Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
File: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft (raw, json)
Hash identifier: b+UrY5MohQLR/u/mK/dZHVqA78gymZpj2P7as3lffkk=
Subject key identifier: 4A:87:64:A8:4E:47:72:43:13:6E:B7:14:ED:FC:57:87:EA:08:F9:71
Authority key identifier: DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
Certificate issuer: /CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Certificate serial: 019A4D7378C8B8655DBCB7E88AEAF97E6378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
Manifest number: 0847
Signing time: Tue 04 Nov 2025 06:00:04 +0000
Manifest this update: Tue 04 Nov 2025 06:00:04 +0000
Manifest next update: Wed 05 Nov 2025 06:00:04 +0000
Files and hashes: 1: 0BpOv7ID4DFMrx668XTbhOenKNs.roa (hash: H36mM6sLdMLgLe3nc9mJCOTiie2y6GYALZ/i/6VFQPQ=)
2: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl (hash: haj/3Q9MpMtjDE7KNXwlCG9JhZOx7nYCtDXs+JbvxQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:78:c8:b8:65:5d:bc:b7:e8:8a:ea:f9:7e:63:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Validity
Not Before: Nov 4 06:00:04 2025 GMT
Not After : Nov 5 06:00:04 2025 GMT
Subject: CN=4a8764a84e477243136eb714edfc5787ea08f971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:33:ee:2f:61:86:fa:b1:e7:7a:05:58:db:0a:
81:8d:ea:97:0f:99:4d:f6:af:ec:20:e8:72:cf:7f:
3d:5b:5c:90:a0:3c:50:65:89:8c:4c:22:27:f5:45:
26:8a:5b:37:16:d0:b3:16:92:85:10:d9:09:2b:e9:
40:9a:5a:de:8c:fb:22:00:0c:62:27:7c:35:4f:26:
b5:48:8e:42:71:25:15:86:d8:7d:84:e2:ae:d8:a3:
8e:d2:f8:8d:49:cb:9f:81:ae:42:e4:1c:97:41:76:
a3:4b:ba:3e:43:b8:63:b1:0f:f4:1a:2f:6f:ac:ba:
09:47:c8:53:5d:cd:e0:7e:bb:f0:59:75:ef:27:62:
05:4d:01:ae:73:2b:cf:2d:35:4a:f5:ac:6f:0a:db:
4d:f3:fd:ad:6c:71:1d:c8:c8:72:b6:41:3e:cf:b2:
7c:50:7c:92:13:9f:20:14:22:4e:c6:1e:ae:5b:fb:
0f:a6:d7:26:46:80:04:68:9c:15:66:85:69:68:20:
e1:79:f4:23:20:d5:35:0f:2b:55:ee:fe:2a:23:85:
5b:1f:9c:bf:41:52:71:02:39:71:47:7b:23:36:b0:
e8:c3:aa:17:36:ba:98:cb:99:03:a0:32:8a:8a:a3:
97:6c:07:51:aa:4b:15:08:08:84:ba:06:db:99:52:
64:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:87:64:A8:4E:47:72:43:13:6E:B7:14:ED:FC:57:87:EA:08:F9:71
X509v3 Authority Key Identifier:
keyid:DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3d:da:e6:33:57:f5:c0:bc:23:ef:f6:38:cc:02:6b:80:04:
c0:79:63:d3:c3:a2:35:24:48:00:23:0b:f2:d8:22:d2:f9:4d:
1f:1a:fb:c9:9a:1f:bf:08:43:70:cc:8a:b2:5e:ac:49:52:2d:
17:51:8a:90:22:3e:f0:c4:43:63:81:7b:01:02:e2:45:6e:18:
cb:e7:9d:61:17:d9:bf:89:27:b5:f5:0c:1b:31:19:ca:04:ae:
2b:6e:33:87:d1:2d:10:33:d3:64:13:81:06:f9:62:27:ae:92:
45:ed:ec:27:10:17:90:88:db:c2:86:3e:29:f4:f2:48:c1:7f:
51:f9:8d:73:5e:89:96:24:e2:66:47:67:74:e4:1e:41:e4:62:
c5:ab:e1:a0:26:55:2c:19:2c:7d:59:ab:a2:23:85:f5:ed:b9:
a4:b4:8c:6a:ee:07:b4:01:3a:0d:56:04:e4:18:94:59:ac:b7:
f4:4d:bc:09:ef:33:62:89:a2:b7:c3:92:a0:6a:d8:1b:18:70:
a6:e0:1c:e4:30:ea:30:16:6c:3b:16:3d:87:c9:97:10:06:45:
bd:5f:da:2e:f5:69:af:2a:3f:bf:db:91:a0:1a:cb:30:73:fe:
e3:89:46:81:e5:2d:78:ad:a7:4b:53:27:34:f3:1a:39:e4:5c:
05:82:4c:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc3jIuGVdvLfoiur5fmN4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNmMzZGQ4ZGRlZmZkOWFlNGM4NTVjNWY5NDgzODA0N2Rj
OWFkNzEwHhcNMjUxMTA0MDYwMDA0WhcNMjUxMTA1MDYwMDA0WjAzMTEwLwYDVQQD
Eyg0YTg3NjRhODRlNDc3MjQzMTM2ZWI3MTRlZGZjNTc4N2VhMDhmOTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijPuL2GG+rHnegVY2wqBjeqXD5lN
9q/sIOhyz389W1yQoDxQZYmMTCIn9UUmils3FtCzFpKFENkJK+lAmlrejPsiAAxi
J3w1Tya1SI5CcSUVhth9hOKu2KOO0viNScufga5C5ByXQXajS7o+Q7hjsQ/0Gi9v
rLoJR8hTXc3gfrvwWXXvJ2IFTQGucyvPLTVK9axvCttN8/2tbHEdyMhytkE+z7J8
UHySE58gFCJOxh6uW/sPptcmRoAEaJwVZoVpaCDhefQjINU1DytV7v4qI4VbH5y/
QVJxAjlxR3sjNrDow6oXNrqYy5kDoDKKiqOXbAdRqksVCAiEugbbmVJkYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqHZKhOR3JDE263FO38V4fqCPlxMB8GA1UdIwQY
MBaAFN1sPdjd7/2a5MhVxflIOAR9ya1xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83OTM1YmItYjAxNC00MjU1LTlhMGMt
YTJiYzcyYjE1OWQ3LzEvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83OTM1YmItYjAxNC00MjU1LTlhMGMtYTJiYzcyYjE1OWQ3
LzEvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApj3a5jNX
9cC8I+/2OMwCa4AEwHlj08OiNSRIACML8tgi0vlNHxr7yZofvwhDcMyKsl6sSVIt
F1GKkCI+8MRDY4F7AQLiRW4Yy+edYRfZv4kntfUMGzEZygSuK24zh9EtEDPTZBOB
BvliJ66SRe3sJxAXkIjbwoY+KfTySMF/UfmNc16JliTiZkdndOQeQeRixavhoCZV
LBksfVmroiOF9e25pLSMau4HtAE6DVYE5BiUWay39E28Ce8zYomit8OSoGrYGxhw
puAc5DDqMBZsOxY9h8mXEAZFvV/aLvVpryo/v9uRoBrLMHP+44lGgeUteK2nS1Mn
NPMaOeRcBYJM1A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:39 2025 by rpki-client