Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: 2DswH1CVHRI6HEkLYKMadHKn+R+2NoddR0eGPLG+qa4=
Subject key identifier: F0:AB:AF:CE:38:EA:61:F3:26:72:79:09:9C:FF:F4:97:FB:85:07:51
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 019A4F98EC64F35C289AD4218E1B24DE91DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 0D9B
Signing time: Tue 04 Nov 2025 16:00:13 +0000
Manifest this update: Tue 04 Nov 2025 16:00:13 +0000
Manifest next update: Wed 05 Nov 2025 16:00:13 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: 7YSxDhjGuKZMNqIu9hBC2kSYc8QtbN7IRCyz27mfdE0=)
2: prKzcOdb2gq7whbRtn2j18st210.roa (hash: TLxvtHMzXY4Lge96VJalh1cOFoXVbLd9V2/rCUHRN3g=)
3: zxXrJCgqT81AO-d4vpKnqCQPEGE.roa (hash: WugT5zcayhMYDSTA/kF2PldTCBDPYZiQht5Wqh3j65Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:ec:64:f3:5c:28:9a:d4:21:8e:1b:24:de:91:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Nov 4 16:00:13 2025 GMT
Not After : Nov 5 16:00:13 2025 GMT
Subject: CN=f0abafce38ea61f3267279099cfff497fb850751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:da:ea:32:ac:24:6a:93:d0:a1:09:62:66:89:
0e:4b:2a:c2:3f:b5:7e:42:0d:54:98:fc:ff:e8:88:
c4:97:aa:b0:4f:d8:89:d5:65:d5:dc:3b:04:54:f2:
ae:af:2e:22:43:34:01:3c:da:f9:78:3e:ab:80:32:
19:36:61:8a:6d:03:a4:a2:82:a6:bd:38:7c:40:0a:
84:ea:81:1c:0b:0d:68:e9:33:b6:c7:bf:7e:d6:70:
d5:97:2a:d4:bc:f9:e6:7d:b6:3c:b3:ee:74:c5:2d:
d9:dd:d8:1d:4f:90:3e:65:d6:9f:8b:e7:e7:f8:72:
9c:c2:19:92:fd:be:d4:0c:d2:0c:ab:d6:cd:3e:7e:
ff:b5:2f:d9:ff:1b:c3:e7:05:3c:89:84:4e:da:bd:
31:d6:d5:6b:02:4e:7d:ec:54:1e:dc:d5:de:ca:33:
f6:ed:98:73:40:30:bf:6f:3b:7e:aa:d1:c2:bf:a2:
d8:1a:2a:df:e0:f2:db:fe:d9:88:ac:c3:e3:6c:95:
c4:b9:54:2b:fe:b3:58:4b:ed:3b:4e:f1:3a:2e:36:
4f:1d:ad:6e:7e:7c:a6:18:67:4b:87:62:09:96:4a:
ef:c5:37:f9:c5:8f:32:c5:4b:12:49:62:53:d2:ef:
81:3d:06:78:0e:11:2e:2d:28:76:56:59:0e:c8:19:
1b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AB:AF:CE:38:EA:61:F3:26:72:79:09:9C:FF:F4:97:FB:85:07:51
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:06:fd:af:a1:43:71:3e:85:78:ba:8e:a1:0e:eb:a3:25:7d:
bf:32:41:57:d1:f4:94:f7:af:e2:e8:a4:94:31:10:e6:51:5c:
72:fa:a0:c3:d7:1b:a9:04:f8:e1:d2:92:39:a3:4b:79:7e:0f:
c8:19:f5:66:5f:db:a2:9a:1c:07:8d:2b:76:57:20:3e:be:22:
