Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: 4EEPefK7+7fllJ4MBApOJCxu6DtLf5IT9xN0oVLkzwE=
Subject key identifier: 04:D9:0F:1F:EC:C0:25:9F:96:59:DE:28:AF:73:3A:A7:6F:50:5C:4A
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 019A54F6306B94C76477C7FA53D3C69B7BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 15F1
Signing time: Wed 05 Nov 2025 17:00:11 +0000
Manifest this update: Wed 05 Nov 2025 17:00:11 +0000
Manifest next update: Thu 06 Nov 2025 17:00:11 +0000
Files and hashes: 1: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: 0FeU0UZz60Gnrbb9DE45lpRhJMY0EHk0ysCuatHv1KM=)
2: EoONLCC0uBU4UnkK6hGEDKnLwOs.roa (hash: BvTXgf3VZmemwuiX/6PvTlFRYmGF/FW7bb7KGQyaCiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:30:6b:94:c7:64:77:c7:fa:53:d3:c6:9b:7b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Nov 5 17:00:11 2025 GMT
Not After : Nov 6 17:00:11 2025 GMT
Subject: CN=04d90f1fecc0259f9659de28af733aa76f505c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3f:64:e5:8d:8f:e8:59:7a:f3:d6:09:17:21:
8a:28:d4:7b:90:e6:53:be:20:00:b7:36:a0:86:ec:
db:82:a7:4d:9d:60:36:52:43:cf:19:e9:c0:26:d7:
06:a2:83:1a:0e:b5:83:81:43:93:d0:79:b1:6a:80:
ce:0a:12:cd:9b:fe:e8:8e:22:8c:19:de:af:b3:c5:
a4:c1:8c:92:d7:34:ca:4f:a8:78:24:86:8b:f2:d8:
1c:70:dc:55:e5:8b:70:1e:2b:da:43:75:99:f9:03:
af:98:df:b4:4b:ab:9a:bc:3f:f3:09:47:4a:20:66:
09:fd:09:b2:96:f0:98:c8:6c:7a:c4:92:7a:0e:2c:
f5:f3:f0:ce:82:7b:84:64:f8:20:29:78:6e:6d:9b:
b7:5a:76:59:c9:24:2a:38:8e:11:f5:2b:bd:32:99:
a1:ff:b7:dc:18:2d:c7:bf:c2:9c:2e:d7:94:66:18:
b0:5e:48:c6:71:3b:7e:28:f9:89:55:7d:06:d8:75:
27:44:4e:50:22:1b:ac:86:52:19:fc:07:ee:d7:89:
8c:b4:61:a0:95:5a:4a:62:c6:df:1a:18:e6:5d:53:
44:09:d0:40:e9:d4:07:9d:db:fa:a2:a0:b3:75:ef:
08:ec:5e:fc:8f:89:50:9d:18:43:e8:81:40:71:9f:
29:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D9:0F:1F:EC:C0:25:9F:96:59:DE:28:AF:73:3A:A7:6F:50:5C:4A
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:06:f3:10:f1:a0:9a:d9:b7:c1:81:74:99:84:b5:d4:8e:83:
28:d4:b7:7c:7f:b9:66:74:c1:5e:ea:da:bd:d6:b1:80:a2:97:
51:62:17:7e:a7:af:b9:52:01:d7:d1:61:42:72:2a:4b:a6:55:
c2:f2:a0:a7:48:b8:5a:30:60:c3:e3:22:8d:81:3c:5a:0b:4b:
4d:9c:d9:5b:c8:17:d7:68:91:dd:e1:10:7d:91:76:b8:21:02:
01:3b:9f:f4:88:35:c3:e7:01:5b:21:d9:7d:a5:8b:bb:1d:98:
ee:19:98:1c:98:d6:4e:9a:03:73:23:75:74:bd:d6:3f:c5:ee:
ef:a9:e0:2c:09:ed:51:75:41:cd:5f:82:7b:be:af:ed:8e:e0:
f7:19:5f:5c:ad:e6:5b:95:ee:0e:fd:92:c2:37:66:16:e7:0f:
72:10:6b:f9:2b:db:a4:e3:17:a7:fe:80:e8:c7:e2:1a:e5:93:
d5:cd:c3:d9:80:87:48:b9:41:71:86:81:4c:bd:93:28:99:6c:
89:68:2d:39:a1:8f:89:22:f7:22:8d:32:8c:9c:a1:34:26:c7:
a4:32:1f:48:74:1b:2d:3d:64:93:20:20:c5:1a:22:08:f3:d7:
db:00:a8:42:55:3d:bc:62:b1:80:37:a1:48:b4:c2:40:27:bb:
fc:c1:d5:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpU9jBrlMdkd8f6U9PGm3vlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNDY3MGMyYTZmZDcyMjMzMjdmNjhiYWRiZTZkMDgzMjJi
NzgwNTgwHhcNMjUxMTA1MTcwMDExWhcNMjUxMTA2MTcwMDExWjAzMTEwLwYDVQQD
EygwNGQ5MGYxZmVjYzAyNTlmOTY1OWRlMjhhZjczM2FhNzZmNTA1YzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj9k5Y2P6Fl689YJFyGKKNR7kOZT
viAAtzaghuzbgqdNnWA2UkPPGenAJtcGooMaDrWDgUOT0HmxaoDOChLNm/7ojiKM
Gd6vs8WkwYyS1zTKT6h4JIaL8tgccNxV5YtwHivaQ3WZ+QOvmN+0S6uavD/zCUdK
IGYJ/QmylvCYyGx6xJJ6Diz18/DOgnuEZPggKXhubZu3WnZZySQqOI4R9Su9Mpmh
/7fcGC3Hv8KcLteUZhiwXkjGcTt+KPmJVX0G2HUnRE5QIhushlIZ/Afu14mMtGGg
lVpKYsbfGhjmXVNECdBA6dQHndv6oqCzde8I7F78j4lQnRhD6IFAcZ8pUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATZDx/swCWfllneKK9zOqdvUFxKMB8GA1UdIwQY
MBaAFN1GcMKm/XIjMn9outvm0IMit4BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi83YTc3ODEtOWI0Yy00ODJiLWIyOTUt
OWNkM2M2YTE4ODY2LzEvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi83YTc3ODEtOWI0Yy00ODJiLWIyOTUtOWNkM2M2YTE4ODY2
LzEvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgbzEPGg
mtm3wYF0mYS11I6DKNS3fH+5ZnTBXuravdaxgKKXUWIXfqevuVIB19FhQnIqS6ZV
wvKgp0i4WjBgw+MijYE8WgtLTZzZW8gX12iR3eEQfZF2uCECATuf9Ig1w+cBWyHZ
faWLux2Y7hmYHJjWTpoDcyN1dL3WP8Xu76ngLAntUXVBzV+Ce76v7Y7g9xlfXK3m
W5XuDv2SwjdmFucPchBr+SvbpOMXp/6A6MfiGuWT1c3D2YCHSLlBcYaBTL2TKJls
iWgtOaGPiSL3Io0yjJyhNCbHpDIfSHQbLT1kkyAgxRoiCPPX2wCoQlU9vGKxgDeh
SLTCQCe7/MHVbA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:31:32 2025 by rpki-client