Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
File: R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json)
Hash identifier: rmpD1DfEtg4Er1iRIK+kDXM548PgNoSR+9VY56q5gao=
Subject key identifier: A4:5F:71:20:94:A3:B1:5F:93:2D:EE:78:F9:08:54:6B:9D:33:7D:84
Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442
Certificate serial: 019A4E18FCE40864965D33578F3B105F6643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 09:00:51 +0000
Manifest this update: Tue 04 Nov 2025 09:00:51 +0000
Manifest next update: Wed 05 Nov 2025 09:00:51 +0000
Files and hashes: 1: Q3JTPjWcEREqifdCmIjbHLzzn7s.roa (hash: vaz4o+tAP641StTPMvLecOpfelAjJS1sX1oCmpWNCoo=)
2: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: ZXitK+xBYKUdhKgoz/MRcI9ZCWzxA88rx9G1lZH2UXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:fc:e4:08:64:96:5d:33:57:8f:3b:10:5f:66:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442
Validity
Not Before: Nov 4 09:00:51 2025 GMT
Not After : Nov 5 09:00:51 2025 GMT
Subject: CN=a45f712094a3b15f932dee78f908546b9d337d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:96:38:06:e1:40:90:f0:af:b3:66:99:12:66:
0d:07:56:fb:01:94:83:c5:12:46:02:66:81:ae:40:
8a:9f:46:8b:e3:78:8f:36:e9:94:f5:3b:7c:fc:bf:
cc:fe:b5:69:2b:62:aa:de:4b:9f:bf:63:24:ae:73:
fb:e8:bf:3b:2c:34:10:30:b3:c7:22:61:ce:26:f0:
24:cb:a3:36:e9:cb:9c:5c:85:f4:6a:95:d5:c0:ff:
21:f4:99:86:c2:97:d7:1b:13:23:03:c9:e3:21:77:
64:e3:18:c4:63:10:0b:54:db:03:48:17:d5:b8:42:
67:6d:6e:1e:8e:ee:07:70:44:0d:14:13:46:e8:64:
10:be:b9:bb:9a:8b:69:fd:00:a6:0f:9b:d0:13:bb:
cc:32:68:08:02:aa:ec:66:70:b0:4e:46:ca:f2:88:
8e:dd:3f:c0:df:c3:9f:e4:27:86:28:33:8b:e7:55:
a4:82:cc:01:a7:fb:ba:bc:18:1e:7c:b8:ac:1a:a7:
fc:08:7f:3d:6d:aa:80:d3:fa:a7:75:bd:be:9d:48:
5a:06:27:9a:fd:24:f3:cc:72:ae:a6:d5:23:50:48:
c7:65:d5:1f:1e:be:27:c2:68:57:cd:92:03:42:1e:
76:f5:d6:09:13:fb:0f:c5:d1:2e:c5:1b:42:3e:57:
05:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5F:71:20:94:A3:B1:5F:93:2D:EE:78:F9:08:54:6B:9D:33:7D:84
X509v3 Authority Key Identifier:
keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e2:dd:aa:94:09:ef:bb:4c:f4:9b:8a:79:79:27:a5:c5:b8:
66:aa:4b:96:b9:9a:3e:50:ae:59:5a:c0:6b:e4:38:09:a8:e9:
77:c7:c8:95:61:b8:0b:3f:23:f6:de:c0:f0:4d:96:b8:6a:7a:
17:01:52:9b:ad:2e:a4:2a:0b:4e:57:fd:7d:41:bb:a7:07:42:
3a:7d:86:93:87:60:44:5c:8a:c9:eb:09:cf:37:94:ab:79:5f:
02:3e:eb:0f:13:51:d3:04:ef:4b:94:40:7b:bc:fa:de:92:b9:
a3:a2:67:04:e9:a0:0e:06:e7:da:02:9a:39:ce:8d:4d:58:25:
e7:bc:40:15:0b:82:16:7b:23:7b:b2:1c:ba:21:d5:3d:2a:e4:
61:e3:25:59:f1:4b:20:82:76:d2:2f:cf:cb:48:82:ca:a4:0a:
fb:74:c7:b3:07:a6:d1:0d:5b:b2:c6:9b:ef:3e:ae:f4:bf:9b:
f0:41:cf:c9:94:a8:18:31:68:5c:e1:f9:9f:2f:6d:3b:db:0f:
13:d3:c6:ad:23:aa:62:54:2c:b1:be:a8:dd:c0:0f:f5:97:a2:
b6:85:d2:66:5f:9d:30:be:04:9e:4b:09:7f:32:bd:73:47:15:
88:7f:1a:d4:65:0f:e1:35:24:18:60:72:05:56:3c:0e:75:4c:
bf:ca:4c:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGPzkCGSWXTNXjzsQX2ZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NzdkYTE1Nzc2ODQyM2ZjYmE5MjE3MzkyZWM3ZjQ4M2Iz
Yjk0NDIwHhcNMjUxMTA0MDkwMDUxWhcNMjUxMTA1MDkwMDUxWjAzMTEwLwYDVQQD
EyhhNDVmNzEyMDk0YTNiMTVmOTMyZGVlNzhmOTA4NTQ2YjlkMzM3ZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJY4BuFAkPCvs2aZEmYNB1b7AZSD
xRJGAmaBrkCKn0aL43iPNumU9Tt8/L/M/rVpK2Kq3kufv2MkrnP76L87LDQQMLPH
ImHOJvAky6M26cucXIX0apXVwP8h9JmGwpfXGxMjA8njIXdk4xjEYxALVNsDSBfV
uEJnbW4eju4HcEQNFBNG6GQQvrm7motp/QCmD5vQE7vMMmgIAqrsZnCwTkbK8oiO
3T/A38Of5CeGKDOL51WkgswBp/u6vBgefLisGqf8CH89baqA0/qndb2+nUhaBiea
/STzzHKuptUjUEjHZdUfHr4nwmhXzZIDQh529dYJE/sPxdEuxRtCPlcF8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRfcSCUo7Ffky3uePkIVGudM32EMB8GA1UdIwQY
MBaAFEd32hV3aEI/y6khc5Lsf0g7O5RCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9iMjFhMzgtZGI2Mi00NDM4LWJhOWMt
ZjU3Zjg2ZGY0ZjE2LzEvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9iMjFhMzgtZGI2Mi00NDM4LWJhOWMtZjU3Zjg2ZGY0ZjE2
LzEvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+LdqpQJ
77tM9JuKeXknpcW4ZqpLlrmaPlCuWVrAa+Q4Cajpd8fIlWG4Cz8j9t7A8E2WuGp6
FwFSm60upCoLTlf9fUG7pwdCOn2Gk4dgRFyKyesJzzeUq3lfAj7rDxNR0wTvS5RA
e7z63pK5o6JnBOmgDgbn2gKaOc6NTVgl57xAFQuCFnsje7IcuiHVPSrkYeMlWfFL
IIJ20i/Py0iCyqQK+3THswem0Q1bssab7z6u9L+b8EHPyZSoGDFoXOH5ny9tO9sP
E9PGrSOqYlQssb6o3cAP9ZeitoXSZl+dML4EnksJfzK9c0cViH8a1GUP4TUkGGBy
BVY8DnVMv8pM4g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:53 2025 by rpki-client