Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
File: MT3NGHEiZlBFhpdnM8ofkvYmH14.mft (raw, json)
Hash identifier: eVhRR5/VbFrJI8O3+xS4RX9CO+zpVAPm+5o1HL0oGSI=
Subject key identifier: 6B:99:4F:D9:17:6B:55:30:9C:F2:B8:7B:09:D9:A5:49:50:4E:D2:A2
Authority key identifier: 31:3D:CD:18:71:22:66:50:45:86:97:67:33:CA:1F:92:F6:26:1F:5E
Certificate issuer: /CN=313dcd18712266504586976733ca1f92f6261f5e
Certificate serial: 019A4EF4709DB8091288E297F7B56BC11051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
Manifest number: 1538
Signing time: Tue 04 Nov 2025 13:00:33 +0000
Manifest this update: Tue 04 Nov 2025 13:00:33 +0000
Manifest next update: Wed 05 Nov 2025 13:00:33 +0000
Files and hashes: 1: MT3NGHEiZlBFhpdnM8ofkvYmH14.crl (hash: RJidsQV0JSVvjLfQ4iIBHo94kDXgaQMp/ubnRsIdMME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
rsync://rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:70:9d:b8:09:12:88:e2:97:f7:b5:6b:c1:10:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313dcd18712266504586976733ca1f92f6261f5e
Validity
Not Before: Nov 4 13:00:33 2025 GMT
Not After : Nov 5 13:00:33 2025 GMT
Subject: CN=6b994fd9176b55309cf2b87b09d9a549504ed2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:44:7f:12:c8:fc:2a:1e:6e:0c:a2:d8:e6:67:
ee:f9:b9:45:dc:45:16:c4:5c:f6:1a:8d:4d:14:5f:
fb:19:35:b4:64:14:7b:01:80:b6:53:17:80:b4:69:
f5:a9:8d:22:de:55:7d:73:99:a7:0b:a7:48:ab:92:
5c:7f:7f:9a:0b:9a:17:c4:42:3e:83:4e:25:e7:81:
da:f9:29:32:19:ac:6c:82:7b:9f:bb:c6:35:83:98:
ed:49:4f:4d:10:7f:25:a7:af:70:d6:98:ac:0c:af:
e8:86:c6:14:71:2f:fd:9c:1f:36:a7:4e:c5:7f:c4:
92:61:23:49:8a:1d:e7:46:47:f6:eb:2a:f9:bf:1e:
75:7a:6d:59:84:77:7f:3b:f0:52:95:af:1b:76:c0:
e6:3c:fe:93:03:d9:cc:7d:0b:11:90:54:db:6c:d2:
de:3d:62:14:e8:aa:98:a9:64:d1:ba:e2:35:91:db:
85:be:68:13:c1:9d:21:aa:88:c5:1c:b6:8c:08:40:
0e:93:4d:d6:71:67:77:2a:80:7f:6c:b9:49:59:a1:
bb:db:3e:37:09:b3:9d:16:96:c5:2f:93:af:32:f5:
10:e5:c4:8f:e2:49:71:92:0c:0c:11:d8:d4:b4:dc:
ca:17:a6:7c:ce:8c:e3:f8:c3:c2:32:de:16:8c:e7:
5e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:99:4F:D9:17:6B:55:30:9C:F2:B8:7B:09:D9:A5:49:50:4E:D2:A2
X509v3 Authority Key Identifier:
keyid:31:3D:CD:18:71:22:66:50:45:86:97:67:33:CA:1F:92:F6:26:1F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a7:58:0b:86:85:4d:b3:90:a9:40:42:fc:f2:76:13:72:aa:
26:18:d3:ca:53:c0:31:26:5e:92:83:2a:c1:6d:d5:12:b5:16:
