Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json)
Hash identifier: FSbymM7q2gg5xCDYjwp4ce3TJ5hq7gfbfke3tHHzPO8=
Subject key identifier: 4A:37:91:3D:97:AA:8E:43:53:A8:70:CB:C9:15:8B:35:E3:AF:28:92
Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Certificate issuer: /CN=dc4f90a93dc9427855644903cb70c1f74b931786
Certificate serial: 019A4E4F8632EA998766757293509F408D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
Manifest number: 0511
Signing time: Tue 04 Nov 2025 10:00:25 +0000
Manifest this update: Tue 04 Nov 2025 10:00:25 +0000
Manifest next update: Wed 05 Nov 2025 10:00:25 +0000
Files and hashes: 1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: pXTyM3Wv8mIbSGd5jD+koAKKocuqrhpU8e57u0uQFTo=)
2: PT68lLdfHWq61L0p7mbOXLRwHhw.roa (hash: A4keDsv/7uOGmjAx+h6C5RlssIOEsmTqNcUP9OgH66s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:86:32:ea:99:87:66:75:72:93:50:9f:40:8d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786
Validity
Not Before: Nov 4 10:00:25 2025 GMT
Not After : Nov 5 10:00:25 2025 GMT
Subject: CN=4a37913d97aa8e4353a870cbc9158b35e3af2892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:f4:d1:da:97:b1:c9:c7:31:6b:b9:cc:47:
65:db:e2:18:6d:80:18:b7:d0:bb:4d:99:3a:85:6b:
33:79:7f:2f:c6:0d:55:1f:f9:0e:36:6a:9d:05:ea:
c4:39:3a:ee:96:13:c3:68:72:30:c7:e2:26:d0:5b:
1b:93:a4:9b:2c:75:08:5b:40:43:b9:6b:7d:ed:ae:
f4:a4:ca:7c:e8:99:e0:36:50:0a:ba:8d:68:59:fe:
11:bb:dd:cf:bb:b7:e2:c5:10:df:3d:7b:5a:38:34:
5a:c9:27:0d:1f:d8:8d:a7:77:5b:3a:68:a0:40:81:
8e:e6:b3:3e:cc:e0:3b:a3:0d:0e:41:6e:b5:1b:6d:
7d:f5:d2:c0:c3:1c:86:a9:06:66:0c:32:99:33:5d:
cb:2c:a1:99:dd:b3:4e:02:97:41:37:9f:f9:d3:7f:
97:33:fb:54:7f:58:c7:dd:66:39:04:f1:bd:7e:51:
9d:fc:4e:8d:53:c6:c6:fe:2d:df:52:a3:4d:9e:3a:
a0:12:d8:dd:b7:89:2a:96:a6:11:af:5d:18:0c:87:
75:31:ed:fc:ef:5e:3e:70:65:e8:30:47:a1:c6:6c:
2c:9f:a5:37:aa:b7:ab:f2:12:33:f8:3f:61:47:97:
10:3f:99:fc:70:cb:9f:c6:cf:84:ff:30:0c:06:f5:
a7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:37:91:3D:97:AA:8E:43:53:A8:70:CB:C9:15:8B:35:E3:AF:28:92
X509v3 Authority Key Identifier:
keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2f:8d:a7:56:df:fd:ab:26:5f:d6:5e:cc:46:44:ee:d7:24:
24:0f:d7:38:68:25:dc:60:81:85:58:7f:7c:3f:4b:a2:bb:81:
c2:df:88:99:ff:aa:cf:cf:4b:b6:2a:7e:40:f3:0e:9d:81:e6:
b0:c8:20:5b:3d:71:cc:42:f1:ff:c9:29:39:11:98:71:86:7e:
19:5c:19:86:1a:a9:fd:1e:81:ce:9d:5b:1d:6d:e2:ee:e9:b8:
ee:6a:18:60:ac:b7:b1:9d:e2:97:5a:9e:cc:c4:db:e6:f6:84:
9d:88:43:ae:f2:18:6a:24:7c:07:97:9f:19:a0:08:71:f6:82:
06:9b:ca:3f:14:f0:f5:fe:10:80:6a:13:c0:98:b8:4a:27:04:
e7:17:a2:b0:39:2e:12:9e:4d:19:9a:cd:8c:08:20:9f:1d:ff:
d3:b5:a4:23:15:5d:48:57:68:b5:45:8a:fc:15:18:95:34:57:
8c:39:1b:79:e9:f2:68:28:c8:66:dd:62:3e:37:e1:27:38:c7:
ac:77:fd:71:84:e3:14:45:a4:9a:7e:82:ee:24:f5:1a:26:6c:
f8:20:81:16:3e:43:95:a7:cd:14:80:b9:25:8a:b1:01:5b:9f:
f1:f6:8a:3b:d3:55:33:6a:61:18:3c:20:d3:a0:6e:e4:82:e5:
dd:a0:c3:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT4Yy6pmHZnVyk1CfQI0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGY5MGE5M2RjOTQyNzg1NTY0NDkwM2NiNzBjMWY3NGI5
MzE3ODYwHhcNMjUxMTA0MTAwMDI1WhcNMjUxMTA1MTAwMDI1WjAzMTEwLwYDVQQD
Eyg0YTM3OTEzZDk3YWE4ZTQzNTNhODcwY2JjOTE1OGIzNWUzYWYyODkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN700dqXscnHMWu5zEdl2+IYbYAY
t9C7TZk6hWszeX8vxg1VH/kONmqdBerEOTrulhPDaHIwx+Im0Fsbk6SbLHUIW0BD
uWt97a70pMp86JngNlAKuo1oWf4Ru93Pu7fixRDfPXtaODRayScNH9iNp3dbOmig
QIGO5rM+zOA7ow0OQW61G2199dLAwxyGqQZmDDKZM13LLKGZ3bNOApdBN5/503+X
M/tUf1jH3WY5BPG9flGd/E6NU8bG/i3fUqNNnjqgEtjdt4kqlqYRr10YDId1Me38
714+cGXoMEehxmwsn6U3qrer8hIz+D9hR5cQP5n8cMufxs+E/zAMBvWnrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEo3kT2Xqo5DU6hwy8kVizXjryiSMB8GA1UdIwQY
MBaAFNxPkKk9yUJ4VWRJA8twwfdLkxeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUt
NjMxNzdmYjE5YWJlLzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUtNjMxNzdmYjE5YWJl
LzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHS+Np1bf
/asmX9ZezEZE7tckJA/XOGgl3GCBhVh/fD9LoruBwt+Imf+qz89Ltip+QPMOnYHm
sMggWz1xzELx/8kpORGYcYZ+GVwZhhqp/R6Bzp1bHW3i7um47moYYKy3sZ3il1qe
zMTb5vaEnYhDrvIYaiR8B5efGaAIcfaCBpvKPxTw9f4QgGoTwJi4SicE5xeisDku
Ep5NGZrNjAggnx3/07WkIxVdSFdotUWK/BUYlTRXjDkbeenyaCjIZt1iPjfhJzjH
rHf9cYTjFEWkmn6C7iT1GiZs+CCBFj5DlafNFIC5JYqxAVuf8faKO9NVM2phGDwg
06Bu5ILl3aDDvA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:29 2025 by rpki-client