Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
File: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft (raw, json)
Hash identifier: 6oOF6W0Y3bTa6hKDJoCbpryvYdrvKBNaM6T9+THt+ds=
Subject key identifier: 43:08:A0:87:AB:17:A8:46:3C:D7:0B:69:3B:50:A4:E7:07:E8:6E:6C
Authority key identifier: DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
Certificate issuer: /CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Certificate serial: 019A52D2CC13468F1181F1BA8DF22ED34F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
Manifest number: F5
Signing time: Wed 05 Nov 2025 07:02:17 +0000
Manifest this update: Wed 05 Nov 2025 07:02:17 +0000
Manifest next update: Thu 06 Nov 2025 07:02:17 +0000
Files and hashes: 1: 1OnAxERvwCdnk__Rn-ReVSlbcoM.roa (hash: aqwsdMgIbP4mFzFG0p4x2dQgO0GnM+i3JMeyA55YC7E=)
2: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl (hash: RRKnSN2AX26FBXZHr1cBSHTvYNMQ9ne5R9hlzNbJw/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:cc:13:46:8f:11:81:f1:ba:8d:f2:2e:d3:4f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Validity
Not Before: Nov 5 07:02:17 2025 GMT
Not After : Nov 6 07:02:17 2025 GMT
Subject: CN=4308a087ab17a8463cd70b693b50a4e707e86e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7f:23:70:b0:6c:b9:47:b0:d5:fc:ca:2f:f3:
75:1b:d1:b4:e6:c3:80:08:41:66:0a:0a:0b:ef:17:
a9:94:4f:3e:10:a1:08:7e:18:38:f0:fa:7e:32:49:
48:e0:e6:d2:7c:e5:8e:20:9c:41:72:ce:7b:70:9f:
1f:c4:95:1f:a8:6d:62:32:31:0c:ec:ab:ad:8b:41:
db:3c:c0:78:91:81:e4:13:cb:0a:89:fd:e2:66:03:
c5:d8:e0:2c:86:34:26:4a:9f:07:40:55:16:05:04:
69:9d:21:03:9e:8f:2a:50:f6:6e:c1:a2:a3:26:49:
96:72:8d:3e:be:03:21:c8:fa:89:3d:f7:b8:bd:ef:
0b:20:06:ba:1d:04:75:5c:88:9c:d2:65:a0:e4:31:
15:42:ee:a5:57:90:ba:0f:34:a4:ee:c1:b1:6b:b5:
34:01:e2:09:5e:d4:a6:e7:8f:7d:6f:fb:4e:0b:82:
f8:0b:68:af:2a:c5:0b:60:dc:3f:71:e6:98:1a:d2:
0f:c5:ee:a1:1f:e6:a2:ff:6c:0d:6c:34:27:b5:d5:
93:c9:c5:88:3a:f0:21:2a:16:69:69:93:4d:0e:84:
2c:35:1e:12:3c:c6:40:8f:7b:3c:19:f5:ba:62:fb:
d7:81:87:cb:d7:7c:f5:61:b6:78:8d:09:45:ab:2d:
34:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:08:A0:87:AB:17:A8:46:3C:D7:0B:69:3B:50:A4:E7:07:E8:6E:6C
X509v3 Authority Key Identifier:
keyid:DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5a:41:40:b7:e1:5a:34:be:78:46:ef:4c:4b:77:5a:5e:98:
6b:76:1e:e1:40:05:3b:86:10:09:1c:5a:87:a6:97:3f:06:25:
