Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
File: 3OVg8OyFDainwPjW84JRAtTeSs4.mft (raw, json)
Hash identifier: b2qucWZ0H99K27W55xNa0jR7+9J1RL4X4wqFL27gbfI=
Subject key identifier: 58:3E:2A:80:0D:4E:65:A9:85:E8:AA:F5:FD:65:CD:72:84:BF:9F:99
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Certificate issuer: /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial: 019A4EF418B0C4795ECFF1D9A12A458FBCB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:00:11 +0000
Manifest this update: Tue 04 Nov 2025 13:00:11 +0000
Manifest next update: Wed 05 Nov 2025 13:00:11 +0000
Files and hashes: 1: 3OVg8OyFDainwPjW84JRAtTeSs4.crl (hash: hxWEhA9OMIhbcfiQfCSSOoHnRGY1UJDPiaGPe0ElRPY=)
2: cvAMZ-azozJjAwqBJfc2rmmZkME.roa (hash: Gewk40CVQw5q21r2SfPnFc/pGMGpE0T4SZt3vyzVUaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:18:b0:c4:79:5e:cf:f1:d9:a1:2a:45:8f:bc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Validity
Not Before: Nov 4 13:00:11 2025 GMT
Not After : Nov 5 13:00:11 2025 GMT
Subject: CN=583e2a800d4e65a985e8aaf5fd65cd7284bf9f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:4c:d0:f0:8d:1e:ae:36:d0:61:9c:1e:c3:
32:c2:1c:bc:8e:66:61:95:12:1c:f4:02:13:5b:db:
04:f5:cb:d0:15:63:85:3f:2f:bb:10:7a:fb:30:15:
8e:77:67:7c:c5:a1:26:15:36:20:0e:f2:b0:1c:22:
ee:61:08:0f:05:2d:a1:5b:fe:ed:b0:12:d8:fb:08:
81:f8:44:1b:81:47:03:10:0e:5e:39:e0:44:4f:cd:
a9:e1:c5:b7:f8:ff:fd:55:bc:78:62:96:43:e5:bc:
d4:a7:ec:09:30:af:75:3d:0e:76:95:f5:e9:1e:41:
ad:be:af:83:b5:1e:e2:12:52:11:be:d5:1d:14:f3:
94:c6:2a:78:b3:6f:d8:10:36:08:02:aa:a5:35:85:
c4:c8:ed:40:43:07:bd:05:1e:17:db:f8:5b:d3:9d:
f4:b8:a5:5e:6d:e8:4d:e7:b5:39:ab:85:3b:49:65:
f5:da:d6:13:41:8c:34:ea:36:ee:0d:b4:f1:e7:40:
02:dd:07:38:8e:22:5c:bf:a6:b5:4c:f7:45:f0:5a:
b2:4e:9f:b1:92:2a:86:15:55:ce:b9:41:5f:74:69:
bb:94:fd:89:b8:4d:75:50:82:2b:58:15:6c:42:7a:
fe:e3:4c:14:fe:03:31:e4:8e:41:1a:3e:34:b1:53:
93:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3E:2A:80:0D:4E:65:A9:85:E8:AA:F5:FD:65:CD:72:84:BF:9F:99
X509v3 Authority Key Identifier:
keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b4:0b:5e:dc:92:fb:1d:e3:19:76:36:8b:8f:95:7f:b7:43:
26:35:8a:68:be:18:3a:45:c9:c4:14:8f:12:fd:b5:50:36:23:
2a:fe:20:f5:83:67:02:ff:01:44:25:90:21:9d:7e:ce:2e:b5:
