Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier: VIt7eTQRzmELpd+5ai3nxjF4RGNnmBbD1OmArDm2RTI=
Subject key identifier: DE:22:91:4C:12:20:61:D6:42:F9:E5:20:2E:AE:50:AB:D8:D1:4A:9B
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 019A4E86576FDCCDE2E81D28632CA7ACE2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:18 +0000
Manifest this update: Tue 04 Nov 2025 11:00:18 +0000
Manifest next update: Wed 05 Nov 2025 11:00:18 +0000
Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: y4S59U41MVolWtGJxS0IiLL2ugBS+Hesf3Zf/Ktxe8w=)
2: L9b4ducPYyR6qc5uaeOni9YJQHA.roa (hash: vaOymUj3eUPmbh7xiKllx8KgzftTh5qvMK+aeen3RXg=)
3: kpbrBAbvkEz7iwjj9qvNJnx2KAI.roa (hash: EaUeR1cKI29E16jF0XdNnwUwftG+vurlmN50dR3srjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:57:6f:dc:cd:e2:e8:1d:28:63:2c:a7:ac:e2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: Nov 4 11:00:18 2025 GMT
Not After : Nov 5 11:00:18 2025 GMT
Subject: CN=de22914c122061d642f9e5202eae50abd8d14a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8f:db:1c:d6:b5:8b:8a:71:b5:28:2d:ad:b7:
23:50:d4:59:aa:47:a8:74:47:fb:8d:71:89:19:dd:
1e:26:aa:31:79:69:cc:f3:f6:2f:5c:80:84:cb:ac:
54:86:22:d6:3b:a5:b4:d9:05:d8:34:64:02:b0:3c:
03:9e:a7:76:88:08:db:3b:6e:7f:f6:77:cc:90:f6:
5a:9b:e9:a4:6d:fc:d7:78:2a:2c:b3:ae:d3:46:ba:
35:96:7a:25:8d:2b:14:07:3e:fe:d6:66:fb:63:33:
c3:96:14:20:7c:55:60:61:df:0e:77:ad:12:55:27:
20:b0:1e:3e:7a:03:e7:db:e6:73:7d:6e:90:33:55:
78:e6:0b:7f:3e:4c:32:c9:66:1f:04:44:db:83:eb:
52:5b:ba:c2:f0:ce:66:ad:20:3b:5a:47:f3:82:21:
3e:bd:a9:d5:ec:d8:42:a6:e2:b0:b7:61:2f:a4:eb:
d1:b7:d4:b4:4a:ff:81:72:2f:34:62:ac:82:0f:f7:
a0:67:be:f7:5d:1d:cd:f9:e9:c2:09:31:0e:10:07:
6f:23:f1:49:49:0f:19:6b:2b:0b:19:e5:91:12:a8:
93:75:5a:7d:16:ae:e3:ea:a0:66:fa:77:f3:ae:f3:
f8:2e:01:16:4d:33:17:89:e8:98:fb:4e:bc:73:b7:
ae:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:22:91:4C:12:20:61:D6:42:F9:E5:20:2E:AE:50:AB:D8:D1:4A:9B
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1c:25:9f:22:9a:38:41:79:f2:17:87:db:f2:99:23:9d:81:
b1:45:6d:05:de:c6:21:ea:97:7a:0b:f9:17:e5:1f:3b:39:eb:
dd:ae:8a:42:0c:b3:17:73:ff:17:eb:b0:9d:42:5f:50:02:3d:
e1:98:13:58:53:2e:b4:42:dc:f8:f8:02:03:ba:15:74:65:10:
4d:48:3f:50:24:23:0a:66:6d:dd:ae:aa:df:fd:29:45:b5:ff:
7d:f2:5c:76:86:4f:bb:0f:0a:e8:fa:83:c2:24:4b:71:ae:9e:
ce:dd:af:f5:f6:03:ef:bb:b9:17:6f:c0:00:16:b1:32:4b:d7:
5a:3c:d4:24:d1:46:18:36:6b:81:ef:0a:d2:7b:55:4b:d9:ca:
81:1a:0c:6a:28:53:d4:5b:a8:70:d1:c5:09:fa:d2:e9:88:f9:
28:e3:68:0c:d5:2f:19:a2:d6:9f:32:e6:ab:a7:18:d7:8d:82:
29:8e:d5:56:27:5a:37:c1:43:39:75:8c:8a:df:92:fd:d1:ef:
d5:6f:e6:3d:70:08:d4:18:b0:65:46:d0:cf:50:3f:97:7e:c1:
3a:ec:3e:5c:39:f6:d2:50:6d:b8:65:2b:c8:26:15:bb:5f:b6:
f7:d4:47:3c:ef:a0:dc:12:e8:29:2c:84:c6:a6:2c:84:5e:37:
82:d1:c7:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhldv3M3i6B0oYyynrOK+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNjNlYjYzMTliYTQ1NGQzOTc2NDU5NDVjZTU0Mzk1NzZm
YWM3NDEwHhcNMjUxMTA0MTEwMDE4WhcNMjUxMTA1MTEwMDE4WjAzMTEwLwYDVQQD
EyhkZTIyOTE0YzEyMjA2MWQ2NDJmOWU1MjAyZWFlNTBhYmQ4ZDE0YTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko/bHNa1i4pxtSgtrbcjUNRZqkeo
dEf7jXGJGd0eJqoxeWnM8/YvXICEy6xUhiLWO6W02QXYNGQCsDwDnqd2iAjbO25/
9nfMkPZam+mkbfzXeCoss67TRro1lnoljSsUBz7+1mb7YzPDlhQgfFVgYd8Od60S
VScgsB4+egPn2+ZzfW6QM1V45gt/PkwyyWYfBETbg+tSW7rC8M5mrSA7WkfzgiE+
vanV7NhCpuKwt2EvpOvRt9S0Sv+Bci80YqyCD/egZ773XR3N+enCCTEOEAdvI/FJ
SQ8ZaysLGeWREqiTdVp9Fq7j6qBm+nfzrvP4LgEWTTMXieiY+068c7euDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4ikUwSIGHWQvnlIC6uUKvY0UqbMB8GA1UdIwQY
MBaAFN5j62MZukVNOXZFlFzlQ5V2+sdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMt
MWUxOGY1YjQ5MDVkLzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMtMWUxOGY1YjQ5MDVk
LzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRwlnyKa
OEF58heH2/KZI52BsUVtBd7GIeqXegv5F+UfOznr3a6KQgyzF3P/F+uwnUJfUAI9
4ZgTWFMutELc+PgCA7oVdGUQTUg/UCQjCmZt3a6q3/0pRbX/ffJcdoZPuw8K6PqD
wiRLca6ezt2v9fYD77u5F2/AABaxMkvXWjzUJNFGGDZrge8K0ntVS9nKgRoMaihT
1FuocNHFCfrS6Yj5KONoDNUvGaLWnzLmq6cY142CKY7VVidaN8FDOXWMit+S/dHv
1W/mPXAI1BiwZUbQz1A/l37BOuw+XDn20lBtuGUryCYVu1+299RHPO+g3BLoKSyE
xqYshF43gtHHYg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:26:00 2025 by rpki-client