Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
File: rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json)
Hash identifier: zy8myUAdYkqbLAF/k718XT6jQFbbrK6+DJ1XWFF0+z8=
Subject key identifier: 1D:CA:A1:08:A3:66:C5:A0:DE:60:82:7E:D2:56:25:79:10:43:3A:E6
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial: 019A4EF4717A87DA842B7A7BAC162FCE1809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
Manifest number: 0DF4
Signing time: Tue 04 Nov 2025 13:00:33 +0000
Manifest this update: Tue 04 Nov 2025 13:00:33 +0000
Manifest next update: Wed 05 Nov 2025 13:00:33 +0000
Files and hashes: 1: QrB38IR31JfmSrfp5ttgTReGTWo.roa (hash: tObzEsfYNmXi9X+/o+rGLlyYSek2LoSQ9N7PVMYEfqA=)
2: n3iPjhImnBjarzP2Rj2tOx0dNiE.roa (hash: lUEC9I8tI5NUjUJh9guJCH2H+g0KkZWinekNZT2+2Io=)
3: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: +D9a23GHdujWbXLX4lTfSni8WpbHR6qYZH2Iv0WJ+gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:71:7a:87:da:84:2b:7a:7b:ac:16:2f:ce:18:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Validity
Not Before: Nov 4 13:00:33 2025 GMT
Not After : Nov 5 13:00:33 2025 GMT
Subject: CN=1dcaa108a366c5a0de60827ed256257910433ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:77:64:40:17:ce:7d:18:42:bb:2e:d6:73:4b:
f4:10:35:80:f4:eb:d3:89:25:a1:42:6c:71:ac:16:
10:b3:19:22:d9:8c:5a:d0:87:1f:8d:8f:ce:81:5b:
61:18:a6:27:1a:61:cb:ee:fd:92:f0:e0:45:2d:ba:
74:1a:dc:b5:20:16:75:56:9c:5e:ce:d5:f9:ff:a1:
9c:7b:10:66:ca:a2:d5:ba:7e:bf:06:80:d0:1a:1c:
ff:8e:ef:21:e2:61:1a:11:31:ca:13:bf:32:08:b7:
59:22:7f:58:84:03:d3:bd:fd:2e:17:57:18:3b:9d:
bb:27:24:92:7f:c7:88:8c:8c:b5:ec:e2:68:0f:cc:
5f:a1:7f:b4:b7:50:ae:36:72:dd:d6:3b:e7:41:66:
b8:56:f7:bc:86:ee:d0:79:73:6d:b4:1c:c4:87:7b:
59:8b:8b:4e:f4:07:c4:3d:cb:e6:b1:1c:43:55:28:
0c:83:35:97:10:a7:44:50:5a:b9:11:93:03:1e:2a:
cb:dd:85:71:d9:d0:60:f6:92:6f:3d:9d:f7:49:6f:
c4:5c:3a:bb:22:c1:83:70:d1:3d:37:50:a7:1d:df:
9c:72:f3:d4:76:df:2f:83:32:1f:2a:27:11:d9:ee:
8d:49:0f:a4:31:0a:a6:41:2f:f6:6e:f0:aa:76:67:
06:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CA:A1:08:A3:66:C5:A0:DE:60:82:7E:D2:56:25:79:10:43:3A:E6
X509v3 Authority Key Identifier:
keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e4:3c:84:ef:f2:10:20:18:81:67:45:79:fd:fd:d7:ae:ec:
6c:2e:78:27:81:93:3c:05:68:da:77:2c:46:a2:8e:53:74:14:
96:7b:bc:43:9e:af:19:44:d6:ef:d2:34:98:b9:22:02:78:09:
32:5b:25:36:90:38:5a:99:84:ad:0d:78:e0:41:16:94:cc:15:
ce:c1:7d:b7:12:8c:ab:e6:8d:e5:9d:0a:b7:fa:0e:14:86:37:
c3:9c:03:58:69:7a:ac:b1:63:5f:7f:9b:62:0a:c9:b5:24:bf:
29:0c:d7:7e:9e:41:38:7d:77:33:c4:c5:89:6a:64:e2:28:ee:
e0:1b:da:02:1d:5b:bd:df:f7:20:94:66:07:5c:37:32:c8:46:
48:04:ac:7a:27:7d:47:51:f9:95:4f:38:59:0c:f0:7d:df:9d:
bf:7e:78:3a:5d:ca:fd:8e:4b:af:ed:ad:37:cd:3e:61:1c:5c:
bb:0e:10:21:c3:74:f4:aa:77:ce:c9:56:bf:81:72:40:c6:29:
ad:2b:08:60:81:5b:1b:2a:db:17:14:1f:67:f0:f5:76:58:e1:
ce:31:7e:00:e2:a4:11:fe:e5:59:ba:8c:7c:d4:af:38:0f:23:
ed:ce:16:0a:4b:cd:88:c5:b6:46:58:6d:ce:41:c8:7b:97:7a:
77:d0:5e:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9HF6h9qEK3p7rBYvzhgJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYmRlYWQ0ZjFkMWM4ZGRhOTZkMWNkMTc4OWQ5ZGQzZTIz
YmYxNTMwHhcNMjUxMTA0MTMwMDMzWhcNMjUxMTA1MTMwMDMzWjAzMTEwLwYDVQQD
EygxZGNhYTEwOGEzNjZjNWEwZGU2MDgyN2VkMjU2MjU3OTEwNDMzYWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXdkQBfOfRhCuy7Wc0v0EDWA9OvT
iSWhQmxxrBYQsxki2Yxa0IcfjY/OgVthGKYnGmHL7v2S8OBFLbp0Gty1IBZ1Vpxe
ztX5/6GcexBmyqLVun6/BoDQGhz/ju8h4mEaETHKE78yCLdZIn9YhAPTvf0uF1cY
O527JySSf8eIjIy17OJoD8xfoX+0t1CuNnLd1jvnQWa4Vve8hu7QeXNttBzEh3tZ
i4tO9AfEPcvmsRxDVSgMgzWXEKdEUFq5EZMDHirL3YVx2dBg9pJvPZ33SW/EXDq7
IsGDcNE9N1CnHd+ccvPUdt8vgzIfKicR2e6NSQ+kMQqmQS/2bvCqdmcGDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3KoQijZsWg3mCCftJWJXkQQzrmMB8GA1UdIwQY
MBaAFK696tTx0cjdqW0c0XidndPiO/FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjIt
ODgzN2NhNjllMzk2LzEvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjItODgzN2NhNjllMzk2
LzEvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeeQ8hO/y
ECAYgWdFef39167sbC54J4GTPAVo2ncsRqKOU3QUlnu8Q56vGUTW79I0mLkiAngJ
MlslNpA4WpmErQ144EEWlMwVzsF9txKMq+aN5Z0Kt/oOFIY3w5wDWGl6rLFjX3+b
YgrJtSS/KQzXfp5BOH13M8TFiWpk4iju4BvaAh1bvd/3IJRmB1w3MshGSASseid9
R1H5lU84WQzwfd+dv354Ol3K/Y5Lr+2tN80+YRxcuw4QIcN09Kp3zslWv4FyQMYp
rSsIYIFbGyrbFxQfZ/D1dljhzjF+AOKkEf7lWbqMfNSvOA8j7c4WCkvNiMW2Rlht
zkHIe5d6d9BeWQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:59 2025 by rpki-client