Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
File: 3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json)
Hash identifier: daL0BHk8IS/fpZ8dViKr4+5HpMdy9ENrO0YJixMYlIc=
Subject key identifier: 23:1F:C6:57:E8:5C:FD:B3:C5:C3:09:C9:37:D5:10:62:C0:3B:29:E0
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Certificate issuer: /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial: 019A4F627C025EB5C35FE2E5211BFF3DC71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 15:00:45 +0000
Manifest this update: Tue 04 Nov 2025 15:00:45 +0000
Manifest next update: Wed 05 Nov 2025 15:00:45 +0000
Files and hashes: 1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: gZWBVMk4z0S9+NyDXNDvKxA521fGtJUwRxyVwAoXoQ4=)
2: 7qgaiTo5W1muFdP6MpWa1opzbS0.roa (hash: oB/3LoyawIAIuZTlw98KM6WEQJoxwvB9mX5CJlG5Qkc=)
3: 85dcB4vHUu_Vy4eqlKOzrmW4Olg.roa (hash: d3YRcy8kGOgyIH2+yoyF6a5JQlRH1WTLZygkMizzc7U=)
4: 8ev_3ecaOE9Xy6P1NIXqcQLzweI.roa (hash: Zj+FSqlWF1bKg6ErvNytlDkNslmJzZbU8Tq384TdAl4=)
5: LRmAFx6q6erwroYFlG8E6BiVohg.roa (hash: bRtBOx3Fb0WsS33nQsn4XTP0KNTUlQXCLuBYDXQSf/k=)
6: onA5Qj1rH9MGyVQYHgNFggbjtjI.roa (hash: KWPiO4cF+XLCzdYsua/SReatJ6Kfy0LyhbM0N7V5zn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:7c:02:5e:b5:c3:5f:e2:e5:21:1b:ff:3d:c7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Validity
Not Before: Nov 4 15:00:45 2025 GMT
Not After : Nov 5 15:00:45 2025 GMT
Subject: CN=231fc657e85cfdb3c5c309c937d51062c03b29e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:a9:ef:31:3e:fe:a3:2e:e7:ed:58:34:a4:
2b:96:4d:cb:34:2c:0e:02:00:24:10:f6:1f:e1:14:
70:cf:ac:12:af:1b:c6:0b:51:bd:d4:58:c1:d4:5d:
b2:68:2a:74:9b:8b:47:7e:b2:3d:6b:a9:a0:3c:98:
b8:f0:90:af:89:4d:50:78:9c:0c:f2:fc:d6:d8:97:
b3:e6:f7:31:63:f7:90:8b:10:fc:3e:83:75:2b:39:
a3:05:6e:ba:e7:04:72:ed:23:86:b8:2c:b7:5f:af:
0d:c9:1d:3f:d8:78:4c:45:cc:9e:87:62:ac:e8:80:
88:bf:c8:e7:62:a4:85:3c:e4:2b:d9:83:de:df:c6:
4c:10:4b:95:dd:b1:24:dc:01:7f:1b:cd:c4:6f:8b:
d9:7d:b9:d6:8c:72:db:d0:90:89:f0:82:51:c8:82:
0c:ff:6a:5f:4f:6c:a3:f9:be:81:08:2d:19:ad:3a:
d4:5e:99:87:eb:8e:84:20:eb:34:ce:fe:fd:32:05:
be:81:7d:ec:8e:96:a7:72:8b:6c:05:54:a1:7a:5f:
de:3b:e4:28:5a:5a:17:9e:d7:8c:ca:02:89:a2:45:
6d:33:15:60:28:5d:9d:4e:aa:19:03:94:20:d7:4e:
65:1d:65:e9:47:5e:02:0d:6e:80:c4:cf:0b:87:03:
e2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1F:C6:57:E8:5C:FD:B3:C5:C3:09:C9:37:D5:10:62:C0:3B:29:E0
