Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json)
Hash identifier: 0nCX+RmQz8nhOD/B/SwGYf+jhUWe5S72+YktgIqKFkQ=
Subject key identifier: 18:64:5F:48:66:88:82:36:C0:A0:FE:FE:61:4F:76:D4:7A:1A:F4:A5
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial: 019A50E27FBC2C91FAEBD332E598DEFF9DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
Manifest number: 1241
Signing time: Tue 04 Nov 2025 22:00:12 +0000
Manifest this update: Tue 04 Nov 2025 22:00:12 +0000
Manifest next update: Wed 05 Nov 2025 22:00:12 +0000
Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: eM7l8pJcx2iXHo2Hbu/a402GIdUQxZcWTdfMmz2H1I8=)
2: p3WBjzteYXQZYIX5zj87ra338og.roa (hash: UdBIIG65TiaVNqypoeNqjZfjwvGuuMkdscTIPnMkAs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:7f:bc:2c:91:fa:eb:d3:32:e5:98:de:ff:9d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Validity
Not Before: Nov 4 22:00:12 2025 GMT
Not After : Nov 5 22:00:12 2025 GMT
Subject: CN=18645f4866888236c0a0fefe614f76d47a1af4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:1a:61:28:7a:aa:72:ab:72:50:80:2e:3d:
14:b4:3e:a7:3a:0c:c0:fb:e3:d4:36:a5:9e:68:5a:
c6:a6:35:19:8e:86:97:c3:b0:b6:5c:8f:3f:86:2b:
e4:40:1c:ae:d8:17:40:c4:0e:a8:1d:91:3f:f6:e8:
ae:90:35:e4:16:90:47:68:67:54:86:fe:80:fd:f0:
40:74:28:03:f1:88:7f:9c:01:9a:2c:ec:c7:11:ad:
f1:e3:4b:f8:ed:20:dc:54:06:8a:1f:f1:ba:91:e0:
7a:25:da:04:b6:81:e3:85:f9:09:41:ca:40:a0:e4:
1b:73:78:df:6c:23:d1:2b:a6:19:17:66:a6:60:57:
0d:e0:5e:ad:93:b3:2f:05:4c:13:49:e2:c9:b0:88:
62:45:ac:34:8c:81:ce:e4:6a:e5:87:38:6c:bb:da:
4c:1a:0f:19:28:f0:a5:a4:24:44:f1:14:52:22:e2:
65:de:77:f4:84:1b:f5:64:2d:6a:d1:36:a7:57:0f:
d4:35:50:39:d2:9d:3f:c7:e1:e7:9a:01:ee:a6:94:
92:cc:04:05:3f:61:e7:72:36:40:83:b6:16:51:75:
00:e2:c0:5a:b3:56:01:d2:18:f9:af:bb:8c:9b:71:
d0:12:21:57:ba:9f:66:04:5a:af:9b:fc:d2:a3:30:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:64:5F:48:66:88:82:36:C0:A0:FE:FE:61:4F:76:D4:7A:1A:F4:A5
X509v3 Authority Key Identifier:
keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:75:ec:74:50:37:99:68:77:df:22:c8:9f:86:ae:be:03:7d:
9e:21:be:8d:54:13:cb:70:79:d6:22:9a:3f:08:7f:54:44:99:
cc:d7:6b:1e:56:34:ca:59:18:61:ff:bc:44:f3:e9:e8:1c:3c:
fa:ab:02:2a:7a:4d:62:00:7e:3c:f0:51:31:5f:ab:9a:12:c7:
bf:29:7c:7c:76:ba:fc:33:50:28:dc:b9:eb:2c:d6:fd:4c:c8:
58:10:69:a9:e6:d0:93:dc:9e:de:5c:6a:d3:61:7e:ac:6e:1a:
3e:22:c3:d2:c9:1a:fe:8f:91:51:72:10:34:61:23:a3:e0:b3:
be:c7:f8:6b:70:6d:d0:60:61:0c:9b:1d:03:07:6f:be:9e:8e:
45:1b:e9:ef:10:b1:f2:3d:63:2a:6b:a7:6a:53:1c:d1:61:86:
9f:12:d3:c3:bf:d1:b3:5a:d8:5d:5a:9d:2d:6a:7c:2b:cb:85:
93:f7:8e:1a:a8:ea:ee:84:a8:4f:1e:f7:19:01:56:f8:28:08:
f7:3e:4f:e6:f3:2c:7e:72:78:b4:f3:8c:2b:0e:c7:6a:a8:81:
aa:5d:10:e1:01:8d:e3:fd:75:d9:f3:65:49:08:8e:6d:9d:e1:
ed:eb:c6:39:45:c2:0e:14:60:20:73:68:99:85:c5:76:8d:82:
f8:8b:ee:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4n+8LJH669My5Zje/52tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZTU0NzJlYmUxMmI0YjU3MGY4MjcxNDM4NzkxN2VjYjRj
NGRlNTMwHhcNMjUxMTA0MjIwMDEyWhcNMjUxMTA1MjIwMDEyWjAzMTEwLwYDVQQD
EygxODY0NWY0ODY2ODg4MjM2YzBhMGZlZmU2MTRmNzZkNDdhMWFmNGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT0aYSh6qnKrclCALj0UtD6nOgzA
++PUNqWeaFrGpjUZjoaXw7C2XI8/hivkQByu2BdAxA6oHZE/9uiukDXkFpBHaGdU
hv6A/fBAdCgD8Yh/nAGaLOzHEa3x40v47SDcVAaKH/G6keB6JdoEtoHjhfkJQcpA
oOQbc3jfbCPRK6YZF2amYFcN4F6tk7MvBUwTSeLJsIhiRaw0jIHO5Grlhzhsu9pM
Gg8ZKPClpCRE8RRSIuJl3nf0hBv1ZC1q0TanVw/UNVA50p0/x+HnmgHuppSSzAQF
P2HncjZAg7YWUXUA4sBas1YB0hj5r7uMm3HQEiFXup9mBFqvm/zSozCFkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhkX0hmiII2wKD+/mFPdtR6GvSlMB8GA1UdIwQY
MBaAFNzlRy6+ErS1cPgnFDh5F+y0xN5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjkt
OWYwNWYxMzVkY2Y5LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjktOWYwNWYxMzVkY2Y5
LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHXsdFA3
mWh33yLIn4auvgN9niG+jVQTy3B51iKaPwh/VESZzNdrHlY0ylkYYf+8RPPp6Bw8
+qsCKnpNYgB+PPBRMV+rmhLHvyl8fHa6/DNQKNy56yzW/UzIWBBpqebQk9ye3lxq
02F+rG4aPiLD0ska/o+RUXIQNGEjo+Czvsf4a3Bt0GBhDJsdAwdvvp6ORRvp7xCx
8j1jKmunalMc0WGGnxLTw7/Rs1rYXVqdLWp8K8uFk/eOGqjq7oSoTx73GQFW+CgI
9z5P5vMsfnJ4tPOMKw7HaqiBql0Q4QGN4/112fNlSQiObZ3h7evGOUXCDhRgIHNo
mYXFdo2C+IvuxA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:26:28 2025 by rpki-client