Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
File: bb3coKsuvouFKafJzh3W6OpVXD0.mft (raw, json)
Hash identifier: Vyi8yjq9McvndcAN02pGvc6HlJ9pHLXe6dWm/xRfRBg=
Subject key identifier: 56:6E:67:83:51:AB:00:02:22:68:5E:50:F5:28:94:02:B0:7D:5A:E7
Authority key identifier: 6D:BD:DC:A0:AB:2E:BE:8B:85:29:A7:C9:CE:1D:D6:E8:EA:55:5C:3D
Certificate issuer: /CN=6dbddca0ab2ebe8b8529a7c9ce1dd6e8ea555c3d
Certificate serial: 019A4EF5C4C04F73BF7EF5EC4223FD5CEA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
Manifest number: 12A4
Signing time: Tue 04 Nov 2025 13:02:00 +0000
Manifest this update: Tue 04 Nov 2025 13:02:00 +0000
Manifest next update: Wed 05 Nov 2025 13:02:00 +0000
Files and hashes: 1: 3CFsdbO_NdkVNQKrJjhbIF4SBso.roa (hash: R9TEphKFrn4GbHRX9svL6mjGOOWCjifpYgOEm5Ktk3o=)
2: bb3coKsuvouFKafJzh3W6OpVXD0.crl (hash: /ILOU+giulEkC/AW+K7ASBLYbTGeianPR9fulVrAgJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c4:c0:4f:73:bf:7e:f5:ec:42:23:fd:5c:ea:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbddca0ab2ebe8b8529a7c9ce1dd6e8ea555c3d
Validity
Not Before: Nov 4 13:02:00 2025 GMT
Not After : Nov 5 13:02:00 2025 GMT
Subject: CN=566e678351ab000222685e50f5289402b07d5ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:f0:99:8c:a4:71:b1:05:1d:30:19:f7:2d:
a6:33:06:46:e2:93:72:92:d1:68:8c:77:85:07:5e:
d7:ef:12:17:f5:fa:50:43:38:98:4d:91:f3:20:be:
c4:ba:64:67:38:00:e1:aa:66:ca:82:7a:88:a8:1a:
2d:39:ea:8e:7c:c5:33:04:5a:be:c9:70:0d:36:3e:
9d:60:be:87:d2:8d:61:68:75:a1:8c:85:c6:ee:b7:
6a:21:45:98:e0:db:92:c5:36:46:6c:d2:53:51:68:
fe:d3:a7:72:45:58:65:11:e9:16:b7:34:fb:a5:8b:
6e:75:0c:3c:0f:9c:24:69:32:e3:79:d9:1e:ca:ab:
ea:87:8b:8e:24:4f:87:54:61:8b:6b:00:34:cb:2a:
5a:2b:75:eb:63:4a:15:7b:2d:69:15:5c:5b:20:8e:
c8:22:98:6b:8d:f5:d3:36:36:03:d2:ea:b6:ca:ce:
8a:a5:d5:da:35:66:0a:8a:f5:4e:e8:35:74:1d:d5:
c9:4d:ad:42:c9:89:30:91:93:0c:bb:a3:73:71:83:
49:6b:09:23:1b:e6:4a:97:c6:2d:52:2a:b8:a9:ce:
64:49:c2:54:99:c0:45:6c:91:4b:3a:9b:01:64:cd:
0a:05:d6:a0:30:f0:a2:17:b2:b8:6e:47:2c:64:c3:
af:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6E:67:83:51:AB:00:02:22:68:5E:50:F5:28:94:02:B0:7D:5A:E7
X509v3 Authority Key Identifier:
keyid:6D:BD:DC:A0:AB:2E:BE:8B:85:29:A7:C9:CE:1D:D6:E8:EA:55:5C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f9:01:a7:58:92:ce:42:35:ea:4b:bb:7c:a7:ea:ed:59:f2:
