Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier: a2R97GgQCbdo5RGxaRKJf0826iZB4BDwm8Gvnw92BsA=
Subject key identifier: F0:2C:CF:38:CB:6A:C0:4F:37:7D:86:9A:42:7D:D0:33:D5:0F:E2:D6
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial: 019A57C09AB7CA2697282621E4671B204D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number: 0B7B
Signing time: Thu 06 Nov 2025 06:00:31 +0000
Manifest this update: Thu 06 Nov 2025 06:00:31 +0000
Manifest next update: Fri 07 Nov 2025 06:00:31 +0000
Files and hashes: 1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: cOqX942ZjgDxM1yCLxtKpJxIHHOsO6a8MsWNPk1Dx4s=)
2: dKbYijsCo6cz-c8VDyBQbX6KvIQ.roa (hash: s+UDqFCEg39f4gk9fs9ZUXaGmiKaVpMOQ/J8CYcOuY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:c0:9a:b7:ca:26:97:28:26:21:e4:67:1b:20:4d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Validity
Not Before: Nov 6 06:00:31 2025 GMT
Not After : Nov 7 06:00:31 2025 GMT
Subject: CN=f02ccf38cb6ac04f377d869a427dd033d50fe2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:f1:d0:6a:a8:19:6a:4e:f5:46:c9:ce:ed:
55:92:52:be:64:af:58:3d:27:15:82:98:24:e5:b8:
34:0f:c4:42:05:6d:22:78:7f:70:19:65:02:32:43:
fb:83:9a:90:a3:4c:a4:0b:c5:6c:86:fb:77:4d:d4:
54:fd:bd:f7:35:ee:ee:1d:b5:a9:07:da:96:79:01:
86:04:f4:f6:d4:5d:86:c9:3e:cf:55:4d:39:0f:33:
33:4d:ac:ab:e3:c8:86:5c:64:42:60:8a:66:7b:43:
3f:c1:93:c4:02:b2:5c:2a:b6:64:14:b2:cf:ed:8c:
5e:f3:43:55:b3:a8:63:a7:92:1a:c7:95:b1:5c:1c:
2c:cc:60:80:2f:10:a0:3b:72:7d:6a:dd:78:d4:b0:
fe:51:a8:79:53:92:23:0c:5a:26:73:16:84:cf:f6:
e9:9c:7d:1f:37:f8:07:b6:f8:cd:61:9f:5b:54:e0:
68:97:6f:23:0a:bb:2a:a4:ed:57:47:e3:4b:e6:69:
dc:23:d3:fb:04:d2:17:fd:c7:49:e4:88:95:dc:cd:
b6:c8:a0:db:2a:27:0c:43:1d:48:22:96:1a:56:33:
80:c1:21:91:c8:9f:31:5b:0a:f0:32:32:30:15:37:
34:0f:52:03:d3:bb:20:4d:9f:94:54:d0:fe:23:14:
fd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2C:CF:38:CB:6A:C0:4F:37:7D:86:9A:42:7D:D0:33:D5:0F:E2:D6
X509v3 Authority Key Identifier:
keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:3c:40:9d:6d:6d:f9:b6:db:b0:06:a7:22:fb:c8:8b:32:e4:
39:78:c8:5d:2d:84:e8:2b:7b:4c:16:b5:c9:5d:71:a0:7e:ae:
f7:85:22:a1:ed:e4:45:2e:24:a4:92:32:c7:f1:31:dc:54:ec:
fb:30:92:61:7d:e8:f7:7d:85:35:70:6c:f2:fc:85:de:cc:d0:
9a:c1:f7:2b:f0:eb:e5:6f:07:3d:82:f2:07:59:45:f4:c8:7a:
4c:da:d2:c6:3a:49:ab:80:79:8c:4d:b2:8e:85:2f:0d:b3:e6:
16:07:aa:28:88:36:a0:40:50:01:f1:97:10:5e:86:78:e3:19:
9b:f3:90:da:05:71:48:04:d1:89:ea:a3:3a:62:65:50:44:f9:
60:7a:4c:0c:f9:bc:a8:c8:d2:af:80:7f:e0:ac:d0:67:2c:45:
46:ac:a3:aa:d5:a9:0d:c5:36:7d:e4:1d:2c:9e:c0:b3:21:40:
1e:9c:94:44:3f:ab:22:fe:19:e3:dd:d5:ba:54:34:80:1c:09:
40:88:ef:e6:b2:d7:e0:52:f9:b6:0e:2c:6e:2a:8c:ac:a1:9f:
a2:97:62:8a:c1:41:33:d9:3d:ad:23:46:c1:26:8b:69:99:40:
f9:f2:ea:e5:99:6f:c3:34:3a:91:93:38:74:1a:83:ac:8f:23:
8d:3f:7d:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpXwJq3yiaXKCYh5GcbIE19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOWMzMDM5OWY2Mzg1NTVmNGMwMmU4ZDFiNTViYzkyNzIy
NWNiNTEwHhcNMjUxMTA2MDYwMDMxWhcNMjUxMTA3MDYwMDMxWjAzMTEwLwYDVQQD
EyhmMDJjY2YzOGNiNmFjMDRmMzc3ZDg2OWE0MjdkZDAzM2Q1MGZlMmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskrx0GqoGWpO9UbJzu1VklK+ZK9Y
PScVgpgk5bg0D8RCBW0ieH9wGWUCMkP7g5qQo0ykC8Vshvt3TdRU/b33Ne7uHbWp
B9qWeQGGBPT21F2GyT7PVU05DzMzTayr48iGXGRCYIpme0M/wZPEArJcKrZkFLLP
7Yxe80NVs6hjp5Iax5WxXBwszGCALxCgO3J9at141LD+Uah5U5IjDFomcxaEz/bp
nH0fN/gHtvjNYZ9bVOBol28jCrsqpO1XR+NL5mncI9P7BNIX/cdJ5IiV3M22yKDb
KicMQx1IIpYaVjOAwSGRyJ8xWwrwMjIwFTc0D1ID07sgTZ+UVND+IxT91QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAszzjLasBPN32GmkJ90DPVD+LWMB8GA1UdIwQY
MBaAFN2cMDmfY4VV9MAujRtVvJJyJctRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTIt
MGU1MTQwNjJjNTkwLzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTItMGU1MTQwNjJjNTkw
LzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDxAnW1t
+bbbsAanIvvIizLkOXjIXS2E6Ct7TBa1yV1xoH6u94Uioe3kRS4kpJIyx/Ex3FTs
+zCSYX3o932FNXBs8vyF3szQmsH3K/Dr5W8HPYLyB1lF9Mh6TNrSxjpJq4B5jE2y
joUvDbPmFgeqKIg2oEBQAfGXEF6GeOMZm/OQ2gVxSATRieqjOmJlUET5YHpMDPm8
qMjSr4B/4KzQZyxFRqyjqtWpDcU2feQdLJ7AsyFAHpyURD+rIv4Z493VulQ0gBwJ
QIjv5rLX4FL5tg4sbiqMrKGfopdiisFBM9k9rSNGwSaLaZlA+fLq5ZlvwzQ6kZM4
dBqDrI8jjT99wQ==
-----END CERTIFICATE-----
Generated at Thu Nov 6 09:25:23 2025 by rpki-client