Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
File: 3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json)
Hash identifier: DoCMDGgbqP7/1wI4KiSWRIQGB0ZS93pdFCC0OWOGajg=
Subject key identifier: 22:16:4F:6C:61:AC:44:1B:A7:0A:4E:2C:8A:63:00:77:90:33:C2:CB
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial: 019A4E191206FBC3541EBF34F6CAAFAF761C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:57 +0000
Manifest this update: Tue 04 Nov 2025 09:00:57 +0000
Manifest next update: Wed 05 Nov 2025 09:00:57 +0000
Files and hashes: 1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: EhgCcaq9OuYf72H21OfQPWW63JADwcSZ6hX5I8QOR1I=)
2: Q6UDfcr6-wjzrSR02hz91bMMgCQ.roa (hash: Ri+ho1nwscaoaR+lGA/lmNvU5bMAzGg4wnbtbjS6IAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:12:06:fb:c3:54:1e:bf:34:f6:ca:af:af:76:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Validity
Not Before: Nov 4 09:00:57 2025 GMT
Not After : Nov 5 09:00:57 2025 GMT
Subject: CN=22164f6c61ac441ba70a4e2c8a6300779033c2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:5d:7d:62:42:a9:3d:ae:ca:44:5a:79:be:
4a:42:ca:6e:1d:4a:c5:75:f4:4d:0c:95:1e:19:6a:
19:74:a7:c5:52:6a:f3:0e:72:14:9c:a2:01:b8:cd:
62:b1:2f:67:06:56:90:a3:a0:b8:fe:51:63:cc:b4:
fc:8c:69:a8:45:49:5c:5b:cc:03:9a:8d:7e:49:04:
7e:0b:b3:b8:97:21:ca:b7:61:0b:7d:65:88:48:e0:
2b:0b:1b:50:dd:a4:a2:2c:62:5a:e1:2a:3d:c6:bf:
f8:1c:10:1d:b0:88:a4:0d:ad:52:69:9c:ed:c8:df:
cb:94:bf:dd:94:27:c5:b1:9f:90:6f:fe:d5:6f:93:
63:30:4d:c7:e8:3b:da:78:24:75:7d:a0:3d:4c:45:
18:99:86:22:c7:e6:e5:e3:d3:dd:15:b6:13:2b:7f:
2f:13:3b:4d:3b:e5:1b:da:1b:dc:f6:ca:8c:51:d1:
44:bd:88:1d:3c:6b:9e:06:63:59:e8:0f:98:68:3a:
c1:71:ec:d0:0c:db:1f:cd:98:d4:a2:e6:28:b8:a2:
50:18:6b:9e:7e:b4:f4:61:6f:6f:83:06:41:29:d6:
84:e8:47:c1:7e:47:55:75:cd:9a:2e:43:6e:a6:d1:
05:49:86:52:75:9d:64:c2:02:47:8e:a2:4d:91:d4:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:16:4F:6C:61:AC:44:1B:A7:0A:4E:2C:8A:63:00:77:90:33:C2:CB
X509v3 Authority Key Identifier:
keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:01:40:7a:55:d3:f3:cd:f3:78:9b:44:47:f3:8d:0f:9a:2e:
04:06:43:8f:c0:a1:94:5f:56:df:f5:36:2a:31:0b:fc:3b:4e:
59:11:fd:f3:20:c8:1f:66:b8:3d:25:31:67:ed:d6:df:35:19:
b4:32:07:e7:25:48:4a:63:46:1b:f3:be:99:e4:cf:4e:ce:02:
7a:3d:a1:71:83:02:bc:78:4f:76:21:3a:a7:a9:bf:f2:f6:de:
93:5e:35:6b:e9:72:62:da:14:47:73:2a:be:4a:08:a6:37:93:
28:9c:80:1b:45:8c:9f:5b:83:38:f1:4f:1c:73:e6:ed:c3:12:
40:86:5f:d0:55:ea:e1:07:24:6b:c3:f3:07:29:09:2a:6a:9d:
55:d3:b1:da:90:2c:6d:91:35:d6:cc:7c:53:60:fe:c5:c3:8b:
78:53:ad:95:35:ce:72:ae:7c:e8:13:67:1a:c3:80:2f:70:88:
3a:88:d8:9d:38:28:72:e1:6e:da:10:ae:75:56:ee:81:79:58:
b6:94:a1:0a:63:47:db:01:6f:0d:ec:bd:69:ed:7c:6d:f4:a4:
d9:9f:29:58:b0:33:1e:f8:e1:d5:71:96:db:18:23:6c:04:13:
d5:53:68:48:b4:7e:d3:0c:e1:d1:13:17:e9:b8:50:4e:4d:a6:
cc:61:7e:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGRIG+8NUHr809sqvr3YcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOGU2MGJiMTExMDg3ZDA4MDNmYzNmY2M0YWYzMjdhYTg1
YzBiODEwHhcNMjUxMTA0MDkwMDU3WhcNMjUxMTA1MDkwMDU3WjAzMTEwLwYDVQQD
EygyMjE2NGY2YzYxYWM0NDFiYTcwYTRlMmM4YTYzMDA3NzkwMzNjMmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnRdfWJCqT2uykRaeb5KQspuHUrF
dfRNDJUeGWoZdKfFUmrzDnIUnKIBuM1isS9nBlaQo6C4/lFjzLT8jGmoRUlcW8wD
mo1+SQR+C7O4lyHKt2ELfWWISOArCxtQ3aSiLGJa4So9xr/4HBAdsIikDa1SaZzt
yN/LlL/dlCfFsZ+Qb/7Vb5NjME3H6DvaeCR1faA9TEUYmYYix+bl49PdFbYTK38v
EztNO+Ub2hvc9sqMUdFEvYgdPGueBmNZ6A+YaDrBcezQDNsfzZjUouYouKJQGGue
frT0YW9vgwZBKdaE6EfBfkdVdc2aLkNuptEFSYZSdZ1kwgJHjqJNkdTXbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIWT2xhrEQbpwpOLIpjAHeQM8LLMB8GA1UdIwQY
MBaAFN6OYLsREIfQgD/D/MSvMnqoXAuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYzk4ODMtZjEwOC00ZmVkLWI0MTYt
YTZmNTM0YzMwN2YxLzEvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8yYzk4ODMtZjEwOC00ZmVkLWI0MTYtYTZmNTM0YzMwN2Yx
LzEvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQFAelXT
883zeJtER/OND5ouBAZDj8ChlF9W3/U2KjEL/DtOWRH98yDIH2a4PSUxZ+3W3zUZ
tDIH5yVISmNGG/O+meTPTs4Cej2hcYMCvHhPdiE6p6m/8vbek141a+lyYtoUR3Mq
vkoIpjeTKJyAG0WMn1uDOPFPHHPm7cMSQIZf0FXq4Qcka8PzBykJKmqdVdOx2pAs
bZE11sx8U2D+xcOLeFOtlTXOcq586BNnGsOAL3CIOojYnTgocuFu2hCudVbugXlY
tpShCmNH2wFvDey9ae18bfSk2Z8pWLAzHvjh1XGW2xgjbAQT1VNoSLR+0wzh0RMX
6bhQTk2mzGF+TA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:46 2025 by rpki-client