Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
File: 3mxgNQQsxTJRbrwZaPQb__S4U34.mft (raw, json)
Hash identifier: bcv0tamG9osjYYR+51Ymq+c7V4+EzeSZpXqEjLhIDPU=
Subject key identifier: 9B:58:A2:60:63:F5:49:11:A0:EA:02:B6:86:58:68:02:63:35:9C:02
Authority key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
Certificate issuer: /CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Certificate serial: 019A4EF49F98D6D7BD8E5F39BD802A4B5311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
Manifest number: 1355
Signing time: Tue 04 Nov 2025 13:00:45 +0000
Manifest this update: Tue 04 Nov 2025 13:00:45 +0000
Manifest next update: Wed 05 Nov 2025 13:00:45 +0000
Files and hashes: 1: 3mxgNQQsxTJRbrwZaPQb__S4U34.crl (hash: QiiUGX9ykDjmb0a9UwjtRk2XzmW23cew83JZAQaWz7I=)
2: qlMHdAg_ZeG5jpZEikZxyiq5rOM.roa (hash: r9NbCVDLWns0v6U+hfflkmDI70L6VCrJW0Q5+div1jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9f:98:d6:d7:bd:8e:5f:39:bd:80:2a:4b:53:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Validity
Not Before: Nov 4 13:00:45 2025 GMT
Not After : Nov 5 13:00:45 2025 GMT
Subject: CN=9b58a26063f54911a0ea02b68658680263359c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:94:b1:dd:8c:18:ca:06:e9:6b:01:7b:ed:89:
70:65:1f:20:7f:18:d2:da:2d:45:a8:45:9d:85:a1:
01:a7:c9:f2:53:65:90:38:0b:2a:78:e5:44:f5:33:
74:90:e2:8a:f0:96:83:c4:d9:87:93:d2:63:84:ca:
9d:b8:15:00:e5:16:e1:13:66:e9:54:45:99:5a:0b:
9b:63:57:bd:88:84:a7:89:67:df:c8:70:e1:7e:e1:
d4:7a:b6:af:d8:47:c4:75:1e:8c:6b:93:c6:c6:c0:
ed:47:c8:38:ec:5b:f4:a7:56:95:7a:4c:79:e0:fc:
fc:f1:cc:5c:af:62:82:85:04:95:65:bb:56:cb:df:
84:f1:8b:79:86:f9:8e:7d:c5:84:e9:e4:a1:93:65:
04:18:da:ec:ec:e0:56:27:4e:05:ca:6d:4f:10:db:
10:63:49:35:71:a5:02:9d:d4:76:fa:b6:4d:ca:40:
d4:cf:17:29:35:34:ea:a8:20:79:99:7a:dd:41:9c:
ee:a4:9b:48:3d:bd:b0:a7:c5:11:50:90:db:0b:17:
11:0b:5d:5c:f5:b1:f7:c5:4e:98:70:a4:01:db:29:
9d:28:eb:34:4c:1e:79:22:67:ab:d6:de:7d:9b:e4:
2d:45:de:a3:9f:cd:9b:35:1b:fb:62:1b:88:a4:8f:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:58:A2:60:63:F5:49:11:A0:EA:02:B6:86:58:68:02:63:35:9C:02
X509v3 Authority Key Identifier:
keyid:DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2b:c8:c7:39:20:ec:31:e8:76:a2:cb:49:1e:b8:94:82:c6:
1d:df:ca:39:d2:83:a4:d4:d3:89:01:06:40:66:a2:eb:dc:57:
