Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
File: 3V7mW6NorXTZoD_ygkQMhXeiFZY.mft (raw, json)
Hash identifier: hDhA5/mc3rqWCjpo1rlBTQkRc3vVJ1jSEsyl25w9qYc=
Subject key identifier: 1E:65:5D:FD:2A:F4:25:F4:08:D9:1F:C9:D2:65:4C:EA:3C:2C:FD:5B
Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
Certificate issuer: /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Certificate serial: 019A4E4FAEECF27C58076733AB341E268CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
Manifest number: 0D67
Signing time: Tue 04 Nov 2025 10:00:36 +0000
Manifest this update: Tue 04 Nov 2025 10:00:36 +0000
Manifest next update: Wed 05 Nov 2025 10:00:36 +0000
Files and hashes: 1: 3V7mW6NorXTZoD_ygkQMhXeiFZY.crl (hash: hpgahjmHLOrDWy8Lz1ugBf5jddICDjNcJru0ktV2pHk=)
2: Fu2SG4loZ2malz9WaofXCDUPGUQ.roa (hash: v34bq7itFiS09euDmLvsea1XPjuasihGiJjC++WIBUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:ae:ec:f2:7c:58:07:67:33:ab:34:1e:26:8c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Validity
Not Before: Nov 4 10:00:36 2025 GMT
Not After : Nov 5 10:00:36 2025 GMT
Subject: CN=1e655dfd2af425f408d91fc9d2654cea3c2cfd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:52:8d:89:d8:28:c4:0c:75:5c:9b:20:97:
38:80:49:a1:d9:4a:b1:4c:64:2c:58:09:81:65:0f:
1e:71:a5:12:20:95:b5:90:75:a5:f0:0b:da:3d:77:
0f:4c:33:52:1d:1f:69:cf:33:09:f7:5c:eb:56:65:
73:52:fa:78:4f:59:a9:7d:be:4f:97:fc:b7:bf:b4:
03:de:8a:a0:0e:8e:2f:3a:7e:fd:4b:43:f1:13:20:
07:f1:6a:cd:cc:2b:a3:64:be:93:fc:73:ab:21:58:
0b:fe:1e:39:11:8a:88:e8:28:3f:c8:fe:c9:fb:4b:
af:1a:fb:64:32:bd:21:d9:1f:22:91:e0:dd:5a:8d:
b2:6e:6f:12:76:bf:ab:71:bd:54:4d:06:e6:14:a6:
a6:ab:b6:e9:b5:15:92:71:12:de:64:e6:e1:b8:31:
d0:84:64:e4:22:31:42:b3:db:c7:4c:a2:b7:db:75:
f4:2d:fd:79:f9:37:13:18:1f:90:0e:31:5a:9a:21:
b8:79:d9:82:4c:71:7a:07:00:19:72:fa:17:f0:e8:
47:6f:a5:46:a9:91:c9:21:16:21:eb:b6:a0:9b:a8:
e4:8f:82:ab:05:94:51:7c:c1:ea:31:86:4b:05:38:
84:c6:8c:fe:0b:84:89:ce:e6:a8:ae:92:70:d6:37:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:65:5D:FD:2A:F4:25:F4:08:D9:1F:C9:D2:65:4C:EA:3C:2C:FD:5B
X509v3 Authority Key Identifier:
keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0a:bb:d3:bd:ad:4e:05:8c:e3:cb:7d:a3:d7:b8:8c:21:e9:
50:02:f3:e8:f9:57:e8:cc:16:18:84:74:f2:b0:d0:c7:05:b9:
22:eb:12:19:ea:88:fe:b6:45:8c:43:c3:b9:70:a7:0b:de:82:
