Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
File: 3i6RcxXwqHiyH8E51JqCGq3cPJc.mft (raw, json)
Hash identifier: l+stLYGFBPuzsvoNHqHaqnJXn/AGdINPtenyPTWJzHI=
Subject key identifier: DA:B4:55:25:FD:BF:05:FB:A8:AB:F1:C2:69:3B:D1:3C:46:E2:0B:27
Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
Certificate issuer: /CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Certificate serial: 019A4F2B8A2DDAD279DBBCC85B5E81630F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
Manifest number: 171E
Signing time: Tue 04 Nov 2025 14:00:44 +0000
Manifest this update: Tue 04 Nov 2025 14:00:44 +0000
Manifest next update: Wed 05 Nov 2025 14:00:44 +0000
Files and hashes: 1: 3i6RcxXwqHiyH8E51JqCGq3cPJc.crl (hash: VFNdIT+FGovCgxNAjOwTihtRhg2OLVAmmzy9JebZ8SU=)
2: A9hFHuB1KcT6sufWXb7Ip8uski0.roa (hash: il6x3CO5f44reEoXrVw6CoxKeHuPAxsUHCAYCbpYXXA=)
3: AvB8ANlawjDpzo5pEv-ozc274As.roa (hash: JAMHGl8FA3FqoIkdY9hmqgyAMGPXFfGq49FOeMqcpDU=)
4: P4Cb5oaFevIjC5s1wM4Yzi97PJE.roa (hash: 3Ogb5mf4rx+IYcLkaQHDj7kY0bKNooxxAV2yrkt6glM=)
5: yytkDg390wURQAs45MKB5G-EL9Y.roa (hash: Zh5YMYHrmE+MJNbhijbyZkT5VrFHROVfxZElaGb2ngI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:8a:2d:da:d2:79:db:bc:c8:5b:5e:81:63:0f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Validity
Not Before: Nov 4 14:00:44 2025 GMT
Not After : Nov 5 14:00:44 2025 GMT
Subject: CN=dab45525fdbf05fba8abf1c2693bd13c46e20b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cb:d0:09:5a:ed:c0:cd:99:b8:88:eb:86:05:
b9:26:7e:fa:34:19:51:8c:30:2b:39:72:43:94:a1:
22:47:37:08:73:53:4b:03:7d:a7:6f:46:c9:ce:38:
d5:fd:ef:fc:ca:98:6c:24:25:be:d7:77:57:1e:28:
d7:84:2c:60:88:51:b3:97:1f:f8:c0:05:61:66:70:
d4:82:9f:6e:a6:02:20:d2:4e:67:30:8c:e7:a2:1a:
df:c0:9d:15:28:28:d8:96:1b:9b:1d:2b:e1:3b:73:
f3:2f:14:f9:d7:84:55:af:53:e5:47:50:a3:98:fe:
91:67:e6:0e:53:f2:e5:80:8e:28:fe:6e:21:ad:54:
14:8e:42:79:50:44:47:c0:f5:05:cc:a8:a9:40:d2:
86:19:f4:da:34:58:17:be:14:53:2b:96:50:58:48:
89:c9:b7:ef:db:4e:44:47:cc:70:69:bf:2f:d0:0a:
61:67:c7:c3:d6:6d:96:60:3c:19:12:b2:41:67:1c:
5e:39:be:a6:61:bb:24:bc:72:57:0a:01:b6:d3:f5:
50:53:6b:70:fa:1b:9c:93:6b:30:93:3c:0b:19:6b:
c7:7d:60:07:f4:02:e9:e2:80:e0:9d:3b:e7:cb:0d:
b2:04:fc:06:ca:ad:02:84:0b:43:94:4b:32:28:d7:
57:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B4:55:25:FD:BF:05:FB:A8:AB:F1:C2:69:3B:D1:3C:46:E2:0B:27
