Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier: lelZVCr9fxlZRiys1J4VWh93D1l4CTRnTF7H3XTsxJE=
Subject key identifier: A8:09:ED:62:26:23:34:0A:E2:9B:55:E6:94:66:19:DB:74:D1:DA:F2
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 019A50E2F41C2D5709CD5A86584252D9B093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number: 0DA2
Signing time: Tue 04 Nov 2025 22:00:42 +0000
Manifest this update: Tue 04 Nov 2025 22:00:42 +0000
Manifest next update: Wed 05 Nov 2025 22:00:42 +0000
Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: 0Wqg3w1P2dq3iXoJBycNpebD2iIwuKdS6/m8aQv8D/w=)
2: 8miIDeBQxB0aKJY-TlsIuuJ2hww.roa (hash: mQmM8Cjnfx5WSvhPSj11m+hm6JvBiNUtIRExWbof9J8=)
3: IRGnT1eQmUBmgR6_xtusELr-83s.roa (hash: dJ3+bDwzY4UO43kbNXGDeFrUEwRtOB0R3J1TQjuxqCQ=)
4: aw3P8V17V992wZUulFnFkkVrMmo.roa (hash: O9AIELr13JUWTjKqPnJ8lbjYgl5+VRQqDU69j3HTMwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:f4:1c:2d:57:09:cd:5a:86:58:42:52:d9:b0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: Nov 4 22:00:42 2025 GMT
Not After : Nov 5 22:00:42 2025 GMT
Subject: CN=a809ed622623340ae29b55e6946619db74d1daf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:34:6f:28:54:ec:9f:62:ba:d4:a0:de:92:
7c:d3:10:24:d8:5b:1e:ea:5d:82:2e:50:8f:9f:c7:
31:9c:34:cd:e1:1d:c7:3a:3d:9e:1a:20:95:c7:90:
30:46:d3:dd:e4:94:3a:98:1c:37:23:f0:2c:85:bd:
e8:1b:0d:7c:ef:eb:66:fd:a9:8e:26:d9:b5:5e:85:
5f:16:18:ee:2d:e8:38:a8:24:aa:05:20:51:d2:18:
b6:ab:04:29:9e:41:cb:94:4a:75:f8:58:d0:12:5f:
eb:5f:9b:94:34:c4:84:e1:8c:39:65:b7:6f:1a:3f:
93:73:54:c2:89:d7:fa:ab:95:16:39:96:6d:1a:a8:
85:73:d9:53:54:17:2a:fe:b5:c3:17:1e:e8:26:b7:
dd:46:a3:80:f7:ab:8d:f0:49:58:64:ec:8b:6d:20:
04:7a:10:a3:3e:76:e0:80:9c:11:10:28:f8:8f:15:
d1:ec:90:c3:57:0e:6a:6b:7c:03:89:fb:50:b8:cd:
0f:a0:cc:de:3a:cd:33:c2:69:8c:92:3b:b1:3f:49:
e8:93:a0:a1:55:1e:a7:cd:3e:15:60:03:33:6e:1c:
bc:48:1f:94:af:06:b7:5c:59:e2:47:85:00:2f:fe:
c6:0f:ae:9d:d8:05:a7:14:66:e9:1a:d7:a1:6d:df:
53:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:09:ED:62:26:23:34:0A:E2:9B:55:E6:94:66:19:DB:74:D1:DA:F2
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5b:f7:66:5d:af:1d:e7:c4:40:1c:a1:a3:f3:0d:0a:40:d1:
e8:c7:eb:1c:f4:5a:80:07:04:99:9e:a5:e4:99:4d:e7:31:c9:
7a:66:a9:cb:e2:5a:55:ee:23:88:91:2b:67:19:4e:f5:19:f6:
d6:a4:fe:a2:16:1e:da:e4:6d:bb:b0:1f:00:87:0a:61:b0:9f:
28:b0:c9:b3:33:32:49:81:44:82:9d:b1:c1:6e:8c:31:17:42:
2d:b1:50:92:02:6b:0b:7b:23:a5:e0:a8:4b:9c:71:d9:ae:60:
d6:b0:8b:0d:ac:15:26:15:d7:54:1b:f2:b3:e6:ab:53:ca:14:
b7:66:9e:6a:08:ab:70:83:10:73:b8:e5:c7:90:85:cb:3d:65:
15:dc:4d:71:87:c2:85:19:f5:c5:a7:d4:bc:73:52:33:40:f7:
a3:c9:c9:13:1b:23:87:93:c7:2b:c1:91:72:32:cd:47:05:4a:
d5:ff:b3:e1:94:7a:d0:a1:e4:14:d0:78:92:bf:58:35:79:5a:
77:aa:cd:dd:e4:49:ee:eb:d3:d2:e3:53:eb:6d:c5:80:91:66:
c4:01:3d:ee:34:ac:76:a7:a1:d2:3b:fc:53:c9:9d:34:6a:1a:
ea:62:2b:dd:3c:d1:04:ac:04:e3:d1:de:88:da:c7:8b:16:6a:
e8:1a:1e:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4vQcLVcJzVqGWEJS2bCTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYjcxNDcxMzczYmIwNjAzYzM1NmVlZGVkNGI5MTgyOTJi
NWJlZWUwHhcNMjUxMTA0MjIwMDQyWhcNMjUxMTA1MjIwMDQyWjAzMTEwLwYDVQQD
EyhhODA5ZWQ2MjI2MjMzNDBhZTI5YjU1ZTY5NDY2MTlkYjc0ZDFkYWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5g0byhU7J9iutSg3pJ80xAk2Fse
6l2CLlCPn8cxnDTN4R3HOj2eGiCVx5AwRtPd5JQ6mBw3I/Ashb3oGw187+tm/amO
Jtm1XoVfFhjuLeg4qCSqBSBR0hi2qwQpnkHLlEp1+FjQEl/rX5uUNMSE4Yw5Zbdv
Gj+Tc1TCidf6q5UWOZZtGqiFc9lTVBcq/rXDFx7oJrfdRqOA96uN8ElYZOyLbSAE
ehCjPnbggJwRECj4jxXR7JDDVw5qa3wDiftQuM0PoMzeOs0zwmmMkjuxP0nok6Ch
VR6nzT4VYAMzbhy8SB+Urwa3XFniR4UAL/7GD66d2AWnFGbpGtehbd9TqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgJ7WImIzQK4ptV5pRmGdt00dryMB8GA1UdIwQY
MBaAFN23FHE3O7BgPDVu7e1LkYKStb7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgt
NjIxMmFjNDljYTNiLzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgtNjIxMmFjNDljYTNi
LzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFv3Zl2v
HefEQByho/MNCkDR6MfrHPRagAcEmZ6l5JlN5zHJemapy+JaVe4jiJErZxlO9Rn2
1qT+ohYe2uRtu7AfAIcKYbCfKLDJszMySYFEgp2xwW6MMRdCLbFQkgJrC3sjpeCo
S5xx2a5g1rCLDawVJhXXVBvys+arU8oUt2aeagircIMQc7jlx5CFyz1lFdxNcYfC
hRn1xafUvHNSM0D3o8nJExsjh5PHK8GRcjLNRwVK1f+z4ZR60KHkFNB4kr9YNXla
d6rN3eRJ7uvT0uNT623FgJFmxAE97jSsdqeh0jv8U8mdNGoa6mIr3TzRBKwE49He
iNrHixZq6Boe5Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:20:03 2025 by rpki-client