55:0a:87:9b:60:30:b9:94:71:d0:19:34:47:c6:f7:b2:cf:3b:
da:94:cc:e3:8e:a4:c8:c1:84:c6:ff:36:f8:87:1e:cf:0e:f8:
c5:da:b9:93:fc:1f:30:4e:f3:07:05:02:ff:2d:7b:a9:91:77:
5a:fc:97:8f:b2:5e:d1:1f:3d:7a:61:fe:34:34:39:30:95:55:
6e:38:5a:2e:2b:f4:e2:f6:7c:18:9a:e6:4f:be:bc:af:f0:c1:
92:be:76:c2:99:06:b1:ba:01:0d:5b:cf:1e:5c:40:f4:ca:fa:
57:ad:35:95:a9:7f:60:44:3a:a5:5e:ba:30:58:c0:b3:a4:ad:
c7:5e:15:52:d0:68:a6:81:1e:44:79:0a:8f:84:bb:64:15:0c:
48:8d:03:e7:4f:f9:30:4a:f1:ce:cb:83:85:e1:5b:f2:8e:df:
02:43:0e:54:fa:ef:5b:84:fb:7d:e8:4b:5a:36:3a:f6:0a:b8:
17:03:0e:20:9c:a0:50:eb:4a:8b:21:02:05:74:ee:bb:61:52:
be:02:58:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT67s8nxYB2czqzQeJoypMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNWVlNjViYTM2OGFkNzRkOWEwM2ZmMjgyNDQwYzg1Nzdh
MjE1OTYwHhcNMjUxMTA0MTAwMDM2WhcNMjUxMTA1MTAwMDM2WjAzMTEwLwYDVQQD
EygxZTY1NWRmZDJhZjQyNWY0MDhkOTFmYzlkMjY1NGNlYTNjMmNmZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BhSjYnYKMQMdVybIJc4gEmh2Uqx
TGQsWAmBZQ8ecaUSIJW1kHWl8AvaPXcPTDNSHR9pzzMJ91zrVmVzUvp4T1mpfb5P
l/y3v7QD3oqgDo4vOn79S0PxEyAH8WrNzCujZL6T/HOrIVgL/h45EYqI6Cg/yP7J
+0uvGvtkMr0h2R8ikeDdWo2ybm8Sdr+rcb1UTQbmFKamq7bptRWScRLeZObhuDHQ
hGTkIjFCs9vHTKK323X0Lf15+TcTGB+QDjFamiG4edmCTHF6BwAZcvoX8OhHb6VG
qZHJIRYh67agm6jkj4KrBZRRfMHqMYZLBTiExoz+C4SJzuaorpJw1jf51QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5lXf0q9CX0CNkfydJlTOo8LP1bMB8GA1UdIwQY
MBaAFN1e5lujaK102aA/8oJEDIV3ohWWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1Y3bVc2Tm9yWFRab0RfeWdrUU1oWGVpRlpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kYzY4ZGQtMWRjOC00ODg4LWEzZWQt
ZWJkNzNiMTllYWU0LzEvM1Y3bVc2Tm9yWFRab0RfeWdrUU1oWGVpRlpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9kYzY4ZGQtMWRjOC00ODg4LWEzZWQtZWJkNzNiMTllYWU0
LzEvM1Y3bVc2Tm9yWFRab0RfeWdrUU1oWGVpRlpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagq7072t
TgWM48t9o9e4jCHpUALz6PlX6MwWGIR08rDQxwW5IusSGeqI/rZFjEPDuXCnC96C
VQqHm2AwuZRx0Bk0R8b3ss872pTM446kyMGExv82+Icezw74xdq5k/wfME7zBwUC
/y17qZF3WvyXj7Je0R89emH+NDQ5MJVVbjhaLiv04vZ8GJrmT768r/DBkr52wpkG
sboBDVvPHlxA9Mr6V601lal/YEQ6pV66MFjAs6Stx14VUtBopoEeRHkKj4S7ZBUM
SI0D50/5MErxzsuDheFb8o7fAkMOVPrvW4T7fehLWjY69gq4FwMOIJygUOtKiyEC
BXTuu2FSvgJYVg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:36:16 2025 by rpki-client