X509v3 Authority Key Identifier:
keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8b:82:0f:e9:95:ee:f9:cc:ee:73:68:90:c4:4d:dc:1e:1f:
05:60:d2:8a:98:f3:f9:74:12:20:38:ee:8e:a7:20:6d:0b:61:
4f:d9:ea:88:20:93:cb:5a:6a:4d:8e:6e:48:04:63:33:81:eb:
d1:a6:e4:27:f0:12:fe:e3:06:08:53:96:b4:bf:40:41:1e:ec:
0f:68:5e:81:4d:2d:b6:fe:76:c1:60:80:7c:6e:cc:7d:09:14:
37:75:44:f9:a9:e2:b1:2c:f0:2d:8a:f7:e5:c7:a2:c1:01:09:
b8:66:6e:19:9e:52:e9:c3:3c:dd:26:a4:95:2c:41:f1:52:76:
c8:e2:a8:e8:81:ba:79:c2:cd:00:2f:9b:b5:d5:8f:d5:6b:3c:
51:03:ee:c3:17:12:29:29:59:3b:74:35:2f:ad:22:46:02:f3:
59:46:91:49:7a:54:ab:a0:de:16:9a:ae:6e:b1:5a:30:15:07:
e2:d0:fb:7e:40:f3:ab:c3:67:90:8e:6b:c5:2a:8d:3b:06:9e:
61:a1:7d:8e:40:a9:f4:1d:0a:bd:4e:72:35:d7:a7:60:f4:d4:
32:c2:27:7c:1d:b8:ed:f7:1f:35:86:51:ea:ac:b4:08:5d:c0:
f0:8f:97:7d:57:9a:66:55:4b:e6:a8:3a:d3:e1:83:ca:7f:9d:
27:de:7b:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYnwCXrXDX+LlIRv/PccdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMWZkMDA3ZGZmYTUwOGYzMDA2M2ZiZTRkNTNhMmIyZTFl
OGM0ZGUwHhcNMjUxMTA0MTUwMDQ1WhcNMjUxMTA1MTUwMDQ1WjAzMTEwLwYDVQQD
EygyMzFmYzY1N2U4NWNmZGIzYzVjMzA5YzkzN2Q1MTA2MmMwM2IyOWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGGp7zE+/qMu5+1YNKQrlk3LNCwO
AgAkEPYf4RRwz6wSrxvGC1G91FjB1F2yaCp0m4tHfrI9a6mgPJi48JCviU1QeJwM
8vzW2Jez5vcxY/eQixD8PoN1KzmjBW665wRy7SOGuCy3X68NyR0/2HhMRcyeh2Ks
6ICIv8jnYqSFPOQr2YPe38ZMEEuV3bEk3AF/G83Eb4vZfbnWjHLb0JCJ8IJRyIIM
/2pfT2yj+b6BCC0ZrTrUXpmH646EIOs0zv79MgW+gX3sjpancotsBVShel/eO+Qo
WloXnteMygKJokVtMxVgKF2dTqoZA5Qg105lHWXpR14CDW6AxM8LhwPiMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMfxlfoXP2zxcMJyTfVEGLAOyngMB8GA1UdIwQY
MBaAFNwf0Aff+lCPMAY/vk1TorLh6MTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMt
YWU0Yzk1Yzk0MDA1LzEvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMtYWU0Yzk1Yzk0MDA1
LzEvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZouCD+mV
7vnM7nNokMRN3B4fBWDSipjz+XQSIDjujqcgbQthT9nqiCCTy1pqTY5uSARjM4Hr
0abkJ/AS/uMGCFOWtL9AQR7sD2hegU0ttv52wWCAfG7MfQkUN3VE+anisSzwLYr3
5ceiwQEJuGZuGZ5S6cM83SaklSxB8VJ2yOKo6IG6ecLNAC+btdWP1Ws8UQPuwxcS
KSlZO3Q1L60iRgLzWUaRSXpUq6DeFpqubrFaMBUH4tD7fkDzq8NnkI5rxSqNOwae
YaF9jkCp9B0KvU5yNdenYPTUMsInfB247fcfNYZR6qy0CF3A8I+XfVeaZlVL5qg6
0+GDyn+dJ957WA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:25 2025 by rpki-client