Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: O6NKPyugHaEVCZYzQALq2WeoXW9SB/7pXeuuUC3dA74=
Subject key identifier: B6:3D:D5:A5:93:E3:AF:E3:1B:E8:B5:9F:21:A5:38:7C:5C:BC:7C:E6
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 019A4E4F59DA6DACFB1CC6A7177C8EF9974C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:14 +0000
Manifest this update: Tue 04 Nov 2025 10:00:14 +0000
Manifest next update: Wed 05 Nov 2025 10:00:14 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: s4O8rn4clHn/4njnCHov/NuwtVak3yTy2wi+42sFpQE=)
2: 9euEZiQBZa0KQy87mhddaAGMyJs.roa (hash: SlkEYhw31htGhY3rwyORB+KNW056wx1mf03bV0slrXo=)
3: PbQAq4tBfBzJf67NNR29Pj0FkmA.roa (hash: 68zQoRFiAUVZyRagTzVHGcIdd/jEkcY9EEgWfXz5qFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:59:da:6d:ac:fb:1c:c6:a7:17:7c:8e:f9:97:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Nov 4 10:00:14 2025 GMT
Not After : Nov 5 10:00:14 2025 GMT
Subject: CN=b63dd5a593e3afe31be8b59f21a5387c5cbc7ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:ba:10:c7:17:bb:45:71:d3:9e:44:58:15:
07:1e:bf:c6:f8:73:73:e1:e3:da:ad:8d:09:5d:4a:
9c:c6:f1:7f:b7:55:af:52:a3:b8:d7:bc:98:e8:7e:
83:58:1d:d1:1a:15:4b:90:83:21:79:10:cc:eb:c2:
6e:66:0e:ac:46:86:c2:c1:89:39:b5:85:3b:b1:ae:
64:6b:da:23:49:60:39:ea:ae:eb:9d:fe:d6:0e:ff:
64:15:0d:38:ff:22:07:6a:fc:3d:6a:b4:6b:ed:4c:
38:28:bc:9b:8c:60:d8:0e:d8:53:8d:0f:0a:1c:1b:
13:b7:cb:7e:38:16:2a:2b:5b:b3:c0:79:27:b3:9f:
2a:01:65:0e:af:e2:78:a8:e7:78:4a:12:8e:af:ba:
70:df:2b:5c:03:bb:75:0e:17:cd:ef:a5:5c:a7:6c:
46:99:42:82:5a:2e:83:96:bb:cd:77:8d:79:02:2b:
26:dd:82:01:c7:1e:42:5b:36:d9:4f:37:25:79:13:
61:be:ab:ab:dd:50:4c:4e:bf:f3:67:92:93:12:4a:
b5:4e:50:b6:f5:73:15:21:f1:ab:c9:db:d7:67:b5:
dd:c7:61:ae:63:54:a5:de:a4:19:6f:0c:81:fd:5e:
ae:b9:77:9e:00:79:47:77:0c:be:5e:da:19:d8:39:
b0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3D:D5:A5:93:E3:AF:E3:1B:E8:B5:9F:21:A5:38:7C:5C:BC:7C:E6
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:cc:20:b9:8d:4f:ff:d5:65:55:04:64:2a:5b:17:32:65:68:
00:d3:7c:08:26:1f:fa:ce:b7:fb:45:1f:85:f9:04:21:71:48:
da:8c:eb:da:82:5d:04:f7:65:90:5a:57:00:ac:ee:3e:60:8b:
a2:5d:54:9d:d2:01:0a:4c:ec:10:b0:db:67:b5:ae:86:a3:3a:
7f:40:1a:95:16:dc:1b:45:f1:f4:2b:69:d9:fd:30:95:99:41:
de:35:98:3f:e4:57:aa:65:54:99:ab:79:6b:cf:37:db:12:06:
b0:b4:25:df:fd:2e:30:4d:48:d9:e6:22:d8:5d:b4:9f:c1:6f:
9f:43:a2:7f:96:1e:b4:d2:eb:21:13:f9:8c:c7:13:0b:ef:f0:
0c:c4:dd:01:6c:6c:59:88:dc:7f:df:cc:11:7f:77:94:c9:87:
2f:95:ad:61:37:1c:db:74:c8:ef:6b:b8:ab:42:16:18:32:7d:
84:ca:23:59:de:a2:91:e0:41:53:74:c4:c0:a4:e5:90:c8:39:
f0:cb:b6:87:43:83:89:4c:8d:dd:71:ad:b5:1c:e2:6e:f0:50:
3b:d7:fd:53:40:bb:50:db:cf:bb:a6:85:00:0c:da:d6:09:c4:
27:50:74:3a:5b:47:8a:5f:ca:a2:3b:a6:cb:8c:6d:f8:aa:7d:
b7:34:cd:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT1nabaz7HManF3yO+ZdMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYTQ2ZWFhZTdhZWYyZjQ0ZmU2NjAxNjJiYjlkYzcwZDY1
MjVhZjEwHhcNMjUxMTA0MTAwMDE0WhcNMjUxMTA1MTAwMDE0WjAzMTEwLwYDVQQD
EyhiNjNkZDVhNTkzZTNhZmUzMWJlOGI1OWYyMWE1Mzg3YzVjYmM3Y2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0K6EMcXu0Vx055EWBUHHr/G+HNz
4eParY0JXUqcxvF/t1WvUqO417yY6H6DWB3RGhVLkIMheRDM68JuZg6sRobCwYk5
tYU7sa5ka9ojSWA56q7rnf7WDv9kFQ04/yIHavw9arRr7Uw4KLybjGDYDthTjQ8K
HBsTt8t+OBYqK1uzwHkns58qAWUOr+J4qOd4ShKOr7pw3ytcA7t1DhfN76Vcp2xG
mUKCWi6DlrvNd415Aism3YIBxx5CWzbZTzcleRNhvqur3VBMTr/zZ5KTEkq1TlC2
9XMVIfGrydvXZ7Xdx2GuY1Sl3qQZbwyB/V6uuXeeAHlHdwy+XtoZ2DmwyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLY91aWT46/jG+i1nyGlOHxcvHzmMB8GA1UdIwQY
MBaAFN6kbqrnrvL0T+ZgFiu53HDWUlrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEt
MWZhOWFjNTgwYjhlLzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEtMWZhOWFjNTgwYjhl
LzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkswguY1P
/9VlVQRkKlsXMmVoANN8CCYf+s63+0UfhfkEIXFI2ozr2oJdBPdlkFpXAKzuPmCL
ol1UndIBCkzsELDbZ7WuhqM6f0AalRbcG0Xx9Ctp2f0wlZlB3jWYP+RXqmVUmat5
a8832xIGsLQl3/0uME1I2eYi2F20n8Fvn0Oif5YetNLrIRP5jMcTC+/wDMTdAWxs
WYjcf9/MEX93lMmHL5WtYTcc23TI72u4q0IWGDJ9hMojWd6ikeBBU3TEwKTlkMg5
8Mu2h0ODiUyN3XGttRzibvBQO9f9U0C7UNvPu6aFAAza1gnEJ1B0OltHil/Kojum
y4xt+Kp9tzTN+A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:39 2025 by rpki-client