X509v3 Authority Key Identifier:
keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ff:fe:8f:ae:12:85:ba:55:bd:2a:72:d7:f2:e3:22:fd:5e:
5c:7d:32:c3:9b:8d:99:25:ff:60:d2:64:e5:33:04:a4:b6:1f:
2a:a4:e0:44:17:c9:e4:7c:49:21:1d:85:76:57:18:82:22:c8:
a8:1c:c6:bd:fb:ab:77:a8:5d:a2:7b:bb:20:c5:0b:94:0c:7f:
8f:9b:62:14:b3:f7:48:ad:37:a0:01:fe:11:39:56:d1:5e:a6:
4b:34:92:73:3e:27:10:84:06:ec:d0:41:a2:31:45:8b:52:d2:
60:e4:e3:e1:65:dc:d8:95:ae:5b:ed:fc:6c:2c:b3:e4:26:f4:
8e:66:40:fc:64:75:e4:18:98:9f:fd:87:13:1e:79:8e:b1:a8:
ea:53:1b:c8:3d:eb:f5:44:e5:34:7b:70:d3:79:4b:8c:ff:19:
02:4e:1e:c3:12:84:9f:de:99:00:e8:b1:a5:ae:82:ce:8b:67:
6c:ee:62:7a:16:eb:9b:ee:3e:bd:70:d1:30:a6:3c:0d:ce:d3:
16:14:29:56:c3:d4:84:60:3b:19:fe:a1:ba:09:fd:d7:75:9b:
2f:f9:e8:0e:37:37:dd:a1:5a:73:a0:63:2d:9d:19:48:2f:4d:
c4:13:88:ee:79:fe:b5:88:20:e2:98:33:3e:08:df:b6:f8:de:
02:27:a9:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK4ot2tJ527zIW16BYw8DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMmU5MTczMTVmMGE4NzhiMjFmYzEzOWQ0OWE4MjFhYWRk
YzNjOTcwHhcNMjUxMTA0MTQwMDQ0WhcNMjUxMTA1MTQwMDQ0WjAzMTEwLwYDVQQD
EyhkYWI0NTUyNWZkYmYwNWZiYThhYmYxYzI2OTNiZDEzYzQ2ZTIwYjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8vQCVrtwM2ZuIjrhgW5Jn76NBlR
jDArOXJDlKEiRzcIc1NLA32nb0bJzjjV/e/8yphsJCW+13dXHijXhCxgiFGzlx/4
wAVhZnDUgp9upgIg0k5nMIznohrfwJ0VKCjYlhubHSvhO3PzLxT514RVr1PlR1Cj
mP6RZ+YOU/LlgI4o/m4hrVQUjkJ5UERHwPUFzKipQNKGGfTaNFgXvhRTK5ZQWEiJ
ybfv205ER8xwab8v0AphZ8fD1m2WYDwZErJBZxxeOb6mYbskvHJXCgG20/VQU2tw
+huck2swkzwLGWvHfWAH9ALp4oDgnTvnyw2yBPwGyq0ChAtDlEsyKNdXJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNq0VSX9vwX7qKvxwmk70TxG4gsnMB8GA1UdIwQY
MBaAFN4ukXMV8Kh4sh/BOdSaghqt3DyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yZDViYzgtNWQ5My00YjBhLWE4YjYt
ZjhkNjVjOTgzNzQ0LzEvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yZDViYzgtNWQ5My00YjBhLWE4YjYtZjhkNjVjOTgzNzQ0
LzEvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAf/+j64S
hbpVvSpy1/LjIv1eXH0yw5uNmSX/YNJk5TMEpLYfKqTgRBfJ5HxJIR2FdlcYgiLI
qBzGvfurd6hdonu7IMULlAx/j5tiFLP3SK03oAH+ETlW0V6mSzSScz4nEIQG7NBB
ojFFi1LSYOTj4WXc2JWuW+38bCyz5Cb0jmZA/GR15BiYn/2HEx55jrGo6lMbyD3r
9UTlNHtw03lLjP8ZAk4ewxKEn96ZAOixpa6CzotnbO5iehbrm+4+vXDRMKY8Dc7T
FhQpVsPUhGA7Gf6hugn913WbL/noDjc33aFac6BjLZ0ZSC9NxBOI7nn+tYgg4pgz
PgjftvjeAiepUw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:36 2025 by rpki-client