41:14:6e:bc:64:7e:ed:65:3c:0c:82:67:be:1b:29:7d:0c:44:
30:0b:7e:9b:b9:67:36:52:3c:2a:e0:87:15:83:48:b3:82:ca:
5e:91:89:39:cd:09:ae:e5:ca:c7:28:95:a6:4e:29:19:da:99:
7d:cd:be:03:9f:ac:04:f5:5c:c2:0a:3f:b9:ff:0c:fb:97:80:
09:35:cd:78:51:31:6c:63:40:43:8c:2c:ef:7e:ac:42:b9:dc:
36:50:1a:3e:18:87:37:c1:1a:df:62:1b:0b:9b:0b:72:4a:50:
8a:5f:93:0f:19:51:53:2f:c2:73:7f:90:29:d7:4f:82:ba:14:
4d:3b:99:05:61:c6:a0:c4:53:60:1d:2b:c6:3d:ab:b2:f2:cc:
7c:a3:97:3e:c5:2b:3b:a1:93:ad:27:5f:cb:e3:86:2e:22:14:
cf:85:ad:c8:cd:34:80:5d:46:bc:4e:eb:2a:f8:a4:fd:5e:43:
ff:9a:05:86:34:dd:1b:ba:3f:2b:6c:c3:09:0a:ac:dd:56:cd:
fd:35:36:fe:33:e0:cd:3b:95:d8:72:7e:61:8e:a5:c2:ec:6e:
72:f5:0c:34:b0:a9:a1:eb:e8:a7:51:2e:2a:d5:4a:5c:65:0d:
25:c3:41:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9cTAT3O/fvXsQiP9XOqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYmRkY2EwYWIyZWJlOGI4NTI5YTdjOWNlMWRkNmU4ZWE1
NTVjM2QwHhcNMjUxMTA0MTMwMjAwWhcNMjUxMTA1MTMwMjAwWjAzMTEwLwYDVQQD
Eyg1NjZlNjc4MzUxYWIwMDAyMjI2ODVlNTBmNTI4OTQwMmIwN2Q1YWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxobwmYykcbEFHTAZ9y2mMwZG4pNy
ktFojHeFB17X7xIX9fpQQziYTZHzIL7EumRnOADhqmbKgnqIqBotOeqOfMUzBFq+
yXANNj6dYL6H0o1haHWhjIXG7rdqIUWY4NuSxTZGbNJTUWj+06dyRVhlEekWtzT7
pYtudQw8D5wkaTLjedkeyqvqh4uOJE+HVGGLawA0yypaK3XrY0oVey1pFVxbII7I
IphrjfXTNjYD0uq2ys6KpdXaNWYKivVO6DV0HdXJTa1CyYkwkZMMu6NzcYNJawkj
G+ZKl8YtUiq4qc5kScJUmcBFbJFLOpsBZM0KBdagMPCiF7K4bkcsZMOvRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZuZ4NRqwACImheUPUolAKwfVrnMB8GA1UdIwQY
MBaAFG293KCrLr6LhSmnyc4d1ujqVVw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmIzY29Lc3V2b3VGS2FmSnpoM1c2T3BWWEQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83M2U3OGUtNDVjZi00NWYwLTgyYmYt
MzlmZDNjYTc2Y2Q2LzEvYmIzY29Lc3V2b3VGS2FmSnpoM1c2T3BWWEQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83M2U3OGUtNDVjZi00NWYwLTgyYmYtMzlmZDNjYTc2Y2Q2
LzEvYmIzY29Lc3V2b3VGS2FmSnpoM1c2T3BWWEQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifkBp1iS
zkI16ku7fKfq7VnyQRRuvGR+7WU8DIJnvhspfQxEMAt+m7lnNlI8KuCHFYNIs4LK
XpGJOc0JruXKxyiVpk4pGdqZfc2+A5+sBPVcwgo/uf8M+5eACTXNeFExbGNAQ4ws
736sQrncNlAaPhiHN8Ea32IbC5sLckpQil+TDxlRUy/Cc3+QKddPgroUTTuZBWHG
oMRTYB0rxj2rsvLMfKOXPsUrO6GTrSdfy+OGLiIUz4WtyM00gF1GvE7rKvik/V5D
/5oFhjTdG7o/K2zDCQqs3VbN/TU2/jPgzTuV2HJ+YY6lwuxucvUMNLCpoevop1Eu
KtVKXGUNJcNBNw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:29:28 2025 by rpki-client