Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
File: 3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json)
Hash identifier: q8CxGBIDCB/rLAMHW8WbbhP5it2SAQ1Ftl7hs23eTk0=
Subject key identifier: 05:AA:E3:B8:78:CD:50:D2:12:98:D8:63:7E:CB:46:56:F0:41:EB:6A
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 019A4EF4A4AA51FF29D940B90430C0D1987F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
Manifest number: 1123
Signing time: Tue 04 Nov 2025 13:00:47 +0000
Manifest this update: Tue 04 Nov 2025 13:00:47 +0000
Manifest next update: Wed 05 Nov 2025 13:00:47 +0000
Files and hashes: 1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: X9zCIlcWO662ytFlzglx4qyyvarN91ZaqwFQ6NqErXM=)
2: 9yOwmAU645k5B-2q5IOc7M05GTo.roa (hash: E7bgo02yf2p1Xr2S53fCsY3j/+dXZDb8jPxeB97qfpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a4:aa:51:ff:29:d9:40:b9:04:30:c0:d1:98:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Nov 4 13:00:47 2025 GMT
Not After : Nov 5 13:00:47 2025 GMT
Subject: CN=05aae3b878cd50d21298d8637ecb4656f041eb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b3:29:9f:8d:96:d4:21:b5:e0:68:f5:4e:06:
68:54:96:bc:99:99:7c:d9:12:47:41:5f:8c:d1:31:
f5:f1:84:eb:bb:70:bb:84:62:8a:65:9e:db:e0:f2:
93:f1:df:92:56:ac:34:9b:0a:20:9a:e2:0a:ba:5e:
00:36:ab:c5:44:bd:41:74:53:cd:b3:db:49:a9:29:
09:b1:87:0e:dd:cb:16:b6:d7:8d:b9:26:f7:86:54:
c0:d6:cc:b1:0f:f0:08:10:60:7d:9d:33:4a:9e:e5:
ff:d7:58:cb:b1:8d:47:9b:3c:88:2f:f2:38:92:47:
6f:bd:12:1b:db:96:fc:ad:bd:da:16:77:c2:34:ab:
87:d8:91:3a:a9:02:81:0a:88:a2:19:24:15:ff:53:
14:70:ed:eb:03:9f:d4:2a:81:1d:4b:e9:27:31:28:
e8:21:65:28:b0:45:c1:4d:1b:d3:b7:3d:e8:1d:2a:
04:06:bb:e8:44:c5:62:91:d8:58:76:94:e8:ed:08:
f0:8d:98:2c:a1:b8:c7:5b:5f:cc:87:a8:b1:b5:02:
f8:47:e9:67:8e:35:6f:5d:6b:19:41:71:e2:06:e9:
21:2e:ea:2e:18:2f:00:12:31:69:6f:ff:ba:58:00:
26:a8:c9:48:3f:88:20:f1:fd:62:a7:5d:f6:21:ba:
b8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AA:E3:B8:78:CD:50:D2:12:98:D8:63:7E:CB:46:56:F0:41:EB:6A
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:dd:b3:f3:8c:c3:41:46:fe:50:60:4d:7a:9e:4e:5e:e4:49:
5f:11:b0:6f:d0:5b:df:f0:5c:ae:22:e2:d9:58:ad:d1:77:65:
45:38:b8:82:ad:05:37:37:d3:19:d9:8b:6e:54:a2:04:98:a8:
f4:c0:99:ed:f4:5e:6e:50:62:0e:0e:66:67:e2:46:4b:6d:8e:
5d:42:ed:26:67:54:3d:fb:40:97:77:3f:b9:d1:6f:64:e1:53:
5d:bc:21:d2:de:97:26:a1:5e:36:c0:e6:76:29:da:d4:60:1f:
55:17:ba:68:0a:70:51:28:bf:72:44:f4:9c:8b:a4:a9:cd:f8:
bc:92:d5:79:20:e8:05:12:38:50:75:5e:2f:ec:b5:5b:33:6a:
a4:7e:ed:37:c8:5d:56:b2:13:2e:75:1a:34:67:2e:7d:f2:78:
29:d1:fd:07:0d:63:51:29:2b:81:7b:7d:8f:20:ba:b6:75:bf:
52:5d:6d:9b:12:0f:1e:fd:6e:e4:32:d7:9a:5d:47:0a:92:fe:
06:12:92:c4:55:08:d5:8f:96:73:59:a5:75:1c:88:75:b4:c6:
ad:89:e7:68:31:3a:a5:e3:46:38:22:b5:ca:f4:0b:68:db:a3:
35:13:c3:f0:e7:6a:fb:71:0d:a1:28:e9:43:02:90:ea:bf:fc:
ef:f7:39:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9KSqUf8p2UC5BDDA0Zh/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkM2Q0MDExMTc1ZTVkZjdhM2Y1N2QzOGU3ODE1MGEyYzA1
ZmRkMWQwHhcNMjUxMTA0MTMwMDQ3WhcNMjUxMTA1MTMwMDQ3WjAzMTEwLwYDVQQD
EygwNWFhZTNiODc4Y2Q1MGQyMTI5OGQ4NjM3ZWNiNDY1NmYwNDFlYjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7Mpn42W1CG14Gj1TgZoVJa8mZl8
2RJHQV+M0TH18YTru3C7hGKKZZ7b4PKT8d+SVqw0mwogmuIKul4ANqvFRL1BdFPN
s9tJqSkJsYcO3csWtteNuSb3hlTA1syxD/AIEGB9nTNKnuX/11jLsY1HmzyIL/I4
kkdvvRIb25b8rb3aFnfCNKuH2JE6qQKBCoiiGSQV/1MUcO3rA5/UKoEdS+knMSjo
IWUosEXBTRvTtz3oHSoEBrvoRMVikdhYdpTo7QjwjZgsobjHW1/Mh6ixtQL4R+ln
jjVvXWsZQXHiBukhLuouGC8AEjFpb/+6WAAmqMlIP4gg8f1ip132Ibq4eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWq47h4zVDSEpjYY37LRlbwQetqMB8GA1UdIwQY
MBaAFN09QBEXXl33o/V9OOeBUKLAX90dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zMDg1ODktOTJmZS00NTkzLTkzZTQt
MmQwYTc4YmU4OTJkLzEvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zMDg1ODktOTJmZS00NTkzLTkzZTQtMmQwYTc4YmU4OTJk
LzEvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWd2z84zD
QUb+UGBNep5OXuRJXxGwb9Bb3/BcriLi2Vit0XdlRTi4gq0FNzfTGdmLblSiBJio
9MCZ7fReblBiDg5mZ+JGS22OXULtJmdUPftAl3c/udFvZOFTXbwh0t6XJqFeNsDm
dina1GAfVRe6aApwUSi/ckT0nIukqc34vJLVeSDoBRI4UHVeL+y1WzNqpH7tN8hd
VrITLnUaNGcuffJ4KdH9Bw1jUSkrgXt9jyC6tnW/Ul1tmxIPHv1u5DLXml1HCpL+
BhKSxFUI1Y+Wc1mldRyIdbTGrYnnaDE6peNGOCK1yvQLaNujNRPD8Odq+3ENoSjp
QwKQ6r/87/c5Jg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:08 2025 by rpki-client