0a:08:ad:07:2c:d8:f3:45:1d:12:b7:1f:23:94:55:c1:00:f1:
ef:33:c4:70:b3:4f:c3:82:82:81:09:6d:b9:7e:98:57:74:6b:
65:7e:f8:28:7f:c5:08:1e:a6:5b:55:91:5d:fa:b3:6d:1f:4e:
90:a2:ad:35:d7:70:21:01:41:40:09:f9:1a:ac:c0:38:56:af:
cf:84:40:97:95:be:f4:b0:33:fa:8d:ad:77:b0:97:90:18:87:
da:9a:59:8d:3b:ec:3f:9f:c9:aa:8b:e8:70:6d:9d:07:a4:ee:
9b:41:cc:fc:5a:cf:79:61:14:48:aa:f0:16:46:58:2c:5b:0a:
52:f6:7c:2b:c1:83:0f:8d:0e:6b:d8:38:05:71:9f:94:08:dc:
d1:59:86:d3:f3:b7:f2:f5:17:35:16:e1:68:bd:c6:1e:4b:27:
73:ac:a9:1f:ea:4a:eb:bc:5a:73:47:b2:8b:c8:7f:55:14:a2:
1c:0d:36:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmOxk81womtQhjhsk3pHaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZTcyYzhmYWVjYjcwNTJjODQxMjAxYjI1ZjZhMDE4ZTQ3
N2IxYzIwHhcNMjUxMTA0MTYwMDEzWhcNMjUxMTA1MTYwMDEzWjAzMTEwLwYDVQQD
EyhmMGFiYWZjZTM4ZWE2MWYzMjY3Mjc5MDk5Y2ZmZjQ5N2ZiODUwNzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2drqMqwkapPQoQliZokOSyrCP7V+
Qg1UmPz/6IjEl6qwT9iJ1WXV3DsEVPKury4iQzQBPNr5eD6rgDIZNmGKbQOkooKm
vTh8QAqE6oEcCw1o6TO2x79+1nDVlyrUvPnmfbY8s+50xS3Z3dgdT5A+Zdafi+fn
+HKcwhmS/b7UDNIMq9bNPn7/tS/Z/xvD5wU8iYRO2r0x1tVrAk597FQe3NXeyjP2
7ZhzQDC/bzt+qtHCv6LYGirf4PLb/tmIrMPjbJXEuVQr/rNYS+07TvE6LjZPHa1u
fnymGGdLh2IJlkrvxTf5xY8yxUsSSWJT0u+BPQZ4DhEuLSh2VlkOyBkbywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCrr8446mHzJnJ5CZz/9Jf7hQdRMB8GA1UdIwQY
MBaAFN7nLI+uy3BSyEEgGyX2oBjkd7HCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3Vjc2o2N0xjRkxJUVNBYkpmYWdHT1Izc2NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lZjgyOWEtYWNmYy00NDAyLTk1Y2Ut
MzgzZmIyYjk1NGQ5LzEvM3Vjc2o2N0xjRkxJUVNBYkpmYWdHT1Izc2NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lZjgyOWEtYWNmYy00NDAyLTk1Y2UtMzgzZmIyYjk1NGQ5
LzEvM3Vjc2o2N0xjRkxJUVNBYkpmYWdHT1Izc2NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwb9r6FD
cT6FeLqOoQ7royV9vzJBV9H0lPev4uiklDEQ5lFccvqgw9cbqQT44dKSOaNLeX4P
yBn1Zl/bopocB40rdlcgPr4iCgitByzY80UdErcfI5RVwQDx7zPEcLNPw4KCgQlt
uX6YV3RrZX74KH/FCB6mW1WRXfqzbR9OkKKtNddwIQFBQAn5GqzAOFavz4RAl5W+
9LAz+o2td7CXkBiH2ppZjTvsP5/JqovocG2dB6Tum0HM/FrPeWEUSKrwFkZYLFsK
UvZ8K8GDD40Oa9g4BXGflAjc0VmG0/O38vUXNRbhaL3GHksnc6ypH+pK67xac0ey
i8h/VRSiHA02xA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:37 2025 by rpki-client