e9:a4:6e:e6:e1:8a:df:57:51:2e:91:e2:0f:62:c5:c9:61:07:
26:6a:ad:80:5a:b5:4e:1c:36:32:4a:94:f4:75:15:1f:fa:a2:
50:c2:e1:20:6e:d5:86:4b:85:c4:d4:98:41:42:f8:3d:a2:c4:
ec:a9:77:94:8c:c4:87:23:ec:4b:3d:b0:ee:76:e4:6d:4b:1d:
65:a8:58:7d:d1:58:0f:66:70:b0:05:bd:7d:6e:8f:22:34:b5:
ae:6f:9b:57:f1:45:2f:9a:56:f5:80:c2:91:b2:52:d0:97:b7:
fc:c5:8d:ae:b6:b4:93:fe:46:01:8a:7c:d7:7c:38:df:f8:36:
c2:62:fb:69:8c:12:a6:d4:fd:94:ed:cf:b0:52:08:75:7c:41:
68:5a:79:bf:9b:fb:21:a0:68:32:57:81:e2:3e:36:ad:e8:b5:
cb:f5:de:b1:6e:f9:cd:7c:71:ef:f5:4d:28:a1:eb:3b:06:22:
26:aa:7d:5c:b7:f8:0d:c3:66:e1:85:7f:38:d5:de:08:41:a4:
1a:9b:a0:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9BiwxHlez/HZoSpFj7ywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZTU2MGYwZWM4NTBkYThhN2MwZjhkNmYzODI1MTAyZDRk
ZTRhY2UwHhcNMjUxMTA0MTMwMDExWhcNMjUxMTA1MTMwMDExWjAzMTEwLwYDVQQD
Eyg1ODNlMmE4MDBkNGU2NWE5ODVlOGFhZjVmZDY1Y2Q3Mjg0YmY5Zjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmlM0PCNHq420GGcHsMywhy8jmZh
lRIc9AITW9sE9cvQFWOFPy+7EHr7MBWOd2d8xaEmFTYgDvKwHCLuYQgPBS2hW/7t
sBLY+wiB+EQbgUcDEA5eOeBET82p4cW3+P/9Vbx4YpZD5bzUp+wJMK91PQ52lfXp
HkGtvq+DtR7iElIRvtUdFPOUxip4s2/YEDYIAqqlNYXEyO1AQwe9BR4X2/hb0530
uKVebehN57U5q4U7SWX12tYTQYw06jbuDbTx50AC3Qc4jiJcv6a1TPdF8FqyTp+x
kiqGFVXOuUFfdGm7lP2JuE11UIIrWBVsQnr+40wU/gMx5I5BGj40sVOTaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFg+KoANTmWpheiq9f1lzXKEv5+ZMB8GA1UdIwQY
MBaAFNzlYPDshQ2op8D41vOCUQLU3krOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09WZzhPeUZEYWlud1BqVzg0SlJBdFRlU3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wNTNkMzktMzc0Yy00Mzg3LTk5NDUt
NDMxZjc1YmE4Njc1LzEvM09WZzhPeUZEYWlud1BqVzg0SlJBdFRlU3M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wNTNkMzktMzc0Yy00Mzg3LTk5NDUtNDMxZjc1YmE4Njc1
LzEvM09WZzhPeUZEYWlud1BqVzg0SlJBdFRlU3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7QLXtyS
+x3jGXY2i4+Vf7dDJjWKaL4YOkXJxBSPEv21UDYjKv4g9YNnAv8BRCWQIZ1+zi61
6aRu5uGK31dRLpHiD2LFyWEHJmqtgFq1Thw2MkqU9HUVH/qiUMLhIG7VhkuFxNSY
QUL4PaLE7Kl3lIzEhyPsSz2w7nbkbUsdZahYfdFYD2ZwsAW9fW6PIjS1rm+bV/FF
L5pW9YDCkbJS0Je3/MWNrra0k/5GAYp813w43/g2wmL7aYwSptT9lO3PsFIIdXxB
aFp5v5v7IaBoMleB4j42rei1y/XesW75zXxx7/VNKKHrOwYiJqp9XLf4DcNm4YV/
ONXeCEGkGpugAA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:41 2025 by rpki-client