38:bf:5b:a1:07:d2:47:b2:ef:03:b6:d1:31:ae:ef:0e:6a:49:
a6:8b:03:e0:8b:ea:de:ed:97:6c:2d:47:51:37:80:e0:4e:05:
8d:58:fc:19:0d:b1:0e:24:0f:bf:d3:7c:5b:2b:e1:b5:55:66:
c6:b3:d2:96:64:ff:91:64:9b:c6:9a:67:39:d7:6e:a9:43:1e:
2e:ba:08:c3:d1:ef:7c:cd:24:d5:9a:9c:bd:b3:e9:1e:44:ff:
b0:d3:f5:ba:22:04:86:51:0d:87:5b:08:35:80:1f:c6:9d:d0:
56:fe:63:37:e7:97:3b:3a:ef:58:63:76:62:72:72:00:f2:7b:
a8:ef:8a:aa:c1:58:a0:99:67:75:45:c4:6a:4a:49:3d:09:0f:
b6:4d:f0:a5:44:77:ae:c9:62:54:a6:aa:51:84:61:7c:b2:21:
db:23:aa:79:fd:7e:32:2e:06:dc:a8:95:4d:50:48:5c:40:0e:
ea:95:03:f5:da:29:28:e4:fc:eb:68:46:d5:0f:84:ca:a5:33:
7f:a3:5e:64:3a:a2:bd:07:4e:e1:92:2a:b0:99:b5:d7:8d:eb:
72:cb:2c:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9HCduAkSiOKX97VrwRBRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxM2RjZDE4NzEyMjY2NTA0NTg2OTc2NzMzY2ExZjkyZjYy
NjFmNWUwHhcNMjUxMTA0MTMwMDMzWhcNMjUxMTA1MTMwMDMzWjAzMTEwLwYDVQQD
Eyg2Yjk5NGZkOTE3NmI1NTMwOWNmMmI4N2IwOWQ5YTU0OTUwNGVkMmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ER/Esj8Kh5uDKLY5mfu+blF3EUW
xFz2Go1NFF/7GTW0ZBR7AYC2UxeAtGn1qY0i3lV9c5mnC6dIq5Jcf3+aC5oXxEI+
g04l54Ha+SkyGaxsgnufu8Y1g5jtSU9NEH8lp69w1pisDK/ohsYUcS/9nB82p07F
f8SSYSNJih3nRkf26yr5vx51em1ZhHd/O/BSla8bdsDmPP6TA9nMfQsRkFTbbNLe
PWIU6KqYqWTRuuI1kduFvmgTwZ0hqojFHLaMCEAOk03WcWd3KoB/bLlJWaG72z43
CbOdFpbFL5OvMvUQ5cSP4klxkgwMEdjUtNzKF6Z8zozj+MPCMt4WjOdeHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuZT9kXa1UwnPK4ewnZpUlQTtKiMB8GA1UdIwQY
MBaAFDE9zRhxImZQRYaXZzPKH5L2Jh9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVQzTkdIRWlabEJGaHBkbk04b2ZrdlltSDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9iOWVjZjktM2JhOC00N2U0LTg5NTQt
YzQxNWE2OGFmMGRkLzEvTVQzTkdIRWlabEJGaHBkbk04b2ZrdlltSDE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9iOWVjZjktM2JhOC00N2U0LTg5NTQtYzQxNWE2OGFmMGRk
LzEvTVQzTkdIRWlabEJGaHBkbk04b2ZrdlltSDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqdYC4aF
TbOQqUBC/PJ2E3KqJhjTylPAMSZekoMqwW3VErUWOL9boQfSR7LvA7bRMa7vDmpJ
posD4Ivq3u2XbC1HUTeA4E4FjVj8GQ2xDiQPv9N8WyvhtVVmxrPSlmT/kWSbxppn
OdduqUMeLroIw9HvfM0k1ZqcvbPpHkT/sNP1uiIEhlENh1sINYAfxp3QVv5jN+eX
OzrvWGN2YnJyAPJ7qO+KqsFYoJlndUXEakpJPQkPtk3wpUR3rsliVKaqUYRhfLIh
2yOqef1+Mi4G3KiVTVBIXEAO6pUD9dopKOT862hG1Q+EyqUzf6NeZDqivQdO4ZIq
sJm1143rcsssOA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:40 2025 by rpki-client