b:
dc:81:4d:09:c9:de:77:d4:e3:5b:d2:b6:e3:41:43:de:d9:95:
c1:92:32:c8:1e:0f:61:5c:ba:9b:53:a8:ab:55:80:52:19:68:
62:f6:26:24:4f:6e:19:2c:fe:ee:b9:27:72:dc:12:bc:ab:ac:
59:6b:8e:62:7b:97:cd:05:ab:94:6e:a5:9a:bd:0e:d4:e3:c6:
d2:92:0e:d1:36:aa:8b:0e:d1:f9:e9:4d:ef:4b:b4:dd:9c:ae:
d1:46:40:94:20:4e:31:a5:45:af:67:ad:b8:0b:a4:a5:04:03:
30:f4:03:2e:65:76:b2:6e:a5:b1:97:76:bb:71:79:7e:85:68:
72:32:07:14:f7:8a:75:4e:58:e7:30:29:64:4b:fe:67:e9:39:
06:2a:f6:1a:61:52:bf:0d:79:7a:5a:00:66:87:6d:77:24:b2:
c2:6f:9c:e9:7c:5a:60:a4:2b:cf:5b:fa:35:9e:34:b0:cf:69:
3b:e7:2e:11:6a:d5:fe:cd:6a:5e:16:ab:b5:5a:fb:cb:15:25:
e1:d1:5f:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNB1pVHmhgSnc5KWMZwYclMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNzgyZGFlM2Q0MGNhZjIyMjMyNjI1NDFjNDA1NGU2Mjk0
NWQ5MzMwHhcNMjUxMTA0MDQwMTU4WhcNMjUxMTA1MDQwMTU4WjAzMTEwLwYDVQQD
Eyg3OTQ1YjMyNGRhNTNkYTVhMmUyYTk0N2Y0YTI2NmZlOWNhNWNkMGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+1szvBNX6bfQiYLaXf0l4A0T7uo
K4sW4elVhaOp7s3cS7u3ceNZMFOs7ytLderijbjgGmP8HfUEsCDiNU+2TaMCQ9kr
9aAv5X+xNnk1CJEd2EtHv5YNamnpiQslTUsnJgCKxffpzdaKqJtml/QGEtcCeYX9
G9kKOjkbU2lVjUWd34VsPVHOcYRuVOy7njUQe9bDeOssM7FVaYGxrHAAO+GjO14c
1zoBq8JmYQEODunEHqxfHLfUtW2rxoDfKDrDq+gszq6T6LydTGgVuGNuf4JoQnkh
Gu4LkQmJ59iXgddTSUdHHXW+dLYwqyiXPt7VVBQO/Yy9XCrxifJRRNv0ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlFsyTaU9paLiqUf0omb+nKXNDtMB8GA1UdIwQY
MBaAFK94La49QMryIjJiVBxAVOYpRdkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kZWU4MzMtZmU1Yi00YzEwLWJiZWMt
ZjAxMjVkMDJlMjYyLzEvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kZWU4MzMtZmU1Yi00YzEwLWJiZWMtZjAxMjVkMDJlMjYy
LzEvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidH+r/qi
YtcOxpF3Pb+GphpqBdpLdTVw1hGvNlIIyzY2Wgp5yXWdt4gr+RPR3XayZI0L/NlL
3IFNCcned9TjW9K240FD3tmVwZIyyB4PYVy6m1Ooq1WAUhloYvYmJE9uGSz+7rkn
ctwSvKusWWuOYnuXzQWrlG6lmr0O1OPG0pIO0Taqiw7R+elN70u03Zyu0UZAlCBO
MaVFr2etuAukpQQDMPQDLmV2sm6lsZd2u3F5foVocjIHFPeKdU5Y5zApZEv+Z+k5
Bir2GmFSvw15eloAZodtdySywm+c6XxaYKQrz1v6NZ40sM9pO+cuEWrV/s1qXhar
tVr7yxUl4dFfZg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:51 2025 by rpki-client