c7:f8:90:03:30:71:05:c2:26:ae:a4:23:89:e5:24:0c:83:9a:
30:3d:9c:a0:67:53:1c:eb:3f:60:ef:2c:16:ab:ad:e9:65:57:
9c:ec:ee:2d:d6:84:75:2f:0e:46:8a:a7:7f:16:06:a6:8b:a5:
08:03:ce:db:39:c5:97:aa:67:a2:86:e9:18:8c:e9:55:f0:18:
d1:64:78:22:b4:b7:3d:a3:48:4c:01:d4:68:9a:67:21:fb:21:
01:0f:d8:72:b9:a6:40:28:8e:c9:b3:5f:9b:25:01:0f:46:11:
b5:b9:87:de:1e:2c:69:16:f3:40:0d:98:19:71:6a:51:67:84:
2e:be:ce:13:94:eb:b2:ce:96:1b:ce:af:9e:17:1a:c0:4a:d8:
9d:c5:93:c0:aa:26:02:40:85:1d:96:23:9a:e1:64:0a:d7:d5:
ba:36:f3:5f:9f:56:3d:cd:b5:86:a7:1f:85:c3:10:d3:5d:dc:
8b:8b:51:1b:35:fd:39:11:8e:38:22:1a:2f:f3:5f:ba:97:a4:
7c:a2:7c:3a:64:0f:c0:6e:78:d5:3c:bf:47:b2:ff:c6:c3:4e:
bb:a9:33:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9J+Y1te9jl85vYAqS1MRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNmM2MDM1MDQyY2M1MzI1MTZlYmMxOTY4ZjQxYmZmZjRi
ODUzN2UwHhcNMjUxMTA0MTMwMDQ1WhcNMjUxMTA1MTMwMDQ1WjAzMTEwLwYDVQQD
Eyg5YjU4YTI2MDYzZjU0OTExYTBlYTAyYjY4NjU4NjgwMjYzMzU5YzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJSx3YwYygbpawF77YlwZR8gfxjS
2i1FqEWdhaEBp8nyU2WQOAsqeOVE9TN0kOKK8JaDxNmHk9JjhMqduBUA5RbhE2bp
VEWZWgubY1e9iISniWffyHDhfuHUerav2EfEdR6Ma5PGxsDtR8g47Fv0p1aVekx5
4Pz88cxcr2KChQSVZbtWy9+E8Yt5hvmOfcWE6eShk2UEGNrs7OBWJ04Fym1PENsQ
Y0k1caUCndR2+rZNykDUzxcpNTTqqCB5mXrdQZzupJtIPb2wp8URUJDbCxcRC11c
9bH3xU6YcKQB2ymdKOs0TB55Imer1t59m+QtRd6jn82bNRv7YhuIpI/CjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtYomBj9UkRoOoCtoZYaAJjNZwCMB8GA1UdIwQY
MBaAFN5sYDUELMUyUW68GWj0G//0uFN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM214Z05RUXN4VEpSYnJ3WmFQUWJfX1M0VTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jMmJiNGQtODQ4My00N2NlLWJiMGEt
ZjVmNDkwZDJjMTYzLzEvM214Z05RUXN4VEpSYnJ3WmFQUWJfX1M0VTM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9jMmJiNGQtODQ4My00N2NlLWJiMGEtZjVmNDkwZDJjMTYz
LzEvM214Z05RUXN4VEpSYnJ3WmFQUWJfX1M0VTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyvIxzkg
7DHodqLLSR64lILGHd/KOdKDpNTTiQEGQGai69xXx/iQAzBxBcImrqQjieUkDIOa
MD2coGdTHOs/YO8sFqut6WVXnOzuLdaEdS8ORoqnfxYGpoulCAPO2znFl6pnoobp
GIzpVfAY0WR4IrS3PaNITAHUaJpnIfshAQ/YcrmmQCiOybNfmyUBD0YRtbmH3h4s
aRbzQA2YGXFqUWeELr7OE5Trss6WG86vnhcawErYncWTwKomAkCFHZYjmuFkCtfV
ujbzX59WPc21hqcfhcMQ013ci4tRGzX9ORGOOCIaL/NfupekfKJ8OmQPwG541Ty/
R7L/xsNOu6kzpw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:30 2025 by rpki-client