Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier: 4CKF5aPXyRer51OsX27P85Q717nerN1OAK2jH63r6EU=
Subject key identifier: 5F:BC:28:AD:B7:10:27:9D:78:8C:00:8F:39:3A:86:75:B8:1F:CC:95
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 019A4EF571CE19E9594811D969DEBDE502C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number: 0D09
Signing time: Tue 04 Nov 2025 13:01:39 +0000
Manifest this update: Tue 04 Nov 2025 13:01:39 +0000
Manifest next update: Wed 05 Nov 2025 13:01:39 +0000
Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: 65MKG8cBeNFGklbc/GnzydwTk3HfYQ5A4NMuorQssYE=)
2: XaWBl1pdgCEAOtWYlDnABozWGpY.roa (hash: NkTYxkGxoFs3l9oUz9ZXBu6um1xVsgaeI44+mBnF24s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:71:ce:19:e9:59:48:11:d9:69:de:bd:e5:02:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: Nov 4 13:01:39 2025 GMT
Not After : Nov 5 13:01:39 2025 GMT
Subject: CN=5fbc28adb710279d788c008f393a8675b81fcc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ce:a0:9e:8a:40:8f:b6:21:88:02:52:a4:04:
d1:c6:30:48:3f:a8:80:50:52:44:e7:fb:fe:c2:f8:
fb:33:8d:63:a1:22:61:08:38:85:28:30:7c:11:5e:
af:34:f4:b2:a6:1d:22:71:ae:a3:e5:b1:dc:0f:ba:
21:51:23:f4:9f:c6:51:06:d5:36:b3:a2:fa:16:ae:
be:40:db:fd:47:63:a6:bf:bc:a9:ad:32:48:ac:3e:
e7:87:6b:21:00:d4:64:6c:cb:8c:fd:18:66:fb:29:
a4:ae:c7:a1:92:02:73:23:6f:0f:75:4b:a3:3b:5b:
b4:2f:11:56:de:54:3e:6f:f8:77:54:49:8c:83:59:
1e:d8:7f:8a:db:1d:78:0d:56:a1:39:60:50:8c:ca:
4b:23:cd:c6:14:79:a5:46:28:1d:9f:a4:5c:85:5b:
f3:70:81:c3:97:20:45:35:33:cf:66:2e:43:50:74:
0f:9b:fa:2d:57:69:4d:19:ee:b6:73:69:f2:32:40:
a6:11:71:b3:25:bb:b2:4a:23:84:4e:c2:68:ee:a1:
68:c9:cf:f6:58:a2:ac:78:40:a9:10:5e:f3:3e:78:
d3:10:c8:fe:f1:ae:ae:ec:e6:68:6e:cd:a9:4e:59:
00:fc:aa:3a:f4:40:9d:ff:4c:cd:71:15:d2:b2:1b:
7e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BC:28:AD:B7:10:27:9D:78:8C:00:8F:39:3A:86:75:B8:1F:CC:95
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5e:13:8d:da:72:9b:dd:0c:e0:cf:93:24:e5:26:29:ac:97:
19:6f:94:44:78:ad:c4:db:a7:9f:0b:dc:53:47:3b:f7:20:f3:
75:61:02:f3:a2:8f:96:b1:63:d9:b7:90:59:aa:82:91:13:ef:
89:1b:41:46:6b:14:3f:12:1a:e6:3c:38:d9:be:f4:3a:87:df:
b4:a5:6a:35:d6:f8:26:2d:68:a5:d6:58:d9:ac:95:00:ce:9b:
be:8a:32:90:2f:17:35:51:1c:9f:52:ab:9d:67:8b:6a:43:10:
3c:06:20:57:34:95:96:c6:25:96:60:d2:1b:c7:02:e6:2b:7d:
57:b4:9c:de:98:1e:be:d6:79:9b:1c:fa:e7:7d:e8:5b:1c:ec:
8d:53:7d:6d:64:30:b7:e1:31:b3:91:c6:51:af:f7:11:b7:d6:
65:cf:c8:61:5c:5f:7a:ac:0c:17:65:15:ab:11:1d:dd:de:85:
45:bb:98:3a:19:c1:d5:92:07:6d:0d:31:5e:a8:0b:ce:d7:b3:
4e:be:76:4d:e1:c9:d9:94:3f:46:ef:eb:dc:7a:07:e9:da:0c:
74:0b:cf:af:64:0b:33:47:8d:1b:1e:04:38:67:3d:de:8b:ea:
9a:7d:73:0c:be:74:2e:50:0b:03:2b:1f:b5:c2:44:52:cf:53:
7e:f2:82:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9XHOGelZSBHZad695QLEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYTVhMjIyYWNiOTlhYjIzOTg0MzllZGVkNzc3MGE2NWVl
NjZkZTYwHhcNMjUxMTA0MTMwMTM5WhcNMjUxMTA1MTMwMTM5WjAzMTEwLwYDVQQD
Eyg1ZmJjMjhhZGI3MTAyNzlkNzg4YzAwOGYzOTNhODY3NWI4MWZjYzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA686gnopAj7YhiAJSpATRxjBIP6iA
UFJE5/v+wvj7M41joSJhCDiFKDB8EV6vNPSyph0ica6j5bHcD7ohUSP0n8ZRBtU2
s6L6Fq6+QNv9R2Omv7yprTJIrD7nh2shANRkbMuM/Rhm+ymkrsehkgJzI28PdUuj
O1u0LxFW3lQ+b/h3VEmMg1ke2H+K2x14DVahOWBQjMpLI83GFHmlRigdn6RchVvz
cIHDlyBFNTPPZi5DUHQPm/otV2lNGe62c2nyMkCmEXGzJbuySiOETsJo7qFoyc/2
WKKseECpEF7zPnjTEMj+8a6u7OZobs2pTlkA/Ko69ECd/0zNcRXSsht+rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+8KK23ECedeIwAjzk6hnW4H8yVMB8GA1UdIwQY
MBaAFN2loiKsuZqyOYQ57e13cKZe5m3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQt
NzUzYWIxOTY4N2Q4LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQtNzUzYWIxOTY4N2Q4
LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGV4Tjdpy
m90M4M+TJOUmKayXGW+URHitxNunnwvcU0c79yDzdWEC86KPlrFj2beQWaqCkRPv
iRtBRmsUPxIa5jw42b70OofftKVqNdb4Ji1opdZY2ayVAM6bvooykC8XNVEcn1Kr
nWeLakMQPAYgVzSVlsYllmDSG8cC5it9V7Sc3pgevtZ5mxz6533oWxzsjVN9bWQw
t+Exs5HGUa/3EbfWZc/IYVxfeqwMF2UVqxEd3d6FRbuYOhnB1ZIHbQ0xXqgLztez
Tr52TeHJ2ZQ/Ru/r3HoH6doMdAvPr2QLM0eNGx4EOGc93ovqmn1zDL50LlALAysf
tcJEUs9TfvKCLQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:57:50 2025 by rpki-client