Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json)
Hash identifier: NeDzv6uqoZHTYz/OH45MwAbUMfgWpEcNcgbguPylOIo=
Subject key identifier: 18:89:FB:D8:1B:51:D8:38:64:2D:41:15:03:73:06:0C:17:75:EB:CD
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial: 019A4FD03DAAFC0758491CB68BD8D9A99766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
Manifest number: 13B2
Signing time: Tue 04 Nov 2025 17:00:38 +0000
Manifest this update: Tue 04 Nov 2025 17:00:38 +0000
Manifest next update: Wed 05 Nov 2025 17:00:38 +0000
Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: OyCa6T4HyskL6tLArEiZ5OeRr1jRR17873zGPDCWBPA=)
2: yrS5JvCeQkL61hQzQKYDkOhEOTg.roa (hash: goLq7UsC9/y1qbTkOPG/FDEBz20Pk1byDqCOGCbWKi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:3d:aa:fc:07:58:49:1c:b6:8b:d8:d9:a9:97:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Validity
Not Before: Nov 4 17:00:38 2025 GMT
Not After : Nov 5 17:00:38 2025 GMT
Subject: CN=1889fbd81b51d838642d41150373060c1775ebcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:4f:24:ee:0a:74:4b:6a:a7:0d:a6:98:6e:
dd:37:ae:d2:b9:bb:cf:3c:e4:c0:b2:6c:96:e0:79:
d1:e2:0c:8c:b3:36:2c:1a:47:aa:5e:66:b3:3a:c0:
c7:3b:be:21:4d:7c:79:0a:21:cb:22:86:b9:b7:f5:
21:68:35:77:96:4b:c2:01:48:f1:1f:a6:f4:5c:84:
31:d7:0c:28:3d:24:03:ca:b1:ed:f7:6b:3a:74:0e:
ff:7c:e5:75:03:23:15:2d:28:52:c0:d0:88:16:2f:
a3:f5:49:d1:89:87:b8:74:9d:61:94:1f:74:7b:a8:
c6:2b:fd:d6:c0:2b:d3:fe:14:c0:08:d2:74:99:7c:
c0:46:c6:51:e0:67:79:53:25:ff:7e:be:f2:98:27:
2a:e1:b5:0a:4c:92:20:77:e8:10:e2:05:1c:88:d5:
16:0f:ed:61:be:e4:02:96:6d:03:5c:05:f8:98:98:
24:e6:5c:65:ac:8c:0c:2e:4f:9e:c8:e0:f9:1a:d2:
52:d2:f8:39:b8:7e:89:ca:d9:2d:d9:c5:9d:2e:80:
fa:d9:ee:e1:e9:f8:50:f6:d1:36:a8:52:96:b0:b8:
af:75:84:f1:3f:d4:14:65:49:c4:51:9e:ce:11:2b:
b2:c6:02:08:fe:9e:44:5d:a8:5b:3c:e0:18:be:38:
de:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:89:FB:D8:1B:51:D8:38:64:2D:41:15:03:73:06:0C:17:75:EB:CD
X509v3 Authority Key Identifier:
keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2b:4b:8e:75:6f:6d:ee:da:e6:c1:84:bf:ef:d2:cd:27:13:
1b:c7:30:d3:2c:ba:e3:2a:63:35:cd:cd:e9:6f:7d:4a:d2:9a:
7f:f7:2d:3e:db:cc:58:e9:36:2e:b4:48:1a:fb:60:af:a1:61:
31:21:40:04:16:73:c3:45:43:33:1a:26:3a:5e:13:85:d9:49:
e8:3d:d9:cb:c8:ac:ae:4e:1a:9a:76:7b:5d:76:12:7c:77:3c:
1d:77:99:f4:35:30:d3:7d:a2:32:4d:ec:60:20:ad:09:bb:68:
cd:1f:70:a3:1b:c7:9b:6b:a5:53:89:f7:a0:02:91:e2:cf:82:
9b:38:9e:cc:fc:61:59:9a:dc:5b:d1:6e:fe:fd:19:5e:87:2d:
14:f0:e2:6f:e7:ee:1c:44:58:3e:c8:f5:2f:e0:bd:bd:b7:9e:
11:80:a2:c3:a9:7f:31:45:33:c5:c6:a8:12:30:ec:a4:97:b1:
cd:29:29:26:f9:37:5c:31:ea:f3:cf:00:61:ed:7c:9b:c4:61:
3e:fa:4e:6e:00:d3:45:d1:15:bc:ca:5f:90:e2:2e:74:23:d7:
18:66:53:83:70:16:44:a1:18:4c:db:00:51:14:af:ba:b0:d5:
eb:35:6f:7a:42:ed:4c:63:f0:75:c9:0b:c7:83:a8:d4:3b:9d:
fb:bc:2c:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0D2q/AdYSRy2i9jZqZdmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNTFjM2M1ZGRjNGZiNjEzODFjM2JlYTI0YzFiYTRmNzQ5
OThlYWIwHhcNMjUxMTA0MTcwMDM4WhcNMjUxMTA1MTcwMDM4WjAzMTEwLwYDVQQD
EygxODg5ZmJkODFiNTFkODM4NjQyZDQxMTUwMzczMDYwYzE3NzVlYmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+BPJO4KdEtqpw2mmG7dN67SubvP
POTAsmyW4HnR4gyMszYsGkeqXmazOsDHO74hTXx5CiHLIoa5t/UhaDV3lkvCAUjx
H6b0XIQx1wwoPSQDyrHt92s6dA7/fOV1AyMVLShSwNCIFi+j9UnRiYe4dJ1hlB90
e6jGK/3WwCvT/hTACNJ0mXzARsZR4Gd5UyX/fr7ymCcq4bUKTJIgd+gQ4gUciNUW
D+1hvuQClm0DXAX4mJgk5lxlrIwMLk+eyOD5GtJS0vg5uH6Jytkt2cWdLoD62e7h
6fhQ9tE2qFKWsLivdYTxP9QUZUnEUZ7OESuyxgII/p5EXahbPOAYvjjejQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiJ+9gbUdg4ZC1BFQNzBgwXdevNMB8GA1UdIwQY
MBaAFN5Rw8XdxPthOBw76iTBuk90mY6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEt
YTUzMjVkNDQxNzAyLzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEtYTUzMjVkNDQxNzAy
LzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWitLjnVv
be7a5sGEv+/SzScTG8cw0yy64ypjNc3N6W99StKaf/ctPtvMWOk2LrRIGvtgr6Fh
MSFABBZzw0VDMxomOl4ThdlJ6D3Zy8isrk4amnZ7XXYSfHc8HXeZ9DUw032iMk3s
YCCtCbtozR9woxvHm2ulU4n3oAKR4s+CmziezPxhWZrcW9Fu/v0ZXoctFPDib+fu
HERYPsj1L+C9vbeeEYCiw6l/MUUzxcaoEjDspJexzSkpJvk3XDHq888AYe18m8Rh
PvpObgDTRdEVvMpfkOIudCPXGGZTg3AWRKEYTNsAURSvurDV6zVvekLtTGPwdckL
x4Oo1Dud+7ws2A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:44 2025 by rpki-client