09:46:e7:df:8a:34:b5:3a:8a:51:1f:23:db:40:17:97:0e:05:
cc:c9:91:ef:ee:d4:ae:2d:7b:4f:8e:b9:12:e7:f9:b9:78:56:
d2:07:38:b5:bc:81:99:47:e2:2e:2b:94:90:bc:aa:89:a2:d3:
5a:86:48:be:1f:64:b7:b7:70:0e:ef:06:02:fb:51:55:0f:f7:
d2:5d:08:59:56:ad:01:11:c9:40:80:24:d6:ea:7a:93:41:71:
34:65:58:f0:b6:eb:19:64:0b:96:07:e7:86:aa:6a:03:bb:47:
b4:1c:56:2d:f4:32:0b:14:85:0c:99:39:02:3e:db:17:d8:b8:
a3:4b:76:26:19:56:d4:60:77:f4:f6:2f:13:ed:cf:c3:0e:b9:
2d:09:8f:c7:d1:51:d0:93:3b:e5:68:9d:b3:d1:0e:50:73:1a:
6b:32:66:68:f0:76:0f:bb:77:fc:fe:62:74:45:fb:8d:fa:73:
54:90:72:99:21:40:5e:80:1c:7d:1c:b0:bc:ae:82:d3:94:a3:
1c:97:82:ce:79:10:b8:f6:85:f1:ad:ef:e1:07:e0:81:5f:e2:
75:00:c1:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0swTRo8RgfG6jfIu008DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2IxZDI3NzNhMDNkMzE3YTc3MDMxOTNkMmY0NTQyOWE5
NGJhOWYwHhcNMjUxMTA1MDcwMjE3WhcNMjUxMTA2MDcwMjE3WjAzMTEwLwYDVQQD
Eyg0MzA4YTA4N2FiMTdhODQ2M2NkNzBiNjkzYjUwYTRlNzA3ZTg2ZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X8jcLBsuUew1fzKL/N1G9G05sOA
CEFmCgoL7xeplE8+EKEIfhg48Pp+MklI4ObSfOWOIJxBcs57cJ8fxJUfqG1iMjEM
7Kuti0HbPMB4kYHkE8sKif3iZgPF2OAshjQmSp8HQFUWBQRpnSEDno8qUPZuwaKj
JkmWco0+vgMhyPqJPfe4ve8LIAa6HQR1XIic0mWg5DEVQu6lV5C6DzSk7sGxa7U0
AeIJXtSm5499b/tOC4L4C2ivKsULYNw/ceaYGtIPxe6hH+ai/2wNbDQntdWTycWI
OvAhKhZpaZNNDoQsNR4SPMZAj3s8GfW6YvvXgYfL13z1YbZ4jQlFqy001wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMIoIerF6hGPNcLaTtQpOcH6G5sMB8GA1UdIwQY
MBaAFN87HSdzoD0xencDGT0vRUKalLqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3pzZEozT2dQVEY2ZHdNWlBTOUZRcHFVdXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81MmQwODgtNjk4OS00ZTg5LTg3Nzct
NTI2ZGNiMmEyM2JkLzEvM3pzZEozT2dQVEY2ZHdNWlBTOUZRcHFVdXA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi81MmQwODgtNjk4OS00ZTg5LTg3NzctNTI2ZGNiMmEyM2Jk
LzEvM3pzZEozT2dQVEY2ZHdNWlBTOUZRcHFVdXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1pBQLfh
WjS+eEbvTEt3Wl6Ya3Ye4UAFO4YQCRxah6aXPwYlCUbn34o0tTqKUR8j20AXlw4F
zMmR7+7Uri17T465Euf5uXhW0gc4tbyBmUfiLiuUkLyqiaLTWoZIvh9kt7dwDu8G
AvtRVQ/30l0IWVatARHJQIAk1up6k0FxNGVY8LbrGWQLlgfnhqpqA7tHtBxWLfQy
CxSFDJk5Aj7bF9i4o0t2JhlW1GB39PYvE+3Pww65LQmPx9FR0JM75Wids9EOUHMa
azJmaPB2D7t3/P5idEX7jfpzVJBymSFAXoAcfRywvK6C05SjHJeCznkQuPaF8a3v
4QfggV/idQDB5g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:33:10 